Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5AxgcTP5u5KZ7VUs7E8r7npo1CUXXj7C8Y59JEKBuMKV/0/323830343a3539383a3a2f33322d3438203d3e20323632353236.roa
File:                     323830343a3539383a3a2f33322d3438203d3e20323632353236.roa (raw, json)
Hash identifier:          CtWj7BbELH049FipP8mom4DIr0vPL4Z21qHdOe2zz2Y=
Subject key identifier:   AF:35:45:53:FA:74:44:23:ED:0B:C3:F1:37:4B:98:B6:A1:58:46:72
Certificate issuer:       /CN=335F88C590E89975E1564FC6A9335E1A9A3668DE
Certificate serial:       2D352A6015C33AD8BF2994D107F762CF0DCE2D01
Authority key identifier: 33:5F:88:C5:90:E8:99:75:E1:56:4F:C6:A9:33:5E:1A:9A:36:68:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/335F88C590E89975E1564FC6A9335E1A9A3668DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5AxgcTP5u5KZ7VUs7E8r7npo1CUXXj7C8Y59JEKBuMKV/0/323830343a3539383a3a2f33322d3438203d3e20323632353236.roa
Signing time:             Thu 05 Oct 2023 19:22:12 +0000
ROA not before:           Thu 05 Oct 2023 19:17:12 +0000
ROA not after:            Thu 03 Oct 2024 19:22:12 +0000
asID:                     262526
IP address blocks:        2804:598::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:35:2a:60:15:c3:3a:d8:bf:29:94:d1:07:f7:62:cf:0d:ce:2d:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=335F88C590E89975E1564FC6A9335E1A9A3668DE
        Validity
            Not Before: Oct  5 19:17:12 2023 GMT
            Not After : Oct  3 19:22:12 2024 GMT
        Subject: CN=AF354553FA744423ED0BC3F1374B98B6A1584672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ed:53:f6:7a:1f:a5:32:db:03:80:20:92:d5:
                    ba:e2:f7:05:d3:4c:61:85:21:de:33:1c:fc:92:0d:
                    6c:fa:51:84:a7:f0:5d:a7:cc:70:b7:48:72:1e:49:
                    6f:3e:7e:7c:3c:09:cd:3a:73:56:2b:92:29:04:eb:
                    d4:08:86:5e:69:c2:9d:55:b5:db:3b:14:c4:18:71:
                    c0:88:a7:84:14:68:97:4a:25:11:11:7c:36:8e:68:
                    fc:34:a7:81:07:f7:85:3b:de:27:f2:a6:26:96:5a:
                    5b:e4:32:05:e5:40:25:f3:6a:d8:49:fe:4e:c0:47:
                    cd:c1:1a:87:f8:6a:7a:28:da:cf:74:ac:b8:3e:43:
                    97:a2:c4:a0:66:b2:4d:95:7c:eb:89:fc:17:94:16:
                    61:ca:47:23:7d:31:cd:e1:b1:0d:04:7c:21:a4:74:
                    9c:50:4b:93:d8:41:90:b8:84:48:0d:f7:b2:9c:74:
                    ce:c5:de:97:73:7a:a8:79:22:f5:9b:21:23:cf:44:
                    16:0d:ff:2b:c9:b9:72:77:b7:ff:bc:35:bc:b7:44:
                    23:eb:93:6c:1e:6e:ad:09:6e:f9:4f:b6:14:23:f9:
                    31:e2:59:83:39:8a:cb:71:3b:6c:02:d2:69:9e:45:
                    c2:dd:5f:e3:8b:c9:69:e5:02:50:e5:00:ac:34:6e:
                    78:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:35:45:53:FA:74:44:23:ED:0B:C3:F1:37:4B:98:B6:A1:58:46:72
            X509v3 Authority Key Identifier:
                keyid:33:5F:88:C5:90:E8:99:75:E1:56:4F:C6:A9:33:5E:1A:9A:36:68:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5AxgcTP5u5KZ7VUs7E8r7npo1CUXXj7C8Y59JEKBuMKV/0/335F88C590E89975E1564FC6A9335E1A9A3668DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/335F88C590E89975E1564FC6A9335E1A9A3668DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5AxgcTP5u5KZ7VUs7E8r7npo1CUXXj7C8Y59JEKBuMKV/0/323830343a3539383a3a2f33322d3438203d3e20323632353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:598::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:b7:fb:a1:c2:e7:63:3c:10:bd:77:43:cb:49:75:69:2a:3d:
         9e:f6:f4:62:e8:12:d1:50:66:79:8c:6e:25:40:20:39:32:bf:
         ee:57:a1:e4:3e:11:79:b6:7a:a6:31:e0:13:06:39:84:09:31:
         96:06:c5:b2:d8:5e:5d:a9:25:c1:73:f6:86:3f:ec:0e:18:89:
         57:13:ac:b6:b5:1c:2e:81:1d:c1:b1:12:f8:40:10:c9:ff:d3:
         b9:d1:da:cf:29:8d:10:03:14:5d:75:11:c2:29:aa:6a:70:d5:
         21:d5:4b:0c:84:48:10:75:93:06:fd:4e:3a:b8:4f:c9:d4:40:
         e6:fb:52:8b:77:69:30:97:29:d3:0b:29:2f:af:1b:91:e1:6c:
         70:d2:02:2b:d7:01:74:d3:cc:0d:58:07:fd:16:8b:eb:65:83:
         9d:d1:49:8c:12:2a:b0:37:24:9c:87:e0:d2:f1:44:19:d4:95:
         f5:98:15:f8:01:0a:7c:0b:c4:62:49:85:77:c2:f7:44:76:65:
         a1:ed:d1:a4:27:c1:26:3d:53:0d:33:9d:47:51:1e:31:89:7b:
         68:a0:e2:d5:72:fb:ca:c8:8d:e8:f6:f2:1b:3f:94:e9:e2:92:
         39:2e:5a:98:19:60:03:46:9c:b3:4c:46:fd:ba:7b:8d:f7:cc:
         74:d0:6c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 00:46:10 2025 by rpki-client