Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/0/323830343a346131633a3a2f33362d3336203d3e20323637323139.roa
File:                     323830343a346131633a3a2f33362d3336203d3e20323637323139.roa (raw, json)
Hash identifier:          TONa7O/ixqEmQpWshdZTWb5XmngSigy2Th4mG6519m4=
Subject key identifier:   F5:83:E1:7E:85:21:E5:47:CB:36:EA:C4:4A:B5:E1:73:E0:EB:9F:21
Certificate issuer:       /CN=BBE92D739A5257115139F5983820BA7CAF473B40
Certificate serial:       0A8D70034C052B0D7749ACB09397F241156EF60C
Authority key identifier: BB:E9:2D:73:9A:52:57:11:51:39:F5:98:38:20:BA:7C:AF:47:3B:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BBE92D739A5257115139F5983820BA7CAF473B40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/0/323830343a346131633a3a2f33362d3336203d3e20323637323139.roa
Signing time:             Fri 21 Jul 2023 18:43:50 +0000
ROA not before:           Fri 21 Jul 2023 18:38:50 +0000
ROA not after:            Fri 19 Jul 2024 18:43:50 +0000
asID:                     267219
IP address blocks:        2804:4a1c::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:8d:70:03:4c:05:2b:0d:77:49:ac:b0:93:97:f2:41:15:6e:f6:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBE92D739A5257115139F5983820BA7CAF473B40
        Validity
            Not Before: Jul 21 18:38:50 2023 GMT
            Not After : Jul 19 18:43:50 2024 GMT
        Subject: CN=F583E17E8521E547CB36EAC44AB5E173E0EB9F21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b5:34:3d:57:f1:66:a9:75:85:eb:b8:ca:4c:
                    d2:54:2e:42:6a:10:f4:fb:49:44:4d:08:cc:b4:94:
                    d2:b6:ad:44:f2:72:44:01:0d:9f:02:b8:f0:64:6a:
                    ca:e5:79:2c:d6:b8:5d:90:c7:68:f2:a8:71:00:6a:
                    ab:b2:79:64:cb:7a:34:f0:25:84:b4:5b:75:8e:3a:
                    9b:2d:ed:b1:f3:ae:dc:40:f0:60:78:58:e9:ae:50:
                    19:e6:19:1d:b0:e5:6b:f1:ef:ef:90:37:34:90:93:
                    49:76:d0:bf:4e:ea:c0:08:c4:5c:5b:4f:c9:db:54:
                    45:5e:3f:29:96:a5:f3:46:45:a8:94:27:fc:ad:4a:
                    8a:0b:83:71:08:b9:3d:f3:17:c4:65:2c:6f:fe:fb:
                    49:b7:98:11:cb:e2:fe:c4:6c:01:0a:83:40:e7:a5:
                    08:1b:03:9a:6f:d1:b7:50:a7:41:a6:fa:10:c0:e1:
                    bf:f3:b3:1d:58:2d:e3:0b:5c:51:67:95:79:09:ca:
                    ad:7d:b7:8c:c8:06:d4:49:c3:0f:19:ab:f5:0f:d4:
                    1f:e0:e5:77:2f:49:9a:8b:0d:e6:a7:e1:37:d1:18:
                    38:30:0b:4e:fc:bc:ab:af:fa:c5:df:64:29:01:40:
                    e7:d5:b2:fd:10:48:f0:71:e8:32:c2:85:f5:ec:13:
                    db:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:83:E1:7E:85:21:E5:47:CB:36:EA:C4:4A:B5:E1:73:E0:EB:9F:21
            X509v3 Authority Key Identifier:
                keyid:BB:E9:2D:73:9A:52:57:11:51:39:F5:98:38:20:BA:7C:AF:47:3B:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/0/BBE92D739A5257115139F5983820BA7CAF473B40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BBE92D739A5257115139F5983820BA7CAF473B40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/0/323830343a346131633a3a2f33362d3336203d3e20323637323139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a1c::/36

    Signature Algorithm: sha256WithRSAEncryption
         47:88:f3:05:08:3f:be:de:b2:cf:38:cc:1c:50:fd:4b:36:29:
         45:b5:8a:1d:79:78:87:20:8f:f4:33:41:d7:66:b2:75:16:b1:
         ef:f0:2c:19:e2:b8:18:83:17:a2:68:aa:23:4b:10:c8:70:be:
         b2:07:a5:c1:3a:bb:36:b7:c1:78:80:cf:1f:cb:99:19:4d:9f:
         c0:ad:91:3c:93:0b:03:0b:3f:4d:7f:2f:ad:32:25:d6:35:ef:
         75:25:d8:1c:bd:d2:fe:2c:66:9b:ac:0a:e0:3f:c7:28:0b:a3:
         fa:ed:0f:06:e8:ce:1e:2b:fd:2d:24:6c:fd:f6:70:ac:84:63:
         83:4a:d3:26:4e:8b:01:47:3c:95:fd:02:c0:88:a9:4e:6c:7a:
         82:7d:9a:87:c6:cf:a9:a6:a7:88:2c:e2:d8:0d:a1:21:fa:4c:
         cd:69:40:41:50:74:7b:7c:21:80:7e:ad:59:a1:b3:30:d6:f8:
         6e:e9:38:b9:70:7a:74:cf:51:f6:60:2d:2e:b6:8b:ab:a6:b2:
         b3:a1:ed:35:49:3b:0d:d9:f6:d8:dc:77:f2:ed:cc:e0:61:00:
         25:a5:76:00:21:72:a5:9f:9f:06:87:52:c4:a8:43:be:f5:68:
         1a:f2:0b:a7:fc:bf:33:36:da:fb:7e:e5:64:fd:f2:b0:2d:28:
         6f:9d:49:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 18:34:48 2025 by rpki-client