Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/0/323830343a383333633a3a2f33322d3332203d3e20323732313835.roa
File:                     323830343a383333633a3a2f33322d3332203d3e20323732313835.roa (raw, json)
Hash identifier:          egjyKI0Q6ugrRQt7BNrGdsPzJ+MPxoZk08OEUeQO1cQ=
Subject key identifier:   C8:56:80:57:CF:35:FE:B2:A3:04:88:0B:28:3C:AD:18:36:4B:94:7D
Certificate issuer:       /CN=C6BD52DC079825A702D874B54502AD138171621D
Certificate serial:       3A7DB2F8C75C3F7E572F2E457BA8C7EB8B190802
Authority key identifier: C6:BD:52:DC:07:98:25:A7:02:D8:74:B5:45:02:AD:13:81:71:62:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6BD52DC079825A702D874B54502AD138171621D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/0/323830343a383333633a3a2f33322d3332203d3e20323732313835.roa
Signing time:             Thu 25 Aug 2022 16:00:00 +0000
ROA not before:           Thu 25 Aug 2022 15:55:00 +0000
ROA not after:            Thu 24 Aug 2023 16:00:00 +0000
asID:                     272185
IP address blocks:        2804:833c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:7d:b2:f8:c7:5c:3f:7e:57:2f:2e:45:7b:a8:c7:eb:8b:19:08:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6BD52DC079825A702D874B54502AD138171621D
        Validity
            Not Before: Aug 25 15:55:00 2022 GMT
            Not After : Aug 24 16:00:00 2023 GMT
        Subject: CN=3082010A0282010100C43D5EAC6BF54B5E924CE098306B7F40FE8CED67EF328CD4C2E32D4531541D436D0AB2806388BF258C52374EE80EC8C31704388542E797456BBFD3742E15D9CC18140661B26BA8FE5A1DDE794EF203F6F455D488FBCABAF32EB7A1BB6E4783AA95192779C6A937F9AA7D07A5F8858FA99624FA8CF3BED810762ABD6C9817A020DBE5E391CDF802D6542F741D66C7BB4DC86129BD782BAB76255D9E24520E7F30AD5221CC63F29BE5DA3687669EE3244E8A96220D4968C874A57B44F3483A343DD18BB29D3EB90C8C4B008E80D44B8C7CF704ADE90E1B820E589E5CA3E46F81247EF12808930309EFB3596C76DD0046462FBA4EA10B3044A0EB59AD0A943CA8610203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3d:5e:ac:6b:f5:4b:5e:92:4c:e0:98:30:6b:
                    7f:40:fe:8c:ed:67:ef:32:8c:d4:c2:e3:2d:45:31:
                    54:1d:43:6d:0a:b2:80:63:88:bf:25:8c:52:37:4e:
                    e8:0e:c8:c3:17:04:38:85:42:e7:97:45:6b:bf:d3:
                    74:2e:15:d9:cc:18:14:06:61:b2:6b:a8:fe:5a:1d:
                    de:79:4e:f2:03:f6:f4:55:d4:88:fb:ca:ba:f3:2e:
                    b7:a1:bb:6e:47:83:aa:95:19:27:79:c6:a9:37:f9:
                    aa:7d:07:a5:f8:85:8f:a9:96:24:fa:8c:f3:be:d8:
                    10:76:2a:bd:6c:98:17:a0:20:db:e5:e3:91:cd:f8:
                    02:d6:54:2f:74:1d:66:c7:bb:4d:c8:61:29:bd:78:
                    2b:ab:76:25:5d:9e:24:52:0e:7f:30:ad:52:21:cc:
                    63:f2:9b:e5:da:36:87:66:9e:e3:24:4e:8a:96:22:
                    0d:49:68:c8:74:a5:7b:44:f3:48:3a:34:3d:d1:8b:
                    b2:9d:3e:b9:0c:8c:4b:00:8e:80:d4:4b:8c:7c:f7:
                    04:ad:e9:0e:1b:82:0e:58:9e:5c:a3:e4:6f:81:24:
                    7e:f1:28:08:93:03:09:ef:b3:59:6c:76:dd:00:46:
                    46:2f:ba:4e:a1:0b:30:44:a0:eb:59:ad:0a:94:3c:
                    a8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:56:80:57:CF:35:FE:B2:A3:04:88:0B:28:3C:AD:18:36:4B:94:7D
            X509v3 Authority Key Identifier:
                keyid:C6:BD:52:DC:07:98:25:A7:02:D8:74:B5:45:02:AD:13:81:71:62:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/0/C6BD52DC079825A702D874B54502AD138171621D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6BD52DC079825A702D874B54502AD138171621D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/0/323830343a383333633a3a2f33322d3332203d3e20323732313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:833c::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:95:fb:bd:4f:6e:bc:77:30:2c:c0:a5:a0:03:bf:98:14:b3:
         f4:6b:8e:a9:1d:b7:f6:a8:fc:a9:f0:97:ae:60:3a:92:c1:31:
         4d:15:65:e4:af:17:20:11:bf:77:f0:de:cc:24:e0:95:c3:a7:
         bd:df:1a:d3:d2:d8:23:9a:b3:c0:f1:84:45:e8:0e:90:9c:ee:
         ad:3d:0c:8f:ff:d1:ce:0b:84:f0:52:a1:2b:bb:02:dc:ee:a2:
         c7:e2:25:bc:78:2e:d4:52:43:34:cd:96:cd:b9:ba:0a:a7:54:
         2b:6a:ca:25:76:f9:36:52:94:52:c6:1d:06:72:5b:c8:dc:f6:
         9b:4e:1a:33:68:3d:da:ba:9b:d3:8e:84:42:e0:bf:ee:34:fd:
         58:8d:71:21:13:68:24:7a:4c:1a:10:d3:ba:74:34:dc:1e:ee:
         66:b2:a5:f6:ea:5e:26:4f:09:63:8a:54:9d:9c:1e:01:a9:9b:
         f1:5b:55:dc:0d:da:70:ef:9f:72:03:5f:1f:df:c6:f4:e6:06:
         42:6e:65:3e:e3:d0:09:b7:90:fc:c2:6b:7e:0e:aa:46:c0:0f:
         03:73:ee:a7:4a:aa:01:83:8a:d9:36:b0:a9:b6:01:71:3a:68:
         72:10:a1:22:39:a6:7a:db:09:31:8b:d3:a8:fe:ea:26:50:70:
         78:c5:f5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 09:38:25 2025 by rpki-client