Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/0/323830343a346538383a633030303a3a2f33342d3334203d3e20323638323637.roa
File:                     323830343a346538383a633030303a3a2f33342d3334203d3e20323638323637.roa (raw, json)
Hash identifier:          5vhW9WQvWIqdOflLnpr4Iq6KjbvDBVMoD3QpAaQwWuM=
Subject key identifier:   4F:87:88:37:1F:98:8D:41:BE:EA:96:0E:35:3C:54:9E:E5:D4:62:76
Certificate issuer:       /CN=D8ECFE7B56C795535B855B9D4F0CD7E02E452649
Certificate serial:       788DFA748A66E402469BE0222E94B88E85E5C479
Authority key identifier: D8:EC:FE:7B:56:C7:95:53:5B:85:5B:9D:4F:0C:D7:E0:2E:45:26:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8ECFE7B56C795535B855B9D4F0CD7E02E452649.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/0/323830343a346538383a633030303a3a2f33342d3334203d3e20323638323637.roa
Signing time:             Fri 16 Dec 2022 15:00:01 +0000
ROA not before:           Fri 16 Dec 2022 14:55:01 +0000
ROA not after:            Fri 15 Dec 2023 15:00:01 +0000
asID:                     268267
IP address blocks:        2804:4e88:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:8d:fa:74:8a:66:e4:02:46:9b:e0:22:2e:94:b8:8e:85:e5:c4:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8ECFE7B56C795535B855B9D4F0CD7E02E452649
        Validity
            Not Before: Dec 16 14:55:01 2022 GMT
            Not After : Dec 15 15:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0b:3f:d5:0c:a4:05:de:1f:20:b9:97:1e:f3:
                    64:eb:61:55:0a:f3:63:fc:23:40:8b:8c:c8:82:7e:
                    f8:12:d5:ad:6d:50:34:58:ae:df:2c:1f:ce:5d:1a:
                    bf:01:b0:98:ef:6e:a2:29:ab:ce:7c:77:ac:a7:9f:
                    4b:63:87:5d:70:13:5b:fa:09:b8:8a:65:e9:06:65:
                    ff:96:51:4e:0c:6c:f0:84:53:fe:f8:25:f9:c9:21:
                    13:1d:0a:47:df:19:05:75:eb:6c:8a:bf:60:dd:9e:
                    92:8a:a9:7b:87:4e:a6:0d:b8:15:9b:0c:c4:49:aa:
                    9b:90:96:d2:32:1c:72:bc:b6:27:3d:9f:bd:76:a4:
                    06:30:06:23:b0:ae:39:b3:37:34:b7:0f:1e:6c:8d:
                    e7:22:59:40:5e:3e:b0:65:dd:85:74:b0:20:57:f4:
                    cd:70:fa:bb:bc:d9:ed:47:4d:8a:9d:55:ca:f9:4f:
                    e6:e1:e2:d5:a8:3c:9c:a8:81:47:e1:83:5b:a2:a4:
                    1e:65:3c:41:4f:8f:4a:49:32:44:72:69:99:15:ad:
                    97:45:38:34:ca:d1:84:1d:95:30:5a:ac:9b:56:85:
                    6c:ac:af:3e:2d:39:b8:8e:1b:01:54:6e:d9:85:39:
                    88:df:93:2f:ed:eb:14:34:78:48:e6:4e:c6:8a:98:
                    14:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:87:88:37:1F:98:8D:41:BE:EA:96:0E:35:3C:54:9E:E5:D4:62:76
            X509v3 Authority Key Identifier:
                keyid:D8:EC:FE:7B:56:C7:95:53:5B:85:5B:9D:4F:0C:D7:E0:2E:45:26:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/0/D8ECFE7B56C795535B855B9D4F0CD7E02E452649.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8ECFE7B56C795535B855B9D4F0CD7E02E452649.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/0/323830343a346538383a633030303a3a2f33342d3334203d3e20323638323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e88:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         62:ea:98:d6:28:04:55:9f:cd:09:c7:88:bc:e6:bd:0f:7a:62:
         49:35:cd:08:01:08:69:76:9d:34:a8:a5:28:16:ab:a3:2d:79:
         91:ac:4e:b6:f9:0a:9c:9f:9d:7e:a6:da:80:33:47:b2:f7:08:
         f2:1b:3b:41:64:dd:0c:e7:05:a9:7b:63:91:f2:cc:84:6b:40:
         e9:16:c1:7b:23:93:16:a3:22:e8:57:20:72:ed:4c:80:69:84:
         71:c8:41:b2:39:ee:d2:88:23:d8:3c:86:54:8b:a9:67:44:14:
         36:8d:ea:71:5c:4d:08:5e:4c:be:3b:0c:85:a1:74:20:c9:c9:
         13:4a:3f:04:b0:5b:d1:c7:85:80:a9:96:49:bf:e4:f5:bf:60:
         fd:9d:60:9d:24:9c:5f:29:97:87:8a:bf:17:4c:e3:e3:27:79:
         26:2e:1f:2f:af:e5:db:be:c4:24:2f:2c:6b:b9:a3:b4:0c:7b:
         43:5d:e5:15:a1:4e:bd:8b:0c:d5:57:3a:43:fb:4d:19:a7:89:
         51:a4:15:22:5e:b2:b9:7a:45:da:5f:36:b7:a7:61:bd:45:c5:
         33:4c:2b:e2:61:2c:6c:27:23:d8:30:55:7d:78:da:07:90:b7:
         42:21:c0:4d:56:5e:d2:20:a6:8f:d4:27:17:c1:5c:7a:06:43:
         97:00:fd:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 06:14:14 2025 by rpki-client