Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57aLNec1j5Kc5Mw7u4MBiYA4AKUyjJ1UCcfzJRwCGChq/0/323830343a3437343a3a2f33322d3438203d3e203532393830.roa
File:                     323830343a3437343a3a2f33322d3438203d3e203532393830.roa (raw, json)
Hash identifier:          CBkWRDsDs6uWU4m9nrKACs2G7cE6i3qOzyFpfjnPmYY=
Subject key identifier:   9A:99:E8:A1:28:10:B5:0A:3E:54:6A:50:DC:EE:CD:17:A6:2E:4A:94
Certificate issuer:       /CN=D2D2D71D988525073935916EEBCA45B03AB78E14
Certificate serial:       537F9964D66C108DCEB6E6C0AF4DE4E273D82598
Authority key identifier: D2:D2:D7:1D:98:85:25:07:39:35:91:6E:EB:CA:45:B0:3A:B7:8E:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2D2D71D988525073935916EEBCA45B03AB78E14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57aLNec1j5Kc5Mw7u4MBiYA4AKUyjJ1UCcfzJRwCGChq/0/323830343a3437343a3a2f33322d3438203d3e203532393830.roa
Signing time:             Mon 09 Jan 2023 18:00:01 +0000
ROA not before:           Mon 09 Jan 2023 17:55:01 +0000
ROA not after:            Tue 09 Jan 2024 18:00:01 +0000
asID:                     52980
IP address blocks:        2804:474::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:7f:99:64:d6:6c:10:8d:ce:b6:e6:c0:af:4d:e4:e2:73:d8:25:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2D2D71D988525073935916EEBCA45B03AB78E14
        Validity
            Not Before: Jan  9 17:55:01 2023 GMT
            Not After : Jan  9 18:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ce:2c:ad:92:6e:71:1c:31:71:6c:89:74:d4:
                    36:b0:d8:82:49:a6:2a:1f:b4:d0:ec:df:10:75:58:
                    be:76:22:8d:49:76:a4:a3:c2:c5:71:84:35:c9:4d:
                    3a:ce:87:dd:08:41:2f:b4:3e:72:db:84:bb:79:60:
                    96:ee:25:cd:24:b5:89:36:cf:b7:2e:6f:bd:54:a3:
                    9e:fe:02:4f:a8:6f:00:b9:70:44:90:d6:95:ad:09:
                    0f:1f:96:c9:cd:6c:85:6d:1c:4b:67:f1:8b:99:c6:
                    8f:2a:21:5b:c0:19:28:1b:10:b5:d8:d2:78:0b:d9:
                    13:ec:ea:b9:c4:17:f6:e4:14:1c:fa:e4:9e:33:84:
                    57:05:e6:47:c8:25:97:db:1f:fa:9e:15:54:0e:4b:
                    fe:6f:4f:db:c6:55:2e:db:26:9a:70:7a:0d:9b:80:
                    19:cf:21:91:cc:52:e3:f9:2b:18:47:37:d7:21:93:
                    ea:63:5a:cc:bb:63:be:27:2b:d2:63:26:8e:5b:06:
                    49:f4:c0:30:92:1b:c0:35:9a:de:d5:23:6d:1b:fd:
                    16:e3:a3:d7:26:9e:c3:29:92:f6:39:3f:32:06:aa:
                    b6:8e:9d:e1:21:31:ad:f0:c9:e2:e6:37:74:c3:31:
                    ef:96:9d:4c:59:bf:ff:fe:f4:cc:48:09:3f:a2:b4:
                    14:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:99:E8:A1:28:10:B5:0A:3E:54:6A:50:DC:EE:CD:17:A6:2E:4A:94
            X509v3 Authority Key Identifier:
                keyid:D2:D2:D7:1D:98:85:25:07:39:35:91:6E:EB:CA:45:B0:3A:B7:8E:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57aLNec1j5Kc5Mw7u4MBiYA4AKUyjJ1UCcfzJRwCGChq/0/D2D2D71D988525073935916EEBCA45B03AB78E14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2D2D71D988525073935916EEBCA45B03AB78E14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57aLNec1j5Kc5Mw7u4MBiYA4AKUyjJ1UCcfzJRwCGChq/0/323830343a3437343a3a2f33322d3438203d3e203532393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:474::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:a4:45:53:78:eb:03:14:61:97:43:fb:ca:34:c3:9e:17:47:
         5a:87:ee:29:b8:f9:56:86:f1:5b:3b:8f:cb:1a:30:3c:fb:bf:
         d0:ac:7b:1e:14:d7:87:24:ca:3c:28:45:69:89:51:5d:bc:0a:
         cc:5a:61:49:af:78:02:b0:a3:34:32:21:c8:8f:bc:ec:5a:18:
         8e:71:69:3a:dc:2a:1b:69:d1:90:0d:fb:30:19:d6:86:a2:cf:
         3c:aa:5a:2e:e6:d3:7f:45:d2:3b:80:81:a5:c2:f3:40:4e:36:
         de:1e:31:e3:4a:fb:1e:2d:de:41:75:e5:f6:31:e4:ca:5c:ee:
         e9:19:ac:74:96:2f:a8:f3:6f:7f:aa:72:d6:27:31:c2:34:19:
         c1:7f:27:77:1a:79:47:fa:a0:c3:a3:be:16:b3:81:55:f1:d6:
         c8:ff:bf:9c:ba:f9:f2:d2:95:d3:c5:ec:cb:1e:df:8f:4c:3c:
         2f:82:93:91:c3:15:51:62:d4:de:89:ff:4e:3d:0f:66:3b:9f:
         1f:e4:f0:46:a2:d9:1f:50:1b:74:60:c3:a5:79:92:c0:8e:8b:
         2c:c8:02:8e:b1:7b:1a:84:9b:9f:d7:8a:de:94:df:89:52:84:
         65:d2:5e:7f:9e:9e:de:e9:e1:11:9b:e3:5f:89:ab:ff:3c:63:
         7e:a4:36:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 00:07:02 2025 by rpki-client