Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/0/323830343a6261633a3a2f33322d3336203d3e20323632333137.roa
File:                     323830343a6261633a3a2f33322d3336203d3e20323632333137.roa (raw, json)
Hash identifier:          sVmARtRYhdSuo6xNoYpTfJ96jZ5ktoeXrhwrjv4SoG8=
Subject key identifier:   EB:69:DE:63:52:DE:7F:0B:05:33:DF:7D:A3:9A:32:4D:BF:BD:12:8D
Certificate issuer:       /CN=DF399FF5F1A7E4EB6A5C62F948317A8EBC8A875B
Certificate serial:       7D89793B4764C21BAEEE85DE5ECD62A56A7B7760
Authority key identifier: DF:39:9F:F5:F1:A7:E4:EB:6A:5C:62:F9:48:31:7A:8E:BC:8A:87:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DF399FF5F1A7E4EB6A5C62F948317A8EBC8A875B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/0/323830343a6261633a3a2f33322d3336203d3e20323632333137.roa
Signing time:             Fri 07 Jul 2023 21:26:12 +0000
ROA not before:           Fri 07 Jul 2023 21:21:12 +0000
ROA not after:            Fri 05 Jul 2024 21:26:12 +0000
asID:                     262317
IP address blocks:        2804:bac::/32 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:89:79:3b:47:64:c2:1b:ae:ee:85:de:5e:cd:62:a5:6a:7b:77:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF399FF5F1A7E4EB6A5C62F948317A8EBC8A875B
        Validity
            Not Before: Jul  7 21:21:12 2023 GMT
            Not After : Jul  5 21:26:12 2024 GMT
        Subject: CN=EB69DE6352DE7F0B0533DF7DA39A324DBFBD128D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:00:b5:59:91:03:c7:8b:f9:d3:a1:24:5f:73:
                    2f:21:cc:1c:ef:fd:f4:d7:63:dd:c8:40:e6:ea:e3:
                    86:19:59:8d:76:a0:51:41:a8:3e:03:cf:23:f1:2e:
                    c6:37:d0:4a:3c:47:0e:42:77:3c:81:63:6f:38:04:
                    9d:e8:94:a4:5b:96:fe:0a:49:a6:c7:27:fd:20:db:
                    3f:30:4b:33:31:cb:8c:9f:0e:9b:fa:d4:05:0b:46:
                    d6:cc:82:8b:c4:0c:d1:38:73:1e:a8:7a:c0:91:ef:
                    c2:10:2b:1b:44:f3:22:df:81:50:d2:41:1e:53:a1:
                    81:63:7d:0f:56:7a:95:fa:72:18:ba:5d:5c:95:84:
                    83:5d:3a:95:88:45:cb:93:6c:9e:c8:4e:0a:2e:53:
                    64:32:7f:33:57:ef:0c:67:1f:29:93:e3:76:85:9c:
                    3a:43:af:91:ac:ab:8c:5d:af:e5:8b:47:18:ae:af:
                    36:72:56:c2:84:d3:3c:b6:9e:31:0c:52:b8:0a:fe:
                    3f:ac:b2:3d:0d:76:f0:1c:be:8e:27:1e:af:0a:8e:
                    81:14:27:a1:5c:ae:fb:3a:a3:4c:f3:80:ff:c3:b1:
                    9d:b8:98:c8:8f:f9:17:c5:49:3b:dd:31:29:ae:c6:
                    7c:4c:4a:66:77:fa:8f:a1:64:c7:be:46:19:db:d9:
                    3c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:69:DE:63:52:DE:7F:0B:05:33:DF:7D:A3:9A:32:4D:BF:BD:12:8D
            X509v3 Authority Key Identifier:
                keyid:DF:39:9F:F5:F1:A7:E4:EB:6A:5C:62:F9:48:31:7A:8E:BC:8A:87:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/0/DF399FF5F1A7E4EB6A5C62F948317A8EBC8A875B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DF399FF5F1A7E4EB6A5C62F948317A8EBC8A875B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/0/323830343a6261633a3a2f33322d3336203d3e20323632333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:bac::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:35:d8:f8:83:27:f1:0c:b5:3c:28:e1:e7:08:ed:eb:16:10:
         b8:85:2c:48:61:2e:12:49:81:9e:91:2e:d0:c8:98:f0:6f:60:
         82:1d:75:21:24:d2:f0:4c:38:db:cc:4c:69:83:16:3d:4e:ed:
         17:21:d1:bc:4d:c9:d5:e8:30:39:d0:46:58:fa:b3:68:72:2c:
         57:29:96:da:a2:c4:bf:09:05:f3:ff:d0:9c:17:21:84:6d:6e:
         6c:8f:8e:b9:9d:48:61:0e:4f:f3:64:f3:a9:f4:7f:87:ad:77:
         e8:1f:a9:1d:43:6c:d7:e3:72:c7:fa:c7:a3:35:c2:c9:5a:44:
         46:0b:e0:57:22:ce:7e:d3:fe:12:aa:d2:a5:49:ca:6c:28:ae:
         d0:46:bc:1b:41:ab:f5:f4:27:0f:84:59:6b:fd:54:d6:39:b4:
         a7:7e:34:2c:4c:56:a4:dd:08:0e:2d:73:fa:90:5a:35:d8:4d:
         ee:1d:82:a4:e6:ce:19:45:2a:e8:3a:ae:b5:a9:b3:15:82:c5:
         a2:b2:22:e9:d8:a2:bc:f1:60:c1:7e:fc:0d:b4:14:75:1b:d6:
         a8:24:84:7e:c5:64:7c:bd:b7:1d:fc:d7:90:4a:4a:3f:68:83:
         eb:e6:75:ef:f4:1d:42:ea:c5:81:11:46:97:87:8c:4e:2e:1f:
         84:bb:65:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:13:30 2025 by rpki-client