Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/323830343a353836343a633030303a3a2f33342d3334203d3e20323638313236.roa
File:                     323830343a353836343a633030303a3a2f33342d3334203d3e20323638313236.roa (raw, json)
Hash identifier:          AHT6K3k70MEDwWtvxHc5ruk5dXF5BZlyZD6J+OycUKg=
Subject key identifier:   84:A3:1D:05:65:07:AE:AA:24:A0:0E:9E:69:F4:A4:AC:B3:72:29:22
Certificate issuer:       /CN=088019DAB11676C4E95DB6D45B7C4B1E6AA1CB64
Certificate serial:       1F8F482604B2976AF2E073141DD2735ECE399BDC
Authority key identifier: 08:80:19:DA:B1:16:76:C4:E9:5D:B6:D4:5B:7C:4B:1E:6A:A1:CB:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/088019DAB11676C4E95DB6D45B7C4B1E6AA1CB64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/323830343a353836343a633030303a3a2f33342d3334203d3e20323638313236.roa
Signing time:             Sat 08 Apr 2023 15:17:07 +0000
ROA not before:           Sat 08 Apr 2023 15:12:07 +0000
ROA not after:            Sat 06 Apr 2024 15:17:07 +0000
asID:                     268126
IP address blocks:        2804:5864:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:8f:48:26:04:b2:97:6a:f2:e0:73:14:1d:d2:73:5e:ce:39:9b:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088019DAB11676C4E95DB6D45B7C4B1E6AA1CB64
        Validity
            Not Before: Apr  8 15:12:07 2023 GMT
            Not After : Apr  6 15:17:07 2024 GMT
        Subject: CN=84A31D056507AEAA24A00E9E69F4A4ACB3722922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f5:45:ed:3d:b8:66:82:39:b6:bd:0d:99:8d:
                    08:d7:48:2e:6f:bd:10:87:5c:a6:76:8b:82:48:56:
                    ca:54:df:17:9c:00:80:ca:03:b1:39:c9:aa:be:bc:
                    21:49:0b:09:78:84:9b:95:0f:d2:c8:01:94:00:43:
                    dd:63:4f:73:87:38:9d:08:ff:6e:ca:93:1b:e4:b1:
                    1a:f6:bb:b0:9d:a7:2a:c2:9b:b6:44:c0:cf:ad:21:
                    ef:c7:c1:c6:f0:c1:41:7b:60:f0:7d:e2:58:7e:d6:
                    2e:3c:a8:43:7c:47:55:e1:0c:2b:d9:23:2d:2e:39:
                    a8:1e:ca:45:35:0b:5a:74:4e:68:2e:77:30:87:10:
                    20:77:0a:3e:56:0d:75:6a:f4:13:9e:d3:1e:c6:73:
                    c5:d9:31:6c:d0:07:52:02:31:60:83:47:50:23:f2:
                    8e:3e:54:ac:c2:f2:a3:6d:8f:60:10:e3:66:25:05:
                    66:c8:b9:f4:df:32:67:86:ab:e7:74:77:95:be:a3:
                    06:0f:21:f2:b6:44:39:cb:55:51:d5:68:eb:16:9e:
                    d1:7d:e2:b5:91:58:f3:70:07:2c:f0:27:c4:16:08:
                    e5:ef:cb:03:2e:7a:1a:9c:87:fb:35:2f:98:e6:9c:
                    b9:aa:b5:44:04:10:1c:b3:b5:86:7a:8c:0a:a1:be:
                    46:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A3:1D:05:65:07:AE:AA:24:A0:0E:9E:69:F4:A4:AC:B3:72:29:22
            X509v3 Authority Key Identifier:
                keyid:08:80:19:DA:B1:16:76:C4:E9:5D:B6:D4:5B:7C:4B:1E:6A:A1:CB:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/088019DAB11676C4E95DB6D45B7C4B1E6AA1CB64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/088019DAB11676C4E95DB6D45B7C4B1E6AA1CB64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/323830343a353836343a633030303a3a2f33342d3334203d3e20323638313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5864:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         e1:bc:ea:d6:8f:df:1f:33:08:92:11:a0:7d:5e:53:d3:7e:39:
         2d:6e:b3:32:91:15:30:7b:78:98:f0:10:e1:0d:5d:33:16:6d:
         24:3d:65:de:41:c2:29:d5:0e:1e:fe:2f:b8:27:2e:ac:92:15:
         45:07:e2:99:c0:ae:df:2c:19:21:0f:70:95:62:2d:33:18:37:
         99:aa:6e:f7:7c:90:cb:02:e5:52:e3:b6:09:09:9d:b6:20:38:
         49:1d:e2:0b:5e:4b:1b:c2:54:8d:25:2f:57:5d:17:76:ce:1b:
         59:b4:a3:07:40:f7:06:ed:87:a5:ca:32:e2:30:ef:d5:4e:fc:
         05:73:62:f6:b5:b7:96:65:af:3b:e7:55:0a:6e:26:05:58:4a:
         0a:7a:42:09:a5:83:9d:e9:93:4a:53:d0:8c:a1:bc:52:4c:59:
         95:c4:80:4a:f7:d6:29:21:5b:53:c6:31:8c:fd:6f:45:ee:7d:
         ee:f2:2e:56:14:00:9b:d1:e1:cd:1a:8a:d7:22:e4:55:6b:8f:
         27:cb:13:de:42:1d:b9:92:ba:ae:e7:dc:10:96:3b:a4:c5:23:
         0a:48:d6:a1:44:e8:61:ff:f5:95:36:41:5d:06:84:e4:e8:3e:
         aa:33:ad:75:f4:00:c2:4e:48:58:3f:4c:29:62:11:4b:a2:29:
         89:22:c3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:13:30 2025 by rpki-client