Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/323830343a333566633a3a2f33332d3333203d3e20323636333139.roa
File:                     323830343a333566633a3a2f33332d3333203d3e20323636333139.roa (raw, json)
Hash identifier:          PC1571nG2HLfEGNCtb3EBWeqcKVjV8Stg9soxKtPcGQ=
Subject key identifier:   BD:82:58:E2:96:8C:65:FF:F5:33:DE:8D:FF:2B:71:20:84:29:AE:89
Certificate issuer:       /CN=3C375B95EEE9243BB14219D6524581B4C91D25CE
Certificate serial:       38182EDDEC597CC611198D54166D1F6914F6F235
Authority key identifier: 3C:37:5B:95:EE:E9:24:3B:B1:42:19:D6:52:45:81:B4:C9:1D:25:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C375B95EEE9243BB14219D6524581B4C91D25CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/323830343a333566633a3a2f33332d3333203d3e20323636333139.roa
Signing time:             Fri 26 May 2023 20:00:00 +0000
ROA not before:           Fri 26 May 2023 19:55:00 +0000
ROA not after:            Fri 24 May 2024 20:00:00 +0000
asID:                     266319
IP address blocks:        2804:35fc::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:18:2e:dd:ec:59:7c:c6:11:19:8d:54:16:6d:1f:69:14:f6:f2:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C375B95EEE9243BB14219D6524581B4C91D25CE
        Validity
            Not Before: May 26 19:55:00 2023 GMT
            Not After : May 24 20:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:eb:c5:6b:d3:69:d2:7b:57:68:8e:80:07:e3:
                    14:c0:bc:73:8f:24:ab:96:11:d3:00:72:f3:e7:a1:
                    1b:33:d4:f5:1c:89:a4:74:f7:a8:e4:3d:21:9f:32:
                    e1:f7:07:40:97:06:84:69:6b:51:8e:e1:65:9c:a4:
                    4f:39:03:4a:00:c2:80:e9:ac:60:23:2b:09:31:82:
                    20:f3:b9:42:96:f2:98:f8:2c:26:37:63:59:80:29:
                    0c:ea:fb:c6:86:f5:0d:cc:32:fc:cf:7d:cf:be:62:
                    59:2f:0a:d7:86:a4:70:c4:af:1e:21:41:4f:1c:c0:
                    0e:3a:72:dd:42:d4:63:01:e1:db:52:61:f3:33:8b:
                    45:0b:94:6e:40:57:31:c0:d8:dd:84:5a:77:c9:59:
                    5a:7c:71:22:95:9d:c2:85:90:85:cd:ae:0e:77:b1:
                    7c:a5:79:47:54:96:3c:6b:2e:73:59:c2:04:89:a0:
                    ff:3d:1a:7a:11:b0:d3:8a:73:87:75:e2:2c:a3:a1:
                    94:b2:36:e7:4f:16:4e:a7:87:70:1d:88:68:4b:df:
                    de:cf:03:96:aa:c7:4a:08:eb:25:71:e2:0b:d1:7f:
                    59:d3:cf:aa:b2:7c:e1:08:c7:fc:2d:10:f6:b8:72:
                    55:0a:7f:88:3b:36:c2:cc:25:f4:d9:88:1d:6a:70:
                    07:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:82:58:E2:96:8C:65:FF:F5:33:DE:8D:FF:2B:71:20:84:29:AE:89
            X509v3 Authority Key Identifier:
                keyid:3C:37:5B:95:EE:E9:24:3B:B1:42:19:D6:52:45:81:B4:C9:1D:25:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/3C375B95EEE9243BB14219D6524581B4C91D25CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C375B95EEE9243BB14219D6524581B4C91D25CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/323830343a333566633a3a2f33332d3333203d3e20323636333139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:35fc::/33

    Signature Algorithm: sha256WithRSAEncryption
         00:b2:94:77:5d:3a:20:ac:01:24:e7:89:70:38:b8:bd:6f:48:
         77:1b:16:ef:32:aa:4e:40:94:eb:4a:83:28:80:d1:2d:e7:e1:
         73:98:d9:95:eb:66:3b:70:7d:81:e9:66:19:49:8c:b5:a9:9e:
         5d:45:be:12:b7:e1:b4:13:01:ce:0f:47:85:72:6c:f1:1e:5e:
         12:66:03:53:3c:77:c4:f5:1e:08:6a:ff:96:9c:27:9e:50:79:
         03:d1:01:ea:9d:de:c2:ac:b1:35:95:76:a0:5a:e7:ce:80:2b:
         4b:5d:85:f8:7c:6b:af:51:80:36:d3:11:81:79:d5:92:4a:6b:
         cc:e2:4f:a8:11:aa:7b:c3:c4:6b:ae:c4:fe:da:0a:e7:1f:ea:
         32:96:f4:d1:49:e4:b4:9d:07:f3:9d:b5:41:1c:48:db:4f:10:
         ce:5e:28:56:22:26:ec:a3:e3:c0:11:e3:05:5d:12:30:d9:d4:
         d0:4e:3c:b1:ae:d4:e2:e8:fa:3b:0a:34:07:d8:8e:3a:ac:c8:
         81:4d:f4:5d:ec:38:f6:7c:1c:20:ea:e1:65:c7:a4:31:ad:a5:
         a4:88:5e:52:e2:35:8c:18:5c:4a:89:7d:91:e1:6a:9f:bd:d8:
         47:36:68:5e:a4:90:63:24:96:08:86:cc:59:0d:a3:27:10:e2:
         f8:80:fc:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:16:14 2025 by rpki-client