Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/0/323830343a333164633a383030303a3a2f33342d3334203d3e20323635303431.roa
File:                     323830343a333164633a383030303a3a2f33342d3334203d3e20323635303431.roa (raw, json)
Hash identifier:          ZQIF5CjFpWuCmXmeYp2VqNIr/Q1/OH6m4sQyVeZXNFk=
Subject key identifier:   04:31:48:7F:9D:87:F7:71:3B:1C:0C:AE:78:02:68:33:1B:EA:26:BF
Certificate issuer:       /CN=37834545A38892C3FF1B7141126084730A12B7AC
Certificate serial:       4AF4585CE45F12ADD9F63A3E49ABAED904CDD8B6
Authority key identifier: 37:83:45:45:A3:88:92:C3:FF:1B:71:41:12:60:84:73:0A:12:B7:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37834545A38892C3FF1B7141126084730A12B7AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/0/323830343a333164633a383030303a3a2f33342d3334203d3e20323635303431.roa
Signing time:             Wed 25 Oct 2023 19:27:06 +0000
ROA not before:           Wed 25 Oct 2023 19:22:06 +0000
ROA not after:            Wed 23 Oct 2024 19:27:06 +0000
asID:                     265041
IP address blocks:        2804:31dc:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:f4:58:5c:e4:5f:12:ad:d9:f6:3a:3e:49:ab:ae:d9:04:cd:d8:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37834545A38892C3FF1B7141126084730A12B7AC
        Validity
            Not Before: Oct 25 19:22:06 2023 GMT
            Not After : Oct 23 19:27:06 2024 GMT
        Subject: CN=0431487F9D87F7713B1C0CAE780268331BEA26BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:41:3c:ab:97:41:be:6c:8c:12:40:f5:1c:c0:
                    49:62:57:22:5b:64:ba:e7:f4:0b:7c:78:c6:b7:18:
                    d6:8e:6a:fe:7d:05:bd:6f:0b:13:c9:96:c9:1b:ea:
                    78:13:33:bd:9b:08:10:87:a8:2f:b2:c7:ff:eb:7f:
                    31:2c:5e:c9:c7:1c:1b:81:5c:40:b7:c1:58:c3:9c:
                    85:21:9e:33:cc:2a:47:eb:a2:70:55:c7:e1:f9:f5:
                    08:77:8b:65:ba:e6:ec:b9:db:a5:25:da:d1:fb:d3:
                    34:2b:bf:46:27:07:67:9a:ba:30:70:7f:0f:31:5d:
                    d0:a7:a5:0e:9a:80:b4:c2:e5:56:20:e1:96:60:1c:
                    7c:15:54:f6:69:8c:d5:43:e7:00:11:c0:d1:fd:b4:
                    68:18:22:f2:de:90:09:29:79:48:95:c5:30:2d:f8:
                    00:db:fd:c0:bd:de:eb:11:55:12:37:19:03:99:52:
                    4c:e2:f5:d7:8a:75:17:a2:8e:11:c7:2f:4f:0c:f5:
                    6f:a6:0f:4c:bb:ba:90:da:27:23:2d:29:3a:4a:ae:
                    20:32:ab:dc:89:fa:00:e8:3c:ed:43:e5:52:87:34:
                    cd:cd:be:8c:87:71:dd:b6:f7:92:84:3d:04:a8:0a:
                    9f:05:0e:24:eb:18:32:a3:4a:3d:f1:7c:e5:e8:f8:
                    77:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:31:48:7F:9D:87:F7:71:3B:1C:0C:AE:78:02:68:33:1B:EA:26:BF
            X509v3 Authority Key Identifier:
                keyid:37:83:45:45:A3:88:92:C3:FF:1B:71:41:12:60:84:73:0A:12:B7:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/0/37834545A38892C3FF1B7141126084730A12B7AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37834545A38892C3FF1B7141126084730A12B7AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/0/323830343a333164633a383030303a3a2f33342d3334203d3e20323635303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:31dc:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6a:70:bb:0a:b6:45:14:3e:5b:f5:64:52:1b:ff:08:6f:c3:96:
         27:41:48:b0:b4:3f:f0:f7:60:3b:9c:7f:e4:a6:64:d7:40:65:
         62:2b:d1:4b:0c:57:e8:bc:81:6d:28:df:67:c5:cd:7f:87:b2:
         a1:00:ef:38:b4:be:ad:a7:96:f2:f3:18:2e:c4:f8:0e:f2:15:
         0f:b1:d5:7d:90:80:96:41:53:9a:b7:5c:2b:86:5b:c1:ac:a5:
         83:40:eb:9c:a0:d5:95:20:66:cf:af:12:c7:ea:a9:e6:89:1a:
         4b:86:9c:13:d6:e3:3d:ff:b0:d9:ac:04:5a:74:8b:6a:69:31:
         ab:62:ed:69:8d:f3:37:5a:13:6a:bc:86:81:f9:e7:a6:e4:5c:
         39:61:00:47:88:31:08:9a:c5:33:2d:1c:7c:79:7d:8c:fd:6c:
         9a:60:35:e7:af:a8:dd:ea:c3:38:48:a2:df:1c:a7:ae:2f:03:
         3f:cd:3d:22:3b:63:12:6c:ff:d4:bc:8d:7a:25:31:68:58:67:
         e9:7f:8b:6d:ad:7a:3d:ed:14:4e:05:68:98:4a:7e:7f:f0:2f:
         09:92:ff:b0:b3:b7:94:8d:63:d8:38:4b:f9:4b:7e:e0:d9:73:
         e6:c4:2b:60:fc:78:1e:09:32:08:49:b5:47:41:aa:dd:b3:05:
         f3:7c:f6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:27 2025 by rpki-client