Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7mpbNXcTpQfCjxtxwJ3H29Q4f1wdX9ZnnXmV17h6ZR8h/0/323830343a3738633a3a2f33322d3332203d3e203532383539.roa
File:                     323830343a3738633a3a2f33322d3332203d3e203532383539.roa (raw, json)
Hash identifier:          +2vXDJ0s3Ak+m580XjGf0c6Z1LNHvZMgSTQK1QNuSbo=
Subject key identifier:   9B:83:21:B8:23:2C:E5:13:50:60:1C:7B:6C:BA:57:20:EC:7D:4B:CC
Certificate issuer:       /CN=3B44D016A0AB3D32217E993ABE8B95525E3FE432
Certificate serial:       48C31FDBFBF3A7DFD6C9AFA2F6031694A79F44FB
Authority key identifier: 3B:44:D0:16:A0:AB:3D:32:21:7E:99:3A:BE:8B:95:52:5E:3F:E4:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B44D016A0AB3D32217E993ABE8B95525E3FE432.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7mpbNXcTpQfCjxtxwJ3H29Q4f1wdX9ZnnXmV17h6ZR8h/0/323830343a3738633a3a2f33322d3332203d3e203532383539.roa
Signing time:             Tue 13 Sep 2022 09:05:26 +0000
ROA not before:           Tue 13 Sep 2022 09:00:26 +0000
ROA not after:            Tue 12 Sep 2023 09:05:26 +0000
asID:                     52859
IP address blocks:        2804:78c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:c3:1f:db:fb:f3:a7:df:d6:c9:af:a2:f6:03:16:94:a7:9f:44:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B44D016A0AB3D32217E993ABE8B95525E3FE432
        Validity
            Not Before: Sep 13 09:00:26 2022 GMT
            Not After : Sep 12 09:05:26 2023 GMT
        Subject: CN=9B8321B8232CE51350601C7B6CBA5720EC7D4BCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a6:f9:10:d3:cc:ed:8d:4f:ad:53:b2:55:5f:
                    88:69:c1:8c:fd:a9:c0:5b:61:55:fc:ca:d1:d9:53:
                    ff:c2:9f:64:b3:5e:cc:72:a6:b9:e0:78:e3:fb:ea:
                    a6:08:25:18:34:46:a5:3d:40:29:c1:6f:52:fd:db:
                    43:7d:05:49:2b:26:c2:b9:fd:2d:de:dd:4b:36:89:
                    5a:cf:1c:85:42:5d:86:4a:a4:97:18:25:56:48:ca:
                    d0:69:1a:bd:b2:2a:7a:3d:7a:b9:b5:a1:a4:14:e7:
                    1a:70:4f:e8:91:79:dd:42:8f:34:cb:b3:29:99:55:
                    7c:16:8e:69:44:07:b8:23:d7:39:bc:60:db:ef:37:
                    5a:9e:92:76:45:6a:22:17:28:bd:80:3b:74:21:5a:
                    35:f4:a5:c3:fd:3d:54:64:34:ce:11:a2:0f:bf:38:
                    3c:6e:c2:af:2e:6d:34:b3:5f:e3:8c:28:d7:f9:4b:
                    c0:10:e3:95:8d:93:11:b4:79:27:dc:70:aa:ee:e5:
                    11:a1:9d:1f:22:af:78:b5:65:e7:3f:48:4c:62:c2:
                    5c:fa:24:f9:12:69:12:d6:6b:30:6b:00:6b:0d:33:
                    75:e4:39:d6:a9:c2:58:85:20:b5:90:ad:ee:5f:46:
                    80:ef:ca:6f:9a:2c:4f:0d:bc:8a:d0:85:45:13:bc:
                    02:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:83:21:B8:23:2C:E5:13:50:60:1C:7B:6C:BA:57:20:EC:7D:4B:CC
            X509v3 Authority Key Identifier:
                keyid:3B:44:D0:16:A0:AB:3D:32:21:7E:99:3A:BE:8B:95:52:5E:3F:E4:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7mpbNXcTpQfCjxtxwJ3H29Q4f1wdX9ZnnXmV17h6ZR8h/0/3B44D016A0AB3D32217E993ABE8B95525E3FE432.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B44D016A0AB3D32217E993ABE8B95525E3FE432.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7mpbNXcTpQfCjxtxwJ3H29Q4f1wdX9ZnnXmV17h6ZR8h/0/323830343a3738633a3a2f33322d3332203d3e203532383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:78c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b3:88:c5:c1:8a:c7:c2:f3:d2:61:e1:a2:a0:d1:3b:13:b3:a6:
         4e:5e:eb:76:4f:c0:58:22:60:14:be:07:18:46:4d:fa:93:aa:
         94:c0:fb:f5:6f:ee:ab:a5:26:47:9a:21:13:8d:d9:45:bb:50:
         e8:5c:c7:46:17:59:7e:45:35:c5:5d:16:80:e2:3c:eb:17:74:
         6a:0a:d3:55:31:7c:86:37:05:b1:c9:98:af:a6:41:b9:d0:3d:
         9c:9f:e4:98:4a:59:8c:3f:94:be:a3:b3:11:e9:14:cf:90:91:
         1c:65:e5:1d:6e:08:2e:e8:6d:9a:65:9a:0e:36:7f:32:43:8c:
         af:9a:85:6b:93:b8:5c:d2:61:a1:ee:96:ce:28:04:22:56:b7:
         3c:5a:75:5e:3b:1d:ef:d0:7d:2d:ea:67:7c:e6:3b:32:12:c4:
         7e:31:53:83:12:11:d0:21:d5:2e:da:78:db:7a:5e:8e:d9:01:
         50:2a:c5:19:0c:4b:a7:06:c0:dd:8e:59:fa:61:91:92:91:47:
         d2:6b:22:a3:f6:a8:f4:12:41:6b:aa:ec:81:99:2c:df:b6:5f:
         5b:d7:9b:b1:17:27:34:af:e7:85:97:58:7a:b0:ab:a3:c4:47:
         02:a2:7b:91:9c:21:7e:d6:81:49:8f:b5:ee:40:cc:4d:94:9e:
         60:65:d2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:36:55 2025 by rpki-client