Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/0/323830343a6261633a3a2f33322d3332203d3e20323632333137.roa
File:                     323830343a6261633a3a2f33322d3332203d3e20323632333137.roa (raw, json)
Hash identifier:          Nu9SzAJ+zK1iljYgL/26Xb1q8Q35bMRw+9JL8bL3ydY=
Subject key identifier:   FB:FC:53:6D:72:E3:3A:88:EF:10:CB:3C:CA:03:15:C6:4E:64:24:72
Certificate issuer:       /CN=DE8B1F98BD6CD33262608FF38C243CF7EC783B76
Certificate serial:       2377A2FD30F18A8F8C1747113280629AB237DAB9
Authority key identifier: DE:8B:1F:98:BD:6C:D3:32:62:60:8F:F3:8C:24:3C:F7:EC:78:3B:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE8B1F98BD6CD33262608FF38C243CF7EC783B76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/0/323830343a6261633a3a2f33322d3332203d3e20323632333137.roa
Signing time:             Tue 14 Nov 2023 12:58:39 +0000
ROA not before:           Tue 14 Nov 2023 12:53:39 +0000
ROA not after:            Tue 12 Nov 2024 12:58:39 +0000
asID:                     262317
IP address blocks:        2804:bac::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:77:a2:fd:30:f1:8a:8f:8c:17:47:11:32:80:62:9a:b2:37:da:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE8B1F98BD6CD33262608FF38C243CF7EC783B76
        Validity
            Not Before: Nov 14 12:53:39 2023 GMT
            Not After : Nov 12 12:58:39 2024 GMT
        Subject: CN=FBFC536D72E33A88EF10CB3CCA0315C64E642472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:48:7c:68:db:41:ef:cf:1a:8c:3a:df:31:fc:
                    7c:68:a2:73:95:89:68:b9:4b:7e:42:39:d9:ad:15:
                    6a:52:1f:3c:cf:57:e4:1c:d4:3a:e4:bb:57:82:a4:
                    96:92:9b:28:91:58:04:bf:39:93:c0:59:eb:79:22:
                    ac:07:54:13:20:8b:cf:9c:78:e3:15:c3:b2:db:eb:
                    d9:19:fe:e3:6c:58:3f:bf:1d:52:33:2f:2f:c0:08:
                    12:28:80:9d:9a:09:a1:e5:9b:fb:74:13:f2:2b:f7:
                    ca:bf:38:0b:c1:75:04:cb:a1:de:b4:3d:98:e6:aa:
                    9d:b6:23:17:1c:30:58:50:bb:0b:60:8b:07:b1:28:
                    fd:8a:34:18:ec:fe:a5:b8:4d:d4:e0:72:21:38:5d:
                    70:3c:38:4c:2a:53:6d:e4:c2:7f:f7:58:cf:fe:90:
                    ab:c7:71:60:a2:fd:b8:14:02:7e:75:05:53:23:13:
                    40:8c:f3:b9:92:f9:3e:d2:d7:00:66:59:14:35:1a:
                    77:d4:d2:0b:6b:62:81:cb:69:bf:60:1b:43:c5:ad:
                    06:82:92:c7:7a:1f:02:10:d0:73:a6:ec:3a:f4:5a:
                    82:0b:c7:93:fc:5b:cb:22:74:f9:60:f4:6b:35:34:
                    a0:b4:de:e2:77:47:2e:a8:b4:ed:1d:1b:1e:12:9b:
                    2f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:FC:53:6D:72:E3:3A:88:EF:10:CB:3C:CA:03:15:C6:4E:64:24:72
            X509v3 Authority Key Identifier:
                keyid:DE:8B:1F:98:BD:6C:D3:32:62:60:8F:F3:8C:24:3C:F7:EC:78:3B:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/0/DE8B1F98BD6CD33262608FF38C243CF7EC783B76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE8B1F98BD6CD33262608FF38C243CF7EC783B76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/0/323830343a6261633a3a2f33322d3332203d3e20323632333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:bac::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:1d:27:c1:ee:54:ed:e6:a7:95:61:56:32:f7:d4:87:d8:7b:
         b9:cf:b9:a3:80:11:60:d5:10:47:cf:6c:74:66:03:e4:71:32:
         1c:80:c4:47:df:43:12:cb:b7:d0:bf:a8:36:7c:85:16:00:36:
         b8:59:06:79:9a:60:d5:be:91:df:76:5d:94:0f:fa:44:8f:63:
         32:58:e4:d2:b7:c4:c5:0e:74:4d:7f:30:3b:c1:17:1b:01:05:
         61:d3:10:db:95:0f:79:cb:a9:a4:09:b4:18:0c:59:9c:07:2b:
         c1:48:13:26:97:95:a4:59:49:0d:f9:6d:55:6b:67:9b:1e:51:
         07:d6:b5:8b:fe:43:dc:73:b7:fc:cb:7a:17:84:3e:e8:2c:78:
         43:46:d8:3d:60:ad:30:76:b8:ea:8a:bb:48:73:9c:37:69:e1:
         c1:05:f2:32:43:a7:23:62:66:3e:0b:a4:13:c1:db:51:b6:c0:
         2e:78:3f:f3:4a:86:67:5e:23:71:81:81:6a:c8:b0:47:cf:5d:
         e3:17:d1:62:87:f1:00:0b:43:55:c1:c6:26:6d:00:7e:f6:62:
         b8:c9:29:c6:2b:f4:cc:eb:46:33:1a:25:c6:f6:96:a4:a4:55:
         84:d7:de:b7:b5:98:12:af:ad:0c:5b:e4:16:f4:94:93:b2:11:
         ee:3a:ed:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:13:28 2025 by rpki-client