Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/0/323830343a3337633a3a2f33322d3634203d3e203532393831.roa
File:                     323830343a3337633a3a2f33322d3634203d3e203532393831.roa (raw, json)
Hash identifier:          iAviWWeK4urE24TtpsNAguX+JF0n5enZ5bs09vW3dm0=
Subject key identifier:   6C:A6:CA:5E:6F:A3:4F:2E:2B:D7:33:6C:48:DE:22:03:B0:BD:DA:26
Certificate issuer:       /CN=0BB072046724482829AB57B7EC27AF6C5D4B20D3
Certificate serial:       5C1DFD668D5D3A92C8BC5D89BF21F70DE2428E34
Authority key identifier: 0B:B0:72:04:67:24:48:28:29:AB:57:B7:EC:27:AF:6C:5D:4B:20:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0BB072046724482829AB57B7EC27AF6C5D4B20D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/0/323830343a3337633a3a2f33322d3634203d3e203532393831.roa
Signing time:             Thu 10 Nov 2022 10:31:52 +0000
ROA not before:           Thu 10 Nov 2022 10:26:52 +0000
ROA not after:            Thu 09 Nov 2023 10:31:52 +0000
asID:                     52981
IP address blocks:        2804:37c::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:1d:fd:66:8d:5d:3a:92:c8:bc:5d:89:bf:21:f7:0d:e2:42:8e:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BB072046724482829AB57B7EC27AF6C5D4B20D3
        Validity
            Not Before: Nov 10 10:26:52 2022 GMT
            Not After : Nov  9 10:31:52 2023 GMT
        Subject: CN=6CA6CA5E6FA34F2E2BD7336C48DE2203B0BDDA26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:be:55:5f:7b:d5:47:fe:68:05:5a:38:2c:a4:
                    e0:6c:f2:0d:11:a9:78:01:e5:09:d4:6f:e6:8b:db:
                    a1:e2:60:f1:29:4c:6b:6a:b9:b7:cf:9c:b7:e1:5e:
                    b5:2a:82:92:e0:cd:54:6a:eb:93:93:b8:94:aa:c7:
                    bf:ab:d7:33:ae:80:4f:ca:a0:f9:a6:3a:2b:59:d4:
                    44:43:b0:21:7d:f6:64:64:e0:0d:b5:46:91:45:58:
                    0f:b7:c7:68:c7:8a:8f:95:00:95:07:dc:0a:0b:2f:
                    e7:05:54:c0:36:32:7c:8b:2a:64:0c:04:65:b6:ff:
                    78:0f:95:bf:0e:f4:52:aa:be:57:77:8f:93:be:14:
                    66:ab:ca:42:af:75:c8:8c:77:47:b3:af:30:9e:c9:
                    a2:4a:80:f6:23:56:d3:ac:14:7f:96:f7:7e:d8:db:
                    55:04:a4:73:05:5b:6a:a5:00:7c:82:75:63:e3:db:
                    4e:8f:05:fc:9f:6a:d2:14:47:22:0e:6c:06:5a:ae:
                    28:54:d0:b8:db:4c:40:78:ce:14:0e:b0:de:82:77:
                    48:d7:54:2e:67:ec:c9:67:77:73:c4:f9:6a:b1:05:
                    d6:c5:f6:0d:d3:69:04:e6:98:42:23:fa:95:5e:88:
                    d6:97:96:83:a8:a5:00:98:17:09:1f:49:90:0e:50:
                    24:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:A6:CA:5E:6F:A3:4F:2E:2B:D7:33:6C:48:DE:22:03:B0:BD:DA:26
            X509v3 Authority Key Identifier:
                keyid:0B:B0:72:04:67:24:48:28:29:AB:57:B7:EC:27:AF:6C:5D:4B:20:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/0/0BB072046724482829AB57B7EC27AF6C5D4B20D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0BB072046724482829AB57B7EC27AF6C5D4B20D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/0/323830343a3337633a3a2f33322d3634203d3e203532393831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37c::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:89:b0:ee:81:5e:1e:3f:8d:47:6f:98:96:47:ab:83:f1:8e:
         19:70:21:44:c0:55:dd:46:5e:55:0b:5e:f6:af:18:2a:85:73:
         77:73:37:cf:69:87:97:cd:59:93:c6:ad:64:7a:b2:a4:00:ec:
         ef:66:f4:78:0b:38:36:06:20:89:20:f6:68:2b:fe:1d:ac:b4:
         bb:0a:db:fa:5f:eb:5a:f9:00:37:62:b7:ae:09:69:65:b5:74:
         32:75:0c:98:e3:b9:91:a7:20:6f:0d:98:83:c5:d9:85:00:78:
         f7:e4:4b:4b:eb:bb:4e:8e:4f:db:3f:ab:72:48:32:06:1b:4c:
         aa:1d:75:64:ba:bb:c5:69:2d:73:4b:58:a0:f9:38:78:af:e2:
         dd:a3:9e:80:ad:94:0b:8e:7b:88:91:ac:43:8d:b9:de:bb:66:
         94:21:66:b2:c5:c6:b2:10:fc:5d:5a:92:ec:bd:58:02:5e:a0:
         9e:b3:b2:20:a0:e9:57:3e:47:72:26:3d:a3:1d:b4:2d:f6:e9:
         28:a7:be:b1:3b:e3:1f:eb:43:04:ed:98:26:c7:e4:30:3c:80:
         16:ee:9a:ee:b2:db:68:3b:43:a7:ce:cb:32:9b:ba:81:2e:d7:
         5c:5b:ab:26:0f:38:df:03:f4:72:0a:e7:f6:fa:1e:f9:c5:be:
         2c:51:d0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:07:33 2025 by rpki-client