Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3myiCfuxR9JMa88ZXBoym4EfdDnwmCGuBmmPyRmrCdSi/0/323830343a356638303a3a2f33322d3332203d3e20323639313034.roa
File:                     323830343a356638303a3a2f33322d3332203d3e20323639313034.roa (raw, json)
Hash identifier:          /5o8vMLNOp3zvgy4LmJBAwlnk9gn/AhFvGB3p2CAJ2Q=
Subject key identifier:   2A:C2:30:83:31:4A:39:3B:D3:FE:9C:7B:8C:DA:47:FB:03:2C:3E:41
Certificate issuer:       /CN=4404B5049A534CBCD9074A3AFB26A26276CF848B
Certificate serial:       1047ED896A6EF38C98AA7E58BA5FFC64246FB19A
Authority key identifier: 44:04:B5:04:9A:53:4C:BC:D9:07:4A:3A:FB:26:A2:62:76:CF:84:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4404B5049A534CBCD9074A3AFB26A26276CF848B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3myiCfuxR9JMa88ZXBoym4EfdDnwmCGuBmmPyRmrCdSi/0/323830343a356638303a3a2f33322d3332203d3e20323639313034.roa
Signing time:             Thu 03 Nov 2022 17:26:25 +0000
ROA not before:           Thu 03 Nov 2022 17:21:25 +0000
ROA not after:            Thu 02 Nov 2023 17:26:25 +0000
asID:                     269104
IP address blocks:        2804:5f80::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:47:ed:89:6a:6e:f3:8c:98:aa:7e:58:ba:5f:fc:64:24:6f:b1:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4404B5049A534CBCD9074A3AFB26A26276CF848B
        Validity
            Not Before: Nov  3 17:21:25 2022 GMT
            Not After : Nov  2 17:26:25 2023 GMT
        Subject: CN=2AC23083314A393BD3FE9C7B8CDA47FB032C3E41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0b:49:8c:2a:4e:92:26:68:55:8c:1b:5a:65:
                    86:de:1a:97:71:e3:ad:ae:e4:e9:4d:f8:75:2d:a0:
                    b9:1c:55:f9:cd:c8:45:c1:5b:95:4b:7f:e7:d8:9f:
                    82:e1:c3:de:f8:72:09:26:7f:7f:d8:89:8e:30:db:
                    d8:47:66:9b:8a:4a:cd:a2:f3:ec:45:2f:ce:c6:cb:
                    d0:f0:55:3a:69:7d:77:ab:a1:37:5a:71:9b:43:65:
                    c5:0d:f5:73:d5:a1:9b:58:1b:1b:f5:ea:57:b8:12:
                    e5:67:c9:f1:43:ec:c7:4b:8e:1b:ae:56:8c:7a:b8:
                    0b:58:0e:e2:91:82:2d:ae:cf:7b:59:66:57:46:e6:
                    2b:b7:f4:0b:81:64:aa:61:22:79:54:70:be:6a:9f:
                    5a:97:61:03:5b:ca:e9:8c:7b:1c:78:ad:58:62:61:
                    99:bb:7e:87:86:c7:f6:8f:3c:28:0b:f2:53:5c:b9:
                    8c:4c:af:14:75:da:d7:c0:fa:e6:d8:7f:33:f5:d5:
                    b4:ed:ba:fa:fe:79:d1:a0:4b:63:68:0f:16:a1:e8:
                    29:06:5f:88:40:46:52:a6:a7:79:12:f9:0e:e6:0a:
                    27:60:2e:e4:33:66:f2:bd:ec:87:aa:2a:19:81:23:
                    1c:f6:09:a6:b0:c8:a7:8a:87:00:63:2d:55:c2:4d:
                    9b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C2:30:83:31:4A:39:3B:D3:FE:9C:7B:8C:DA:47:FB:03:2C:3E:41
            X509v3 Authority Key Identifier:
                keyid:44:04:B5:04:9A:53:4C:BC:D9:07:4A:3A:FB:26:A2:62:76:CF:84:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3myiCfuxR9JMa88ZXBoym4EfdDnwmCGuBmmPyRmrCdSi/0/4404B5049A534CBCD9074A3AFB26A26276CF848B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4404B5049A534CBCD9074A3AFB26A26276CF848B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3myiCfuxR9JMa88ZXBoym4EfdDnwmCGuBmmPyRmrCdSi/0/323830343a356638303a3a2f33322d3332203d3e20323639313034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:d3:1b:65:5d:49:e5:3b:f6:6f:09:0d:78:bc:0b:9c:a5:11:
         4b:cf:10:05:59:b5:ab:56:ed:fc:c1:35:e6:a8:b3:92:0c:7b:
         0e:34:d4:9d:1d:0d:2d:48:ae:e6:91:78:78:32:f8:c8:62:52:
         c0:55:c0:52:48:a8:a6:2d:c4:1c:f5:3e:cb:d3:da:7f:24:f1:
         84:af:a4:0f:cc:5c:e0:7c:8f:9d:42:7c:db:02:d6:52:f7:4b:
         58:f9:ee:58:a8:98:83:6e:b3:97:8e:cd:91:75:a8:71:f9:19:
         bb:52:38:94:78:7a:47:16:8f:88:a0:f9:52:d8:5a:d6:c7:52:
         1d:d8:ea:4f:bc:e7:71:8d:9f:e3:f2:95:11:40:8a:85:84:d9:
         bc:96:72:d4:ab:ca:ae:c0:a7:0b:be:25:6f:0f:c3:c8:b4:4b:
         7e:65:ac:02:39:2d:a0:94:62:7b:e3:7e:fb:54:fc:18:67:ea:
         b8:2f:ad:9a:e0:37:5a:16:76:4b:32:bd:97:2c:e7:84:09:d7:
         94:fc:c4:9d:dc:80:48:c3:17:04:26:8e:dd:c9:6f:bd:6a:22:
         f6:14:46:51:4d:cc:01:af:1b:11:46:29:ee:34:96:3f:26:f0:
         b9:51:fb:34:8d:96:39:2f:96:d8:7a:78:83:33:ec:c0:91:94:
         32:85:d0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:36:19 2025 by rpki-client