Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/323830343a373934343a3a2f33322d313238203d3e20323731323935.roa
File:                     323830343a373934343a3a2f33322d313238203d3e20323731323935.roa (raw, json)
Hash identifier:          jzwWk9y8winFt2Ywcgy7qCx6wXOhlXvWE/IAszqoOiE=
Subject key identifier:   7D:E8:4D:87:3B:45:82:D2:85:99:DF:FC:1B:AF:62:5C:CB:C8:73:64
Certificate issuer:       /CN=3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA
Certificate serial:       696DDCF75DB18BCE4A09A8315F74D0AC805E26
Authority key identifier: 3C:FE:E7:CF:39:A3:16:A9:0F:BA:59:02:55:22:0C:BC:EB:5B:BE:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/323830343a373934343a3a2f33322d313238203d3e20323731323935.roa
Signing time:             Sun 26 Mar 2023 22:09:16 +0000
ROA not before:           Sun 26 Mar 2023 22:04:16 +0000
ROA not after:            Sun 24 Mar 2024 22:09:16 +0000
asID:                     271295
IP address blocks:        2804:7944::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:6d:dc:f7:5d:b1:8b:ce:4a:09:a8:31:5f:74:d0:ac:80:5e:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA
        Validity
            Not Before: Mar 26 22:04:16 2023 GMT
            Not After : Mar 24 22:09:16 2024 GMT
        Subject: CN=7DE84D873B4582D28599DFFC1BAF625CCBC87364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e4:0b:53:f5:4b:a3:89:17:d8:76:88:75:65:
                    6b:55:3f:12:47:13:c9:34:b6:35:1f:30:b5:6d:e0:
                    77:f9:e7:b1:b2:90:d5:2d:9b:9a:23:e4:56:4c:96:
                    d4:e5:b7:28:75:ec:f9:15:bd:c8:a4:91:9c:66:b2:
                    ce:ba:da:d3:cb:3e:ef:59:90:f5:6d:3e:d7:b5:fe:
                    0d:ea:ad:04:7c:00:47:56:83:3e:2f:3a:d2:89:01:
                    53:f1:60:2b:88:cc:82:a8:85:2d:33:11:80:19:e1:
                    51:03:b5:06:28:eb:ef:10:04:32:d6:29:f5:e5:e0:
                    99:7f:59:8a:f6:b1:c7:4a:7e:8e:44:81:36:a0:39:
                    cb:46:97:58:64:e1:e0:e9:7e:83:ca:87:2b:30:c1:
                    56:0f:35:0b:90:7c:d0:ac:c7:f5:0b:35:49:ff:d6:
                    79:6d:94:80:10:59:b5:0e:9f:24:95:11:f2:7d:47:
                    43:39:90:77:0b:07:50:0b:6b:ef:65:e1:3b:2e:2b:
                    3e:40:8d:a6:65:c4:58:dd:2d:88:c3:7a:bd:fe:86:
                    ff:5f:b4:fe:0c:a1:88:52:54:cd:9c:35:ca:73:df:
                    e7:25:f5:a5:32:e0:55:a2:c6:9d:75:45:c6:3c:26:
                    04:04:d0:fe:49:de:6a:df:6d:e3:db:72:a3:d0:eb:
                    8d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E8:4D:87:3B:45:82:D2:85:99:DF:FC:1B:AF:62:5C:CB:C8:73:64
            X509v3 Authority Key Identifier:
                keyid:3C:FE:E7:CF:39:A3:16:A9:0F:BA:59:02:55:22:0C:BC:EB:5B:BE:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/323830343a373934343a3a2f33322d313238203d3e20323731323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7944::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:b6:91:e9:50:00:d6:49:ad:42:66:0c:f9:8b:61:cf:09:d4:
         fb:df:f8:b8:33:71:1b:68:6b:35:62:ac:68:48:bb:15:58:b4:
         6c:8f:40:69:ed:6e:33:a0:5e:9b:9e:e1:c9:05:46:24:fe:f7:
         71:ae:08:ce:18:65:3b:56:fd:45:cb:bd:35:ae:84:88:88:1e:
         67:16:d5:94:27:d5:77:da:57:1a:b8:0d:5f:08:fb:63:a2:d9:
         7b:cc:85:82:52:92:60:ad:2c:b3:b4:59:89:31:25:32:3b:07:
         16:0f:0e:f8:70:f1:64:4f:fe:35:b8:ec:96:3c:32:c8:a8:ff:
         87:2d:61:8a:37:1b:d6:0e:d1:06:8f:0f:00:f2:d0:19:85:a8:
         4f:e6:4f:8a:38:da:f8:b9:55:e4:46:a7:05:75:92:01:60:f3:
         20:ac:a7:16:06:d9:04:31:6d:e3:a0:40:fa:1f:76:46:e0:fe:
         c0:fc:28:de:5b:af:91:fa:65:97:2e:8e:32:be:bf:b7:d9:75:
         68:bc:7e:a2:a0:c1:29:de:eb:ec:f9:e6:1b:3f:1d:26:83:7b:
         a7:d7:8e:03:06:11:36:48:8c:d0:3d:ef:f2:06:1e:a8:43:b7:
         51:b1:ca:58:73:56:d4:7d:e8:81:c5:79:4e:58:ce:f5:54:5e:
         a5:f1:90:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:02:30 2025 by rpki-client