Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6NKoS8HdNdRPW9srGy5afZPz5MNCHoqyeMrxXinKXCMN/0/323830343a353237383a3a2f33322d3332203d3e20323638353230.roa
File:                     323830343a353237383a3a2f33322d3332203d3e20323638353230.roa (raw, json)
Hash identifier:          +9Ux1nrVsvT0ZXGeoATlTqFU/0bpOQzsG37tF9XnPtQ=
Subject key identifier:   98:38:7E:5A:05:F7:7F:38:C2:23:AB:AC:C3:3E:27:E8:4E:68:25:99
Certificate issuer:       /CN=3F4EE2BF37D8D630C9DA0D09094E3AB10140A9BF
Certificate serial:       01915DF443C64C16B8CC47264D7644465FA83B02
Authority key identifier: 3F:4E:E2:BF:37:D8:D6:30:C9:DA:0D:09:09:4E:3A:B1:01:40:A9:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F4EE2BF37D8D630C9DA0D09094E3AB10140A9BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NKoS8HdNdRPW9srGy5afZPz5MNCHoqyeMrxXinKXCMN/0/323830343a353237383a3a2f33322d3332203d3e20323638353230.roa
Signing time:             Fri 22 Apr 2022 10:45:59 +0000
ROA not before:           Fri 22 Apr 2022 10:40:59 +0000
ROA not after:            Fri 21 Apr 2023 10:45:59 +0000
asID:                     268520
IP address blocks:        2804:5278::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:5d:f4:43:c6:4c:16:b8:cc:47:26:4d:76:44:46:5f:a8:3b:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F4EE2BF37D8D630C9DA0D09094E3AB10140A9BF
        Validity
            Not Before: Apr 22 10:40:59 2022 GMT
            Not After : Apr 21 10:45:59 2023 GMT
        Subject: CN=98387E5A05F77F38C223ABACC33E27E84E682599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6d:17:7d:33:63:39:d7:ae:9a:e9:b3:93:15:
                    74:64:e6:74:db:81:e1:5c:20:e4:0b:7e:4a:5a:da:
                    77:8a:01:71:74:48:99:9d:44:e5:dc:96:ac:f6:dd:
                    cd:51:2f:d0:b7:05:0d:23:64:96:dd:81:ad:e9:60:
                    ee:c3:ed:19:fb:75:47:cd:c9:f9:74:ce:78:e8:ff:
                    23:ca:4b:22:b8:d1:1f:4b:59:5c:71:d4:c6:d1:06:
                    63:6e:20:05:3c:be:5b:8f:fd:28:91:cb:b1:56:5a:
                    3e:c1:d0:cb:10:b9:2f:a5:14:03:de:4c:d8:45:d1:
                    0f:a8:2c:28:01:20:e8:53:5e:b7:e5:61:ce:c1:97:
                    40:7b:8a:fa:b3:60:2f:d2:87:99:2c:b3:f8:c4:d3:
                    79:70:02:0f:06:50:68:cb:42:1b:3c:be:f7:2d:84:
                    7e:db:7d:4f:26:b5:92:ad:67:92:5c:4e:f4:b7:37:
                    50:99:e8:87:c4:29:7b:ab:a1:7d:06:e4:fd:5e:2a:
                    1d:02:fa:7d:c8:ba:67:c6:98:69:cf:e8:ba:d6:69:
                    ef:7c:37:c0:45:8d:de:57:ee:68:03:28:72:86:95:
                    26:e5:6a:13:2d:46:a5:b3:f6:b0:ce:d9:29:4f:89:
                    ff:d5:c5:93:62:8d:3d:a2:d6:37:60:af:10:f2:00:
                    a9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:38:7E:5A:05:F7:7F:38:C2:23:AB:AC:C3:3E:27:E8:4E:68:25:99
            X509v3 Authority Key Identifier:
                keyid:3F:4E:E2:BF:37:D8:D6:30:C9:DA:0D:09:09:4E:3A:B1:01:40:A9:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NKoS8HdNdRPW9srGy5afZPz5MNCHoqyeMrxXinKXCMN/0/3F4EE2BF37D8D630C9DA0D09094E3AB10140A9BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F4EE2BF37D8D630C9DA0D09094E3AB10140A9BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NKoS8HdNdRPW9srGy5afZPz5MNCHoqyeMrxXinKXCMN/0/323830343a353237383a3a2f33322d3332203d3e20323638353230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5278::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:60:9e:3f:c5:4c:64:36:d1:2c:c3:3b:8b:0b:67:65:7b:bc:
         8a:11:cc:99:b8:ea:da:a2:a8:92:56:74:3c:77:29:12:4a:bd:
         77:b3:07:7c:4d:36:52:88:e4:48:6d:cf:aa:13:ec:8b:5a:86:
         8f:62:c6:38:21:6e:48:4b:e3:bb:2a:d9:27:cc:a8:cd:92:17:
         da:f5:b7:3f:ff:e8:e8:d8:1e:00:0c:f2:b0:04:74:33:f8:77:
         bd:f6:62:b2:27:6a:ff:9f:4c:c7:b3:b1:40:dc:1a:01:f9:6f:
         c2:48:5b:ea:64:3d:b5:68:f9:a4:4e:a7:a9:81:d7:e8:c5:43:
         97:9d:0e:3c:f2:05:92:9e:e7:0f:87:a0:b3:98:99:8d:a5:54:
         b3:de:71:4e:a8:77:da:b1:e9:84:7e:98:59:9f:a7:d9:1c:89:
         ee:d5:71:ff:d1:2d:33:cf:c3:92:e4:35:32:60:a9:ae:17:c8:
         f9:84:bb:3d:fd:8f:99:cb:12:6e:34:e7:94:b5:df:61:09:ec:
         43:f5:e1:f2:16:94:7f:92:aa:8a:48:fb:73:cf:2f:de:0d:c4:
         7e:5d:53:57:77:c4:a0:e7:5c:31:20:8e:dc:1c:35:f5:37:2e:
         0a:ff:20:4a:49:42:3d:98:38:2c:c5:59:d5:68:e3:35:09:6b:
         23:b4:6f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 21:35:38 2025 by rpki-client