Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5f7VwqbvHL1Zbkuxafh8in3C1JeG6343dTTw6fdV2uct/0/323830343a336166633a3a2f33322d3332203d3e20323636313233.roa
File:                     323830343a336166633a3a2f33322d3332203d3e20323636313233.roa (raw, json)
Hash identifier:          3EDw0CzjttN1ruTyTCCTDlCUe7bUFOUciOOaeDTRlQ0=
Subject key identifier:   AF:2C:A7:27:FE:BF:C2:78:74:06:D5:9C:23:7A:F4:10:79:57:E1:E6
Certificate issuer:       /CN=830A104C477DBE298AFD95D6C3773E9A1E7CC397
Certificate serial:       534BE7BB15A914DA22DA01331D06ED35E6CCC30F
Authority key identifier: 83:0A:10:4C:47:7D:BE:29:8A:FD:95:D6:C3:77:3E:9A:1E:7C:C3:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/830A104C477DBE298AFD95D6C3773E9A1E7CC397.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5f7VwqbvHL1Zbkuxafh8in3C1JeG6343dTTw6fdV2uct/0/323830343a336166633a3a2f33322d3332203d3e20323636313233.roa
Signing time:             Mon 09 May 2022 17:55:00 +0000
ROA not before:           Mon 09 May 2022 17:50:00 +0000
ROA not after:            Mon 08 May 2023 17:55:00 +0000
asID:                     266123
IP address blocks:        2804:3afc::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:4b:e7:bb:15:a9:14:da:22:da:01:33:1d:06:ed:35:e6:cc:c3:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=830A104C477DBE298AFD95D6C3773E9A1E7CC397
        Validity
            Not Before: May  9 17:50:00 2022 GMT
            Not After : May  8 17:55:00 2023 GMT
        Subject: CN=AF2CA727FEBFC2787406D59C237AF4107957E1E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e3:08:56:85:ed:10:15:ef:74:8b:18:2d:3a:
                    ce:fd:be:0b:6a:6a:a7:ba:35:8a:ea:81:f7:3a:d6:
                    7b:6b:80:9b:f8:a3:db:be:c9:e5:96:9e:29:c6:b1:
                    77:bc:3d:86:70:c5:9d:1e:0b:23:65:f4:be:87:ce:
                    d9:8a:f4:97:f7:bb:b1:94:12:e9:5d:31:cd:d3:59:
                    cf:a8:40:ed:87:1e:d1:a1:a9:b2:85:35:62:1c:3d:
                    19:8e:6d:53:8b:63:ce:c1:b9:9f:09:62:c1:af:18:
                    71:3d:4c:f4:9a:be:00:0f:54:40:86:e3:6c:be:67:
                    2d:a7:78:c4:d5:d0:6a:1d:1d:55:17:fa:e6:70:59:
                    be:e2:95:af:c6:2a:47:ce:23:97:4e:85:2a:88:c4:
                    2d:1f:65:d1:85:a1:50:12:63:b9:d6:57:08:ed:19:
                    83:70:ae:67:e9:8a:6a:6d:0e:83:aa:ec:a9:45:a3:
                    46:6a:c5:00:cd:bd:6f:ce:11:0a:a3:ca:7e:cb:fc:
                    e8:b5:76:75:ca:1c:a0:26:09:b1:67:4f:dd:18:aa:
                    f5:d0:b9:b2:d4:53:db:10:6e:21:49:f4:87:5a:52:
                    88:d2:42:ea:e9:dc:83:26:08:ea:d9:19:da:fb:3f:
                    92:e5:dd:2c:2b:49:78:a3:ca:f4:b9:d3:68:0d:81:
                    55:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:2C:A7:27:FE:BF:C2:78:74:06:D5:9C:23:7A:F4:10:79:57:E1:E6
            X509v3 Authority Key Identifier:
                keyid:83:0A:10:4C:47:7D:BE:29:8A:FD:95:D6:C3:77:3E:9A:1E:7C:C3:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5f7VwqbvHL1Zbkuxafh8in3C1JeG6343dTTw6fdV2uct/0/830A104C477DBE298AFD95D6C3773E9A1E7CC397.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/830A104C477DBE298AFD95D6C3773E9A1E7CC397.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5f7VwqbvHL1Zbkuxafh8in3C1JeG6343dTTw6fdV2uct/0/323830343a336166633a3a2f33322d3332203d3e20323636313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3afc::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:27:32:ef:55:04:f8:e1:4d:86:6e:ad:f9:4c:5e:cd:91:07:
         57:dd:d6:17:82:08:68:45:eb:60:cb:7b:a3:a5:68:f2:bc:6e:
         7c:25:71:7d:cb:c5:75:97:fd:0a:38:da:71:b5:8c:b4:cd:99:
         28:2d:f6:75:5e:0e:b1:52:c9:1b:55:cb:43:3c:5b:0b:25:88:
         d0:4b:e8:f1:ab:dd:54:27:5f:e5:6d:37:10:1e:42:c5:ff:fa:
         45:58:bb:92:9b:3c:73:3d:40:92:66:18:79:48:a6:ba:a0:77:
         1c:88:a4:e6:28:d1:e4:e9:ec:78:25:49:59:5a:89:ad:bf:1a:
         60:3b:e2:51:34:79:31:8f:79:56:1b:c3:06:af:fe:35:0d:60:
         cd:c6:d9:69:8f:c7:14:83:fc:a1:64:0a:d3:04:df:10:e7:cd:
         a9:7e:b0:5c:99:79:b2:c4:64:eb:5e:3a:bf:62:8a:8a:9a:15:
         29:a4:1d:d8:57:39:0a:f3:d4:70:f6:0f:27:b8:c7:3f:b0:a5:
         1d:92:df:73:6b:44:8d:4c:0d:c9:73:32:df:05:85:e2:18:70:
         49:f4:6a:92:24:96:28:f2:d9:ba:40:ef:28:dc:01:4f:95:f4:
         86:b4:9c:e2:3b:78:7b:18:67:5b:ab:c1:f0:76:58:12:4a:aa:
         cd:9d:4a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:39:19 2025 by rpki-client