Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LRbqsXBEPv3bCu2zA7c4V3w1gzUTQGXHErC2hZ9asY/0/323830343a376430303a3a2f33322d3438203d3e20323731353332.roa
File:                     323830343a376430303a3a2f33322d3438203d3e20323731353332.roa (raw, json)
Hash identifier:          7HLHTS1pZ0ksxFbp4/7ca/a7ReKWItzEJ5pxMDPqQW4=
Subject key identifier:   35:8A:89:E3:D6:59:02:95:E4:23:8F:16:8E:FA:8D:D1:E0:13:2B:F5
Certificate issuer:       /CN=C3BB815C271D24E3C39EF0273BE78B0E1E7E69AF
Certificate serial:       46337453EB77D3156611DF8A518479734C0E6919
Authority key identifier: C3:BB:81:5C:27:1D:24:E3:C3:9E:F0:27:3B:E7:8B:0E:1E:7E:69:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3BB815C271D24E3C39EF0273BE78B0E1E7E69AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LRbqsXBEPv3bCu2zA7c4V3w1gzUTQGXHErC2hZ9asY/0/323830343a376430303a3a2f33322d3438203d3e20323731353332.roa
Signing time:             Tue 02 Jan 2024 20:50:21 +0000
ROA not before:           Tue 02 Jan 2024 20:45:21 +0000
ROA not after:            Tue 31 Dec 2024 20:50:21 +0000
asID:                     271532
IP address blocks:        2804:7d00::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:33:74:53:eb:77:d3:15:66:11:df:8a:51:84:79:73:4c:0e:69:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3BB815C271D24E3C39EF0273BE78B0E1E7E69AF
        Validity
            Not Before: Jan  2 20:45:21 2024 GMT
            Not After : Dec 31 20:50:21 2024 GMT
        Subject: CN=358A89E3D6590295E4238F168EFA8DD1E0132BF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:fd:7e:ee:a0:22:b5:88:40:2f:6a:90:0f:3c:
                    dd:50:19:fb:fd:c0:b6:ad:6f:42:84:cb:b0:fe:8c:
                    c4:ff:7e:5a:c4:00:08:d9:2b:80:00:f1:b7:d7:8a:
                    20:2b:8a:e2:9a:b3:34:92:a7:bb:ff:25:db:1f:0c:
                    71:a2:b6:4e:91:06:b5:02:8e:5c:a6:0f:0d:01:01:
                    42:10:e3:0a:44:08:f9:17:23:f5:8a:05:ae:74:ce:
                    a4:f2:87:c6:c6:74:3c:bd:c0:bf:a4:a5:54:17:39:
                    47:7c:58:99:ff:52:5a:ab:e5:19:32:dc:9f:13:fa:
                    38:48:3d:f7:f3:d6:46:63:fd:e3:c8:25:f4:c7:fa:
                    3b:89:0a:7f:7c:f7:85:f2:88:82:09:ca:ad:97:b4:
                    45:ef:2c:d4:a7:50:5a:8d:88:98:98:c0:89:1d:9b:
                    0d:fb:69:a9:80:98:0a:b3:75:d5:fc:b5:6d:04:9f:
                    52:a3:4b:5e:cd:66:89:62:e6:1f:66:15:87:bb:e3:
                    ce:f3:86:96:89:f0:5f:c0:9b:6a:e3:27:96:03:1e:
                    96:a2:3f:92:8b:15:83:fd:70:83:31:4c:da:75:74:
                    21:48:52:ef:f9:2b:dd:63:5e:5e:50:0e:8b:c3:a8:
                    fb:aa:fe:c8:e4:d7:9f:9d:36:94:93:39:ee:47:76:
                    fc:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:8A:89:E3:D6:59:02:95:E4:23:8F:16:8E:FA:8D:D1:E0:13:2B:F5
            X509v3 Authority Key Identifier:
                keyid:C3:BB:81:5C:27:1D:24:E3:C3:9E:F0:27:3B:E7:8B:0E:1E:7E:69:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LRbqsXBEPv3bCu2zA7c4V3w1gzUTQGXHErC2hZ9asY/0/C3BB815C271D24E3C39EF0273BE78B0E1E7E69AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3BB815C271D24E3C39EF0273BE78B0E1E7E69AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LRbqsXBEPv3bCu2zA7c4V3w1gzUTQGXHErC2hZ9asY/0/323830343a376430303a3a2f33322d3438203d3e20323731353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d00::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:55:c2:6c:95:c8:fd:97:c7:e6:39:2a:f3:62:aa:5a:03:8e:
         76:38:73:d5:70:11:09:47:45:03:cc:28:cb:54:1a:6f:08:a2:
         19:2b:f2:8c:e2:d1:9d:d9:dc:01:43:72:a8:67:bf:ac:a1:af:
         f6:b0:65:d0:fb:19:44:48:30:bf:35:7d:49:e0:ed:34:ec:0f:
         de:d0:d2:e8:f1:80:3d:90:65:28:06:cb:8e:1a:a9:1b:16:07:
         b2:f3:8e:60:ef:5d:8d:e6:ab:0f:da:06:64:a9:18:e0:5e:91:
         c0:6b:09:d0:a4:0a:01:3c:07:f4:ac:6f:c3:34:f0:92:99:51:
         9b:5d:90:0b:64:4e:5a:5d:fd:18:f0:b4:d7:31:6e:08:ad:a1:
         fc:ad:15:19:98:87:c3:d0:42:5b:73:66:b3:85:d7:35:b6:4e:
         c2:7f:2f:c7:23:7f:3f:7a:1d:9f:ec:24:0c:1a:9b:f9:c5:e9:
         ab:67:01:e1:22:09:6d:1a:c0:98:f6:e7:a6:c0:26:01:3d:16:
         34:9e:0b:2f:13:22:8b:c5:13:aa:c6:66:10:a2:b8:07:e5:b0:
         d8:e4:fc:83:00:f4:7d:cb:0b:94:59:76:f0:be:85:7d:82:71:
         58:6d:6c:39:7a:e7:7d:19:aa:9a:5c:80:b1:8f:58:35:61:e8:
         85:78:b2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:52:46 2025 by rpki-client