Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7hqVi6AdvR3kyeBXXT63GGjSj4tJzXch27FpeBFPcnq4/0/323830343a326435303a3a2f33332d3333203d3e20323635323734.roa
File:                     323830343a326435303a3a2f33332d3333203d3e20323635323734.roa (raw, json)
Hash identifier:          5xamDybtIQLSYYzF+LdHaXFV9XANbcyl7qmULSJitFI=
Subject key identifier:   68:B8:5D:5E:2D:B5:4F:C0:99:9B:55:D9:C0:55:76:76:DB:4A:67:02
Certificate issuer:       /CN=36AC8D9C76AEC5FD40820AC6BE7F91D19E99CBB4
Certificate serial:       535D3D3EE8330E8BB2A2D0958B26FF017C197437
Authority key identifier: 36:AC:8D:9C:76:AE:C5:FD:40:82:0A:C6:BE:7F:91:D1:9E:99:CB:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36AC8D9C76AEC5FD40820AC6BE7F91D19E99CBB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7hqVi6AdvR3kyeBXXT63GGjSj4tJzXch27FpeBFPcnq4/0/323830343a326435303a3a2f33332d3333203d3e20323635323734.roa
Signing time:             Mon 03 Apr 2023 17:36:09 +0000
ROA not before:           Mon 03 Apr 2023 17:31:09 +0000
ROA not after:            Mon 01 Apr 2024 17:36:09 +0000
asID:                     265274
IP address blocks:        2804:2d50::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:5d:3d:3e:e8:33:0e:8b:b2:a2:d0:95:8b:26:ff:01:7c:19:74:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36AC8D9C76AEC5FD40820AC6BE7F91D19E99CBB4
        Validity
            Not Before: Apr  3 17:31:09 2023 GMT
            Not After : Apr  1 17:36:09 2024 GMT
        Subject: CN=68B85D5E2DB54FC0999B55D9C0557676DB4A6702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:22:bd:6a:d1:d7:fd:8a:e5:4a:53:51:e5:b6:
                    b9:98:af:58:47:71:b5:73:fd:7d:99:60:5a:b8:d4:
                    19:32:f6:48:30:ad:30:ff:c1:7a:73:27:dd:6f:25:
                    97:66:fe:b3:09:94:54:c4:1a:89:5b:81:00:7d:ce:
                    2e:bb:22:fb:69:92:17:19:82:d0:c6:8b:86:ea:9e:
                    5f:c1:16:8a:1f:43:83:88:c8:f8:43:51:bf:e1:74:
                    3b:48:e1:1e:98:f5:c5:87:25:66:43:45:07:86:ea:
                    bb:25:3b:01:c5:c0:94:de:d7:16:9f:37:08:85:74:
                    10:e0:8e:6b:f5:a7:29:37:5e:96:46:9e:a7:f8:39:
                    b8:f1:9b:c8:6e:54:91:12:bc:11:ff:7a:b2:23:40:
                    b1:59:fa:2d:94:a8:92:c2:16:04:47:34:38:18:e6:
                    cc:72:a6:5b:c5:a2:fb:5e:70:27:a7:2d:f2:96:4c:
                    d9:6a:9d:56:0b:4d:de:9d:7f:ba:d5:f2:df:90:a8:
                    00:e9:b8:d8:ee:9c:bf:a2:de:30:04:82:92:24:c0:
                    b5:42:83:d5:f7:82:12:39:7a:e3:f2:71:04:4a:c8:
                    17:03:a3:09:d6:fc:03:8a:ee:c8:d3:61:b1:4a:76:
                    8c:fa:fa:b6:6a:6f:9b:6e:17:42:28:29:38:aa:57:
                    24:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:B8:5D:5E:2D:B5:4F:C0:99:9B:55:D9:C0:55:76:76:DB:4A:67:02
            X509v3 Authority Key Identifier:
                keyid:36:AC:8D:9C:76:AE:C5:FD:40:82:0A:C6:BE:7F:91:D1:9E:99:CB:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7hqVi6AdvR3kyeBXXT63GGjSj4tJzXch27FpeBFPcnq4/0/36AC8D9C76AEC5FD40820AC6BE7F91D19E99CBB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36AC8D9C76AEC5FD40820AC6BE7F91D19E99CBB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hqVi6AdvR3kyeBXXT63GGjSj4tJzXch27FpeBFPcnq4/0/323830343a326435303a3a2f33332d3333203d3e20323635323734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d50::/33

    Signature Algorithm: sha256WithRSAEncryption
         53:bc:c1:c2:4b:bd:4a:ca:fc:6f:9d:95:65:83:0c:61:6f:f3:
         a1:ec:8e:6c:21:9a:09:5e:52:2a:67:f3:b4:04:3f:6b:77:8a:
         c1:58:7d:5c:29:f1:64:34:28:27:e7:e8:be:47:fb:c4:42:b0:
         30:3b:13:85:cf:6d:5d:ec:b1:3a:b4:54:f6:c6:12:c7:a4:8f:
         8b:59:76:7b:12:68:ee:22:a1:fd:f2:97:d3:48:a3:60:f8:9f:
         c3:fa:73:56:92:43:88:ad:a1:74:78:2a:44:ed:65:c4:aa:fe:
         d0:ef:cb:ef:39:52:35:5d:d7:52:f1:b3:ac:52:19:1e:5b:14:
         56:d1:00:fd:d5:1f:7f:d0:37:4e:60:04:d4:a6:d6:db:c4:d3:
         9f:47:d8:62:33:be:08:4d:f5:26:26:91:0c:58:29:b4:4a:23:
         78:30:10:06:d3:8c:dd:88:ec:fa:13:fa:d9:9e:73:c1:80:a3:
         27:a0:24:2a:a2:db:ff:44:9c:2f:30:e1:64:de:8d:0e:03:bf:
         ea:7a:5a:ac:77:56:44:f1:90:af:f6:63:b8:64:95:32:71:0b:
         7e:5e:d0:f5:3f:24:41:d7:85:95:13:4e:a7:b6:d6:60:98:16:
         0b:4a:91:76:e4:49:d4:4c:2a:d2:e9:d6:2e:51:ad:3e:b0:05:
         9d:9b:2b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:01 2025 by rpki-client