Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3wQZDhePMo15xSSUHtvhgP7P5d1Rc5NopbszNmu4xZ3E/0/323830343a336566303a653130333a3a2f34382d3438203d3e20323636363330.roa
File:                     323830343a336566303a653130333a3a2f34382d3438203d3e20323636363330.roa (raw, json)
Hash identifier:          6ttJx3nq7nEio/794diisxci6/u0DX9qM+l/2y9VcNo=
Subject key identifier:   BD:03:A3:23:05:5C:0F:3E:52:6E:C4:A2:17:0D:42:C6:07:41:2F:F0
Certificate issuer:       /CN=8FD98CD8D57D4B254EF5B2B6D7C46F6B0026369F
Certificate serial:       6A9BE8B3376EB9CE08AC8BAA6E92C8C8AF7BBB95
Authority key identifier: 8F:D9:8C:D8:D5:7D:4B:25:4E:F5:B2:B6:D7:C4:6F:6B:00:26:36:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FD98CD8D57D4B254EF5B2B6D7C46F6B0026369F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3wQZDhePMo15xSSUHtvhgP7P5d1Rc5NopbszNmu4xZ3E/0/323830343a336566303a653130333a3a2f34382d3438203d3e20323636363330.roa
Signing time:             Thu 27 Jul 2023 23:05:20 +0000
ROA not before:           Thu 27 Jul 2023 23:00:20 +0000
ROA not after:            Thu 25 Jul 2024 23:05:20 +0000
asID:                     266630
IP address blocks:        2804:3ef0:e103::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:9b:e8:b3:37:6e:b9:ce:08:ac:8b:aa:6e:92:c8:c8:af:7b:bb:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FD98CD8D57D4B254EF5B2B6D7C46F6B0026369F
        Validity
            Not Before: Jul 27 23:00:20 2023 GMT
            Not After : Jul 25 23:05:20 2024 GMT
        Subject: CN=BD03A323055C0F3E526EC4A2170D42C607412FF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b3:68:0e:32:3c:30:5a:45:d7:70:f7:05:5f:
                    4c:73:21:83:58:35:88:f6:1b:16:8d:3c:9a:44:e6:
                    b9:ca:2d:0c:a6:f8:1d:72:6e:98:59:e5:c9:ae:df:
                    6e:c6:9a:69:4e:ed:dc:f2:4b:58:b6:fb:44:68:3d:
                    80:62:26:b9:9b:f5:f1:68:3e:da:98:84:c5:97:20:
                    62:f9:4a:25:de:16:21:f2:e1:5f:f1:9c:3e:31:5b:
                    e9:7b:1d:a4:91:7f:5d:ad:84:d8:f3:83:59:a5:f4:
                    ad:f8:16:be:01:d0:8a:61:69:ca:fb:02:39:8c:be:
                    0d:9e:1e:bb:aa:44:3a:d1:c4:24:23:50:9a:fe:94:
                    5c:f1:78:55:4d:2e:e5:27:e3:6c:4d:61:b0:2c:4c:
                    11:c8:41:b8:6b:f3:d0:ff:e5:de:44:29:2d:47:e4:
                    c9:dc:ed:0a:d4:ea:45:3b:24:11:a1:fd:f7:f3:69:
                    78:92:43:c9:dd:7e:cd:39:4c:79:b7:b9:bb:a1:17:
                    c6:ed:c7:4f:71:3d:9d:f7:56:3d:ea:95:02:db:95:
                    0e:65:b7:ab:6c:fe:62:de:00:2d:a5:9d:a0:b6:a1:
                    c0:46:83:fa:3f:a7:17:aa:67:86:6b:53:84:aa:d6:
                    ce:82:d4:91:8f:cc:22:6a:e9:be:87:ab:03:c5:fa:
                    8d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:03:A3:23:05:5C:0F:3E:52:6E:C4:A2:17:0D:42:C6:07:41:2F:F0
            X509v3 Authority Key Identifier:
                keyid:8F:D9:8C:D8:D5:7D:4B:25:4E:F5:B2:B6:D7:C4:6F:6B:00:26:36:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3wQZDhePMo15xSSUHtvhgP7P5d1Rc5NopbszNmu4xZ3E/0/8FD98CD8D57D4B254EF5B2B6D7C46F6B0026369F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FD98CD8D57D4B254EF5B2B6D7C46F6B0026369F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3wQZDhePMo15xSSUHtvhgP7P5d1Rc5NopbszNmu4xZ3E/0/323830343a336566303a653130333a3a2f34382d3438203d3e20323636363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ef0:e103::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:04:1d:c9:f3:da:4b:d5:98:c8:90:6f:b5:47:67:b7:23:b8:
         4c:3b:37:e4:c1:f4:cf:55:3a:88:00:0f:7c:2f:47:84:23:02:
         55:21:87:2c:a6:a3:3d:b2:fd:a2:18:e1:bb:cb:bf:8b:85:97:
         42:b3:88:71:4c:e2:24:0d:40:e4:f6:7e:1e:b1:39:a5:23:37:
         ed:c1:d5:c2:f7:f3:cc:1e:93:b2:79:b8:a2:56:c2:fb:9f:26:
         5f:20:28:eb:8e:52:d1:e7:dd:d4:42:d3:84:58:4b:73:62:39:
         59:07:bf:eb:00:99:f3:01:54:2f:97:e0:66:76:63:98:51:c4:
         b0:1d:fe:5f:03:80:54:fa:e6:f3:81:85:20:55:4c:64:f4:dc:
         8d:ac:83:c2:2c:ae:4f:50:fa:2b:c5:d5:4a:03:6e:15:9c:14:
         2e:f6:bc:c0:5a:28:cd:95:60:42:6b:90:51:b1:df:7f:ce:54:
         99:b7:44:75:f9:08:8b:45:41:df:b9:81:44:ec:ee:b0:5e:e8:
         3c:bd:24:94:64:83:f1:33:61:32:8c:80:29:0b:11:49:d0:30:
         ec:74:f4:9b:e4:4b:28:b6:c7:69:93:e6:47:15:eb:30:79:03:
         6d:0d:7a:ca:5d:37:5b:64:11:85:fd:f2:02:93:27:a7:31:d9:
         17:92:b5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:27 2025 by rpki-client