Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/323830343a343831343a3a2f33332d3333203d3e20323637303936.roa
File:                     323830343a343831343a3a2f33332d3333203d3e20323637303936.roa (raw, json)
Hash identifier:          0uLes18cxNbCwLJcvgOiIfnoIbgAN5QtkFndzTnS4y0=
Subject key identifier:   C3:FE:DE:5C:E3:FB:9F:CE:20:38:55:A1:75:F4:1C:6E:A0:4E:FF:79
Certificate issuer:       /CN=D3027D8397E5F8E3DAAB6ECE11B02390F35298C8
Certificate serial:       4C23804976B3891B1EB2BC0D50149A0F1D32B820
Authority key identifier: D3:02:7D:83:97:E5:F8:E3:DA:AB:6E:CE:11:B0:23:90:F3:52:98:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D3027D8397E5F8E3DAAB6ECE11B02390F35298C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/323830343a343831343a3a2f33332d3333203d3e20323637303936.roa
Signing time:             Tue 27 Jun 2023 17:41:43 +0000
ROA not before:           Tue 27 Jun 2023 17:36:43 +0000
ROA not after:            Tue 25 Jun 2024 17:41:43 +0000
asID:                     267096
IP address blocks:        2804:4814::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:23:80:49:76:b3:89:1b:1e:b2:bc:0d:50:14:9a:0f:1d:32:b8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3027D8397E5F8E3DAAB6ECE11B02390F35298C8
        Validity
            Not Before: Jun 27 17:36:43 2023 GMT
            Not After : Jun 25 17:41:43 2024 GMT
        Subject: CN=C3FEDE5CE3FB9FCE203855A175F41C6EA04EFF79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:13:3a:79:4e:ac:ca:84:95:16:94:04:08:4f:
                    04:38:14:72:bf:ac:55:fc:80:08:93:b2:b5:0b:5a:
                    08:b9:be:77:c2:ba:9f:02:10:47:b8:28:e0:58:ae:
                    92:f2:83:d8:ee:30:84:2c:06:dd:7d:41:1b:0b:61:
                    48:e0:04:1b:42:20:b5:ad:d1:d6:b6:04:d8:7c:e0:
                    c1:1c:75:b6:9c:54:7c:0e:e3:44:6e:90:3f:2f:37:
                    26:d4:8b:83:ae:44:8b:8f:3d:19:b5:5e:97:16:09:
                    4a:f5:ac:99:bf:f2:5a:b1:f9:67:17:37:6f:53:a4:
                    51:0c:e3:ac:9a:9c:9a:3e:76:2d:44:98:95:3b:38:
                    40:4b:77:cc:8a:ea:6e:9b:35:a4:f5:06:b4:27:bf:
                    f4:ea:47:eb:b8:0b:80:63:95:7d:6e:57:29:e4:f0:
                    7c:99:a7:e9:eb:f4:6d:2b:ad:b6:29:14:2a:e1:8f:
                    bc:41:2b:a9:47:3b:ea:0a:24:fb:88:09:47:d1:fc:
                    8d:e6:de:08:8e:83:e2:42:86:60:f8:33:3d:1a:a2:
                    62:41:f1:69:e5:1b:ae:c7:2b:f0:02:ed:9c:c1:1f:
                    3a:42:7a:31:b9:08:e2:00:da:37:27:80:66:2b:47:
                    b4:1c:a3:8a:be:df:c6:8d:6e:5f:0f:e9:6c:63:b5:
                    89:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:FE:DE:5C:E3:FB:9F:CE:20:38:55:A1:75:F4:1C:6E:A0:4E:FF:79
            X509v3 Authority Key Identifier:
                keyid:D3:02:7D:83:97:E5:F8:E3:DA:AB:6E:CE:11:B0:23:90:F3:52:98:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/D3027D8397E5F8E3DAAB6ECE11B02390F35298C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D3027D8397E5F8E3DAAB6ECE11B02390F35298C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/323830343a343831343a3a2f33332d3333203d3e20323637303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4814::/33

    Signature Algorithm: sha256WithRSAEncryption
         2f:8f:b9:47:cc:f5:03:af:ec:90:7e:b0:78:31:45:49:71:58:
         c7:bc:c3:82:28:f9:ee:b9:41:77:18:bf:5c:6c:88:31:00:6b:
         45:c1:c9:e9:c8:3c:3c:8a:87:09:60:40:84:7d:43:72:87:84:
         e2:5d:ec:04:20:0b:8f:f7:46:15:fa:92:9e:16:f2:84:98:45:
         61:03:cb:a6:6e:40:bb:63:8c:56:ea:8b:84:6e:25:22:36:f6:
         be:8e:05:e3:e7:a2:a2:e9:3f:0e:85:38:40:23:d2:35:f5:90:
         20:ec:43:69:5a:a0:cc:89:aa:28:48:c6:52:22:b6:6e:37:b5:
         34:6a:5b:00:ba:75:3b:85:e3:c0:89:0b:31:73:e9:c2:49:a6:
         d1:cf:bb:58:6e:5e:ac:36:3a:9a:d7:1e:c1:7c:f0:2e:69:08:
         74:c8:74:cd:fb:c1:c4:4d:b9:73:9d:e7:86:e1:28:fb:99:fc:
         70:82:22:0a:19:33:ec:4d:6c:64:60:46:fc:bd:c5:d6:5f:32:
         d2:78:5b:a7:82:b4:62:dc:db:a4:86:45:5c:a3:04:8b:25:c5:
         a3:6d:11:58:eb:d3:99:fb:42:40:23:35:8b:bf:3c:3b:0f:2c:
         cf:74:41:f8:be:ea:c8:08:30:f5:21:a4:66:92:7f:82:9d:30:
         c4:af:c7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 10:30:05 2025 by rpki-client