Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Lb4ZQncqCbpRp9N4XYZhxrgPSpAnJwBff8Q3cVe69bV/0/323830343a356634383a3a2f33322d3332203d3e20323639303839.roa
File:                     323830343a356634383a3a2f33322d3332203d3e20323639303839.roa (raw, json)
Hash identifier:          53OjbHiobG7jl31r+i6Aill7IIAZ/qCjpVinKzbZnsY=
Subject key identifier:   A8:DF:66:FF:8A:88:2E:4A:76:46:58:E4:8F:6C:11:1D:8C:0F:15:AE
Certificate issuer:       /CN=D0EAEE9D24137D1AD1B11FFCB43D72B6A80371EC
Certificate serial:       1E5AA6588F1D20AF8F6C23DAB6D1E93991523C98
Authority key identifier: D0:EA:EE:9D:24:13:7D:1A:D1:B1:1F:FC:B4:3D:72:B6:A8:03:71:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0EAEE9D24137D1AD1B11FFCB43D72B6A80371EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Lb4ZQncqCbpRp9N4XYZhxrgPSpAnJwBff8Q3cVe69bV/0/323830343a356634383a3a2f33322d3332203d3e20323639303839.roa
Signing time:             Fri 22 Jul 2022 16:47:04 +0000
ROA not before:           Fri 22 Jul 2022 16:42:04 +0000
ROA not after:            Fri 21 Jul 2023 16:47:04 +0000
asID:                     269089
IP address blocks:        2804:5f48::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:5a:a6:58:8f:1d:20:af:8f:6c:23:da:b6:d1:e9:39:91:52:3c:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0EAEE9D24137D1AD1B11FFCB43D72B6A80371EC
        Validity
            Not Before: Jul 22 16:42:04 2022 GMT
            Not After : Jul 21 16:47:04 2023 GMT
        Subject: CN=A8DF66FF8A882E4A764658E48F6C111D8C0F15AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d9:15:2b:6b:aa:f0:30:ec:be:9f:9e:1a:d2:
                    14:40:51:d7:30:b1:f5:2a:7d:e0:88:d8:1e:ca:8f:
                    fd:56:df:8d:95:c0:5c:d9:ac:8d:70:d7:0b:56:bd:
                    9c:48:50:7d:16:eb:e0:30:60:22:85:6a:69:1c:f4:
                    3b:4a:35:af:03:fd:58:d4:6d:c9:ed:47:3c:bd:10:
                    d0:c3:35:cb:d6:d6:27:67:d4:5c:0a:35:73:6f:5d:
                    b9:40:c0:57:63:12:9d:cb:c5:de:85:98:93:c7:cc:
                    9a:04:97:93:f8:61:df:7d:4f:27:e8:bd:00:d7:f3:
                    ee:99:7b:84:8f:4c:b5:23:6b:21:d9:49:4a:eb:32:
                    0b:d2:76:5e:de:71:c2:3c:25:9c:f0:09:a4:49:6b:
                    16:dd:39:3d:ec:32:15:bf:ad:ce:ea:ef:8b:b2:4e:
                    a8:ee:85:72:63:f4:18:82:4e:4d:9d:c5:da:eb:23:
                    c3:c9:71:f3:32:57:43:19:39:8b:95:fd:83:30:df:
                    f7:97:f8:3f:cd:ce:c2:b1:57:fb:71:f4:2e:81:b6:
                    b5:1e:42:7c:2c:ae:83:ea:53:4b:53:ef:e1:73:52:
                    c7:f9:13:77:cd:7c:8a:e9:9d:c2:7d:a8:cb:58:0b:
                    b9:fb:49:4d:c1:61:22:27:fa:38:78:49:ed:2d:25:
                    5a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:DF:66:FF:8A:88:2E:4A:76:46:58:E4:8F:6C:11:1D:8C:0F:15:AE
            X509v3 Authority Key Identifier:
                keyid:D0:EA:EE:9D:24:13:7D:1A:D1:B1:1F:FC:B4:3D:72:B6:A8:03:71:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Lb4ZQncqCbpRp9N4XYZhxrgPSpAnJwBff8Q3cVe69bV/0/D0EAEE9D24137D1AD1B11FFCB43D72B6A80371EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0EAEE9D24137D1AD1B11FFCB43D72B6A80371EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Lb4ZQncqCbpRp9N4XYZhxrgPSpAnJwBff8Q3cVe69bV/0/323830343a356634383a3a2f33322d3332203d3e20323639303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f48::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:48:ce:86:fa:99:32:0c:54:e4:0e:f4:15:e2:81:c0:bc:b4:
         46:74:75:a4:10:39:fc:0a:a7:6f:89:b7:94:fb:b0:e8:99:3e:
         ae:e6:52:7d:e5:8d:f9:30:07:a1:59:f1:be:96:cc:c7:8c:60:
         59:c9:11:7f:f2:e9:7b:65:79:a8:26:6f:c8:a6:9b:bd:21:ef:
         88:5f:71:7c:01:44:0f:ea:19:ab:4a:c7:92:d0:7b:8a:6a:35:
         41:af:b3:86:e4:a5:0e:91:f6:a6:ec:bb:97:c3:a9:f4:69:f4:
         df:be:55:9d:8f:d6:c0:dc:db:99:b5:51:7d:d5:e0:6d:4b:cc:
         f8:9d:58:63:d8:7f:9c:09:1f:51:7c:3a:12:1a:8e:85:fd:3a:
         10:66:4e:5e:2a:90:a0:96:93:74:59:e4:d7:62:8e:53:a0:a7:
         17:0d:70:a8:42:df:b4:63:28:99:1c:7f:e2:23:a5:c0:6a:e2:
         e8:df:a5:fa:ea:32:17:66:ef:58:a4:b0:8d:fe:67:5b:9d:da:
         6b:ec:68:07:1b:52:d5:ef:5a:14:ad:e4:8d:00:0a:da:ba:ab:
         c2:42:6b:43:af:40:5a:8f:67:9d:28:fb:34:c2:38:73:cf:68:
         4e:63:39:ba:91:ac:fd:a6:c9:9e:f1:f0:01:42:31:92:63:2f:
         eb:e8:58:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:47:00 2025 by rpki-client