Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/323830343a333363633a3a2f33322d313238203d3e203238363536.roa
File:                     323830343a333363633a3a2f33322d313238203d3e203238363536.roa (raw, json)
Hash identifier:          /3qKuU9aaBos6dfmjxu2tjtvJmluKY39AkOy8VR24GI=
Subject key identifier:   5D:B7:E8:F5:E1:E0:DC:BA:61:0E:5B:5C:60:B9:0B:80:6F:C5:64:5A
Certificate issuer:       /CN=3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA
Certificate serial:       3E93B0EA1C940FB7D6CA539818F7245C8EBEE015
Authority key identifier: 3C:FE:E7:CF:39:A3:16:A9:0F:BA:59:02:55:22:0C:BC:EB:5B:BE:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/323830343a333363633a3a2f33322d313238203d3e203238363536.roa
Signing time:             Sun 26 Mar 2023 22:08:16 +0000
ROA not before:           Sun 26 Mar 2023 22:03:16 +0000
ROA not after:            Sun 24 Mar 2024 22:08:16 +0000
asID:                     28656
IP address blocks:        2804:33cc::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:93:b0:ea:1c:94:0f:b7:d6:ca:53:98:18:f7:24:5c:8e:be:e0:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA
        Validity
            Not Before: Mar 26 22:03:16 2023 GMT
            Not After : Mar 24 22:08:16 2024 GMT
        Subject: CN=5DB7E8F5E1E0DCBA610E5B5C60B90B806FC5645A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:66:f8:e3:18:dc:75:81:94:c8:1c:a2:07:6f:
                    13:fa:09:5f:1d:f9:ae:7e:ec:28:1b:ec:ec:28:18:
                    cb:a8:1d:3e:65:a0:7c:aa:8b:83:1b:60:17:fc:8d:
                    af:0d:f0:82:e4:10:64:d8:65:1e:1b:85:78:21:4e:
                    40:f3:3e:c6:8b:94:c8:cd:a9:4b:9b:54:b3:0b:2e:
                    aa:69:d4:8f:7d:8a:1f:23:b5:94:5a:2f:5f:77:af:
                    c0:1f:11:26:5b:8e:d3:f5:15:89:f2:62:49:8c:b9:
                    c4:58:71:4c:2d:8c:d7:d6:72:6b:d8:b2:1b:7c:66:
                    bc:61:bf:2a:b9:d4:b2:bd:31:d0:f3:66:c8:38:e0:
                    d2:21:b6:7e:a7:a2:67:d8:8c:09:ca:bc:18:54:11:
                    78:6e:c7:80:2e:39:3c:e0:07:e2:68:b7:20:f2:8c:
                    a7:41:82:d0:bb:03:07:df:70:28:18:b6:5b:87:e2:
                    b8:16:7e:60:be:22:66:11:fd:a6:90:3f:cf:0f:1a:
                    ae:d1:75:10:dc:54:a6:9a:de:a3:74:a2:f0:ae:13:
                    5f:e1:84:a6:6c:8e:25:97:60:8b:46:a6:ed:61:e4:
                    6d:48:51:b1:65:bf:2e:e7:4b:7f:33:7c:03:e7:df:
                    76:3d:0d:bc:27:dd:11:f9:b9:f9:bf:e4:e1:88:e9:
                    ce:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B7:E8:F5:E1:E0:DC:BA:61:0E:5B:5C:60:B9:0B:80:6F:C5:64:5A
            X509v3 Authority Key Identifier:
                keyid:3C:FE:E7:CF:39:A3:16:A9:0F:BA:59:02:55:22:0C:BC:EB:5B:BE:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/323830343a333363633a3a2f33322d313238203d3e203238363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:a4:a5:43:1c:f6:d1:4e:e1:8c:1b:4e:ae:cc:c3:c0:9e:7f:
         d8:97:fa:a8:b8:7d:22:93:ac:eb:db:d0:d6:7f:80:c3:74:ed:
         ee:7c:a3:df:c5:06:94:c2:3c:eb:e9:37:64:8c:45:20:fe:34:
         81:50:0d:57:ca:75:2b:08:6a:6d:57:24:48:d6:5a:09:73:18:
         b0:92:70:20:13:77:f6:f7:dc:76:21:65:23:a4:39:7b:87:74:
         05:c6:88:db:9f:30:8f:d8:f1:08:fb:fe:6d:46:97:b6:be:da:
         63:90:12:f9:29:32:fe:9c:13:b0:d3:bd:ec:ad:dd:1f:c6:a3:
         63:49:76:32:3a:87:f7:cd:72:a2:8f:67:3f:3c:f6:6b:e2:8b:
         fd:2a:ef:46:54:24:4c:45:fb:01:e4:5d:57:4c:ec:25:80:30:
         c7:16:4d:19:27:93:86:dc:6b:ac:01:27:b2:b7:bb:57:97:20:
         2a:98:0c:c9:a0:53:c2:12:cd:cf:c7:52:e8:23:04:94:86:95:
         3f:de:6f:1a:ab:50:3c:32:60:fb:36:9b:79:b6:d9:4d:de:91:
         d1:77:63:06:50:c3:c1:2e:88:76:80:e5:1b:f6:ca:a8:0b:cf:
         8c:91:b2:71:a8:d8:5d:e3:c4:81:1a:ee:19:9a:e4:98:f4:9f:
         27:f4:0b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:36:30 2025 by rpki-client