Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Y3uc5CLk9HFsM2DSwdtQohVCYBwSAt7wbQ4MQhehK9o/1/323830343a313064633a633030303a3a2f33342d3334203d3e20323633363532.roa
File:                     323830343a313064633a633030303a3a2f33342d3334203d3e20323633363532.roa (raw, json)
Hash identifier:          Azs8oEb1pYS6icopQEWfnKv3sRBoUfJHJUKJSLrTyp4=
Subject key identifier:   ED:97:2B:D7:FA:33:41:62:D9:37:CB:97:67:45:3C:72:E3:4E:60:EB
Certificate issuer:       /CN=1072FB38BE0FF40EC17295B16352C4184106EFA8
Certificate serial:       38B6AFB02DFEFFCE787C5EB0CAD6E0FAD5AC92B1
Authority key identifier: 10:72:FB:38:BE:0F:F4:0E:C1:72:95:B1:63:52:C4:18:41:06:EF:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1072FB38BE0FF40EC17295B16352C4184106EFA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Y3uc5CLk9HFsM2DSwdtQohVCYBwSAt7wbQ4MQhehK9o/1/323830343a313064633a633030303a3a2f33342d3334203d3e20323633363532.roa
Signing time:             Thu 16 Nov 2023 15:28:56 +0000
ROA not before:           Thu 16 Nov 2023 15:23:56 +0000
ROA not after:            Thu 14 Nov 2024 15:28:56 +0000
asID:                     263652
IP address blocks:        2804:10dc:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:b6:af:b0:2d:fe:ff:ce:78:7c:5e:b0:ca:d6:e0:fa:d5:ac:92:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1072FB38BE0FF40EC17295B16352C4184106EFA8
        Validity
            Not Before: Nov 16 15:23:56 2023 GMT
            Not After : Nov 14 15:28:56 2024 GMT
        Subject: CN=ED972BD7FA334162D937CB9767453C72E34E60EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:4b:51:86:20:cd:04:e7:3a:85:31:7d:1a:36:
                    9b:56:70:49:8e:f2:7c:de:d4:55:48:b0:94:77:7c:
                    0d:04:d1:3f:65:45:25:7c:56:1e:65:3a:48:b8:46:
                    81:0c:b9:a9:9f:bb:4b:0c:de:c7:98:f2:70:14:a5:
                    29:ed:1b:7a:ba:e7:1c:b3:55:9c:d6:b8:90:55:4f:
                    d5:53:01:ba:c7:b8:e4:7f:a4:e7:78:75:fe:6a:d1:
                    5d:b3:ad:18:8f:44:e6:fc:22:cf:f5:10:f6:5b:d6:
                    e1:18:21:f9:3a:ef:8c:e0:46:0d:e6:23:e0:1d:d0:
                    1b:e1:12:34:0a:fe:46:64:7a:6d:c6:76:9c:54:ef:
                    9b:26:48:7f:1e:82:93:02:69:d6:e7:ac:34:19:a9:
                    0f:9b:f6:4c:3a:5a:69:b5:81:56:6a:d1:9f:7b:ad:
                    97:3f:9a:7e:0a:38:74:5d:c5:ad:ab:5e:16:21:76:
                    21:8d:84:0a:f8:eb:05:45:25:71:8c:98:5d:17:fa:
                    c9:e5:3b:48:94:f9:51:a5:71:9d:08:0a:60:6e:9c:
                    a9:83:84:0a:4b:3d:a9:79:09:43:78:0b:d6:ba:bd:
                    2a:15:f3:9d:9c:c4:b1:92:9c:9d:e7:a4:fe:d4:65:
                    05:e8:24:0f:ce:e7:35:66:46:c8:b4:b7:8e:c3:e4:
                    44:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:97:2B:D7:FA:33:41:62:D9:37:CB:97:67:45:3C:72:E3:4E:60:EB
            X509v3 Authority Key Identifier:
                keyid:10:72:FB:38:BE:0F:F4:0E:C1:72:95:B1:63:52:C4:18:41:06:EF:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Y3uc5CLk9HFsM2DSwdtQohVCYBwSAt7wbQ4MQhehK9o/1/1072FB38BE0FF40EC17295B16352C4184106EFA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1072FB38BE0FF40EC17295B16352C4184106EFA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Y3uc5CLk9HFsM2DSwdtQohVCYBwSAt7wbQ4MQhehK9o/1/323830343a313064633a633030303a3a2f33342d3334203d3e20323633363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:10dc:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6e:1d:c4:7f:6c:2a:25:75:c6:d4:3a:41:47:c1:ff:05:48:90:
         f9:43:03:4d:81:df:9a:bb:43:ac:da:aa:44:06:40:33:91:fe:
         d4:b4:8b:e5:5b:a2:78:f4:4c:c1:39:3b:4e:44:b3:a9:e7:bd:
         0b:3a:aa:94:90:b8:bf:f3:32:3c:94:b4:9c:f4:dd:6c:a9:da:
         c3:94:27:de:5e:17:e1:50:8d:ae:bb:75:a3:9b:c4:87:2b:1c:
         1f:a6:68:70:0b:b3:51:eb:8f:f4:48:89:a3:b8:68:f3:eb:07:
         da:cb:09:2f:81:45:f6:ea:fb:52:21:2a:2f:e5:e2:f6:12:cc:
         f1:73:35:39:c9:5a:48:f9:3c:98:82:51:64:cf:4e:86:58:45:
         5a:12:0e:90:05:76:6e:cf:90:95:8e:dd:2b:c4:54:12:82:4a:
         b0:8e:a5:7a:8c:d8:6e:5e:5e:c1:f9:4f:e6:cc:0f:10:a6:24:
         26:13:2b:fc:5d:23:48:1b:b7:4f:3f:cd:9e:d5:c6:00:67:17:
         32:96:88:d2:21:bd:44:21:e4:cf:4d:1e:97:b6:0e:3c:44:cd:
         62:68:5a:3b:cd:1c:b4:39:cb:4a:90:47:a7:df:fd:a4:a8:f6:
         56:8b:2f:13:3b:19:ed:fd:81:49:20:be:be:44:b3:ea:cd:06:
         68:ed:25:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 06:01:33 2025 by rpki-client