Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44L5mqFbmPQ4e5WPfNQEJUvK3QQZ9VZSJcm4mMHTAis3/0/323830343a376362633a3a2f33322d3332203d3e20323731353135.roa
File:                     323830343a376362633a3a2f33322d3332203d3e20323731353135.roa (raw, json)
Hash identifier:          3+jYsLcr7vzhDMHWcXBpZrnZtS5y7G/IEhwrNzjptdI=
Subject key identifier:   04:35:5B:C4:D9:CC:1E:71:20:13:F9:C1:55:52:94:0A:34:10:40:C3
Certificate issuer:       /CN=C966BFE75D740DECD5CC886F943F0FBC4390193F
Certificate serial:       0D264B916F51B9A6B425382C323153620D94ED5D
Authority key identifier: C9:66:BF:E7:5D:74:0D:EC:D5:CC:88:6F:94:3F:0F:BC:43:90:19:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C966BFE75D740DECD5CC886F943F0FBC4390193F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44L5mqFbmPQ4e5WPfNQEJUvK3QQZ9VZSJcm4mMHTAis3/0/323830343a376362633a3a2f33322d3332203d3e20323731353135.roa
Signing time:             Tue 22 Aug 2023 15:25:43 +0000
ROA not before:           Tue 22 Aug 2023 15:20:43 +0000
ROA not after:            Tue 20 Aug 2024 15:25:43 +0000
asID:                     271515
IP address blocks:        2804:7cbc::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:26:4b:91:6f:51:b9:a6:b4:25:38:2c:32:31:53:62:0d:94:ed:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C966BFE75D740DECD5CC886F943F0FBC4390193F
        Validity
            Not Before: Aug 22 15:20:43 2023 GMT
            Not After : Aug 20 15:25:43 2024 GMT
        Subject: CN=04355BC4D9CC1E712013F9C15552940A341040C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6d:25:e6:cb:f7:23:53:44:22:72:ea:c2:a3:
                    c3:31:ad:04:67:c3:01:67:7e:35:77:6b:ab:c4:62:
                    1d:b4:05:37:1c:20:5e:77:18:09:b8:60:55:18:ad:
                    12:73:3c:32:0f:86:bd:84:e1:29:37:a2:fa:2c:39:
                    47:f9:32:99:7f:56:ae:2a:9d:ad:95:fb:8f:44:4b:
                    eb:61:62:73:07:3c:d0:76:eb:d2:b7:cd:ae:08:92:
                    e1:fc:6e:64:da:1f:fa:ac:ce:50:63:cf:1e:01:29:
                    15:f3:b9:7a:44:66:90:2d:4d:09:9c:ea:02:b6:98:
                    2c:58:85:bf:99:90:7e:8a:1c:f7:7a:0d:25:73:4f:
                    01:ce:16:a9:89:d0:d6:f8:ce:a2:cf:95:83:9c:7d:
                    b4:c0:dc:45:9b:23:01:0e:2b:72:d7:9b:f0:58:33:
                    dc:d0:8b:c7:b9:dd:20:5c:f8:02:2e:7d:a1:8b:fe:
                    79:57:03:d1:01:23:74:ab:b2:e0:14:b1:de:63:21:
                    04:e8:9c:e8:b3:14:96:d0:69:78:5a:7d:bf:66:10:
                    29:3b:8a:16:b9:1c:8b:7c:26:94:0e:0e:4f:21:c1:
                    69:f0:22:6e:04:b5:b1:36:1f:ea:3c:99:f4:16:6c:
                    24:0e:c4:0a:6f:df:a4:0e:12:61:4b:e2:36:0f:f1:
                    4e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:35:5B:C4:D9:CC:1E:71:20:13:F9:C1:55:52:94:0A:34:10:40:C3
            X509v3 Authority Key Identifier:
                keyid:C9:66:BF:E7:5D:74:0D:EC:D5:CC:88:6F:94:3F:0F:BC:43:90:19:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44L5mqFbmPQ4e5WPfNQEJUvK3QQZ9VZSJcm4mMHTAis3/0/C966BFE75D740DECD5CC886F943F0FBC4390193F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C966BFE75D740DECD5CC886F943F0FBC4390193F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44L5mqFbmPQ4e5WPfNQEJUvK3QQZ9VZSJcm4mMHTAis3/0/323830343a376362633a3a2f33322d3332203d3e20323731353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7cbc::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:5e:ba:98:d8:1a:30:ba:b4:90:a6:53:b9:64:e4:46:44:8f:
         7b:f9:fe:bd:e6:b7:88:52:f0:43:9b:a4:0f:6a:a5:76:12:39:
         0e:88:03:05:a4:16:2d:9c:b2:62:cb:36:53:a0:7e:9d:60:b0:
         33:51:fb:88:ab:61:a9:2b:38:82:f4:06:65:9b:23:cb:1b:3e:
         b2:70:a5:49:52:bd:ed:7b:d7:7d:36:7d:b5:12:19:35:9d:f4:
         40:a6:a3:f7:6b:09:ba:51:28:49:a9:e2:f7:b8:40:2a:a1:45:
         c8:11:23:84:3a:35:51:20:a8:20:72:a6:1d:36:90:ae:f0:ac:
         77:c5:9e:b0:0d:60:99:f3:50:32:05:13:20:88:4e:73:c6:82:
         fc:1c:60:40:c3:51:a7:d7:ba:41:ce:1f:c1:43:8a:b1:79:01:
         30:e7:e7:78:36:0d:f1:98:4b:e0:c4:80:1a:3a:81:b6:6e:f2:
         85:b9:5c:ef:df:7e:20:de:2b:46:91:2e:30:18:bc:87:df:b6:
         32:99:81:7c:34:3d:b0:a5:1a:69:9b:79:b8:c2:fd:8c:23:f5:
         e5:dc:a8:a3:6b:29:c9:ae:a3:6f:0c:3f:7b:dd:fb:ba:89:d6:
         ac:26:60:04:a0:20:6e:55:b8:39:a6:6c:f0:92:57:fa:0b:a5:
         d3:37:59:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:15:47 2025 by rpki-client