Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/0/323830343a346162303a3a2f33322d3438203d3e20323637323537.roa
File:                     323830343a346162303a3a2f33322d3438203d3e20323637323537.roa (raw, json)
Hash identifier:          d3kNWS4XdlPFT5ySg2S9yXpIkUX9zbt1Lxdb1csoY0s=
Subject key identifier:   44:60:37:E0:C0:0B:3E:C8:03:7A:44:47:3B:EA:F9:8B:DA:65:22:2C
Certificate issuer:       /CN=3C48AD61EB20DDDABB33B6FA4C1BF53D8BE5CD60
Certificate serial:       72F351148EF842C48CD03FE16C2B9D658693EE81
Authority key identifier: 3C:48:AD:61:EB:20:DD:DA:BB:33:B6:FA:4C:1B:F5:3D:8B:E5:CD:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C48AD61EB20DDDABB33B6FA4C1BF53D8BE5CD60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/0/323830343a346162303a3a2f33322d3438203d3e20323637323537.roa
Signing time:             Tue 20 Dec 2022 17:04:00 +0000
ROA not before:           Tue 20 Dec 2022 16:59:00 +0000
ROA not after:            Tue 19 Dec 2023 17:04:00 +0000
asID:                     267257
IP address blocks:        2804:4ab0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:f3:51:14:8e:f8:42:c4:8c:d0:3f:e1:6c:2b:9d:65:86:93:ee:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C48AD61EB20DDDABB33B6FA4C1BF53D8BE5CD60
        Validity
            Not Before: Dec 20 16:59:00 2022 GMT
            Not After : Dec 19 17:04:00 2023 GMT
        Subject: CN=446037E0C00B3EC8037A44473BEAF98BDA65222C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:26:a1:f2:2d:b5:a5:b0:3a:f3:aa:bf:8b:6d:
                    93:22:c2:81:f6:56:e7:33:41:5a:e0:7b:59:3d:7f:
                    1f:0d:aa:bb:d8:ba:2a:13:1c:ab:7c:f3:29:b1:28:
                    b3:79:3d:4a:53:d3:da:c3:28:48:ba:cf:ef:6b:36:
                    cc:35:cb:0d:df:30:a8:d6:57:27:7f:fd:bf:32:a4:
                    91:b2:9c:0a:1e:6c:0a:4b:ea:98:26:d7:bb:f8:54:
                    0f:19:6a:17:2f:8a:8b:ae:76:75:ff:98:da:87:a0:
                    bf:23:3c:e8:a1:f1:eb:17:eb:d8:e7:fd:e5:f6:c5:
                    bb:3b:34:b0:c7:53:37:10:ce:b3:3f:d4:ce:d0:84:
                    7a:a8:72:b0:d2:96:2b:07:99:e5:a9:79:96:5d:36:
                    3d:fc:40:1d:5a:cf:3d:6c:cf:26:78:bc:8a:7f:ef:
                    28:0e:6d:b2:6b:96:61:39:57:7a:18:38:9c:79:5e:
                    29:68:05:0b:88:f4:a4:af:56:9d:61:81:c5:14:5a:
                    23:33:5b:03:e0:db:c1:cb:e6:dd:6d:2f:d1:20:20:
                    27:97:df:9c:ef:ec:be:3f:68:14:e4:d9:8d:32:f4:
                    49:b5:4d:3a:68:95:1f:59:e3:59:1a:92:a8:cf:b3:
                    b9:48:7e:76:8d:23:42:2d:a1:a1:5d:a8:a1:13:00:
                    2b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:60:37:E0:C0:0B:3E:C8:03:7A:44:47:3B:EA:F9:8B:DA:65:22:2C
            X509v3 Authority Key Identifier:
                keyid:3C:48:AD:61:EB:20:DD:DA:BB:33:B6:FA:4C:1B:F5:3D:8B:E5:CD:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/0/3C48AD61EB20DDDABB33B6FA4C1BF53D8BE5CD60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C48AD61EB20DDDABB33B6FA4C1BF53D8BE5CD60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/0/323830343a346162303a3a2f33322d3438203d3e20323637323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4ab0::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:fe:8e:53:1a:c9:0f:4c:90:c1:fb:a8:69:ab:88:0d:3c:c6:
         17:cf:b8:1d:ea:56:69:db:41:08:ff:19:fb:54:67:11:14:57:
         f1:e0:25:80:36:07:dc:17:4d:2d:8c:8f:c1:03:4e:86:26:75:
         a5:4f:8b:47:3a:95:6b:41:4b:c9:cb:86:c5:eb:ff:da:0f:fd:
         3b:67:f0:51:3b:a2:ce:3a:b0:35:6b:df:a4:99:7d:4f:d6:0f:
         18:b5:09:d0:6a:2c:a5:d1:47:f0:1c:b9:4b:1a:ad:a2:84:8f:
         c4:8a:fb:b2:f7:e9:71:42:fe:bb:cc:c7:f6:cf:bd:c8:f1:2e:
         d7:b3:f5:ce:63:ac:c6:a4:70:27:48:04:53:38:cc:54:2e:af:
         9f:04:c2:d6:7e:b1:39:be:6b:8d:0a:29:4a:d9:57:4c:e2:9a:
         8d:e2:ee:c3:40:18:85:d2:a0:e6:83:f9:83:99:d9:b0:e8:26:
         c9:78:eb:b5:a0:58:87:bd:1a:a6:c7:7b:07:db:ab:2f:9c:a0:
         b8:bf:0d:e8:40:b3:e5:4b:b0:9c:f5:86:0d:f7:d0:2d:03:47:
         df:9f:e1:a7:a2:d2:48:80:b6:f3:ab:04:a5:28:1c:ba:17:97:
         42:fe:71:c1:ba:cf:f2:fc:67:44:36:00:68:1b:bb:62:aa:e5:
         76:49:a1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:08:51 2025 by rpki-client