Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8j7dWSq1VABVRj5PPPYq3zFSwTJD3AgqiAjQpjkf9Hxr/0/323830343a313866633a3a2f33322d3333203d3e203631373637.roa
File:                     323830343a313866633a3a2f33322d3333203d3e203631373637.roa (raw, json)
Hash identifier:          HP5ag4q7/tSRclUHwfVxTINwQj6SlH0GY+brSXS+5yA=
Subject key identifier:   3D:60:2E:25:BB:9F:E1:B1:93:2D:18:2F:BD:52:89:95:F3:BF:AA:5D
Certificate issuer:       /CN=238A02EA76000E147B644ACF90133F3E8BE57A6B
Certificate serial:       6924365409E2EF1CC1CCCBEFA230AF2E080F1138
Authority key identifier: 23:8A:02:EA:76:00:0E:14:7B:64:4A:CF:90:13:3F:3E:8B:E5:7A:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/238A02EA76000E147B644ACF90133F3E8BE57A6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8j7dWSq1VABVRj5PPPYq3zFSwTJD3AgqiAjQpjkf9Hxr/0/323830343a313866633a3a2f33322d3333203d3e203631373637.roa
Signing time:             Fri 15 Jul 2022 11:23:58 +0000
ROA not before:           Fri 15 Jul 2022 11:18:58 +0000
ROA not after:            Fri 14 Jul 2023 11:23:58 +0000
asID:                     61767
IP address blocks:        2804:18fc::/32 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:24:36:54:09:e2:ef:1c:c1:cc:cb:ef:a2:30:af:2e:08:0f:11:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=238A02EA76000E147B644ACF90133F3E8BE57A6B
        Validity
            Not Before: Jul 15 11:18:58 2022 GMT
            Not After : Jul 14 11:23:58 2023 GMT
        Subject: CN=3D602E25BB9FE1B1932D182FBD528995F3BFAA5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3d:55:ed:56:76:b4:94:c1:ca:ec:93:70:45:
                    ed:36:3c:44:ae:b5:e1:31:df:85:68:13:47:dd:d8:
                    ba:85:ba:36:b6:a1:5c:8e:1a:ce:33:6b:6b:3b:0b:
                    8a:03:27:cb:36:48:42:4c:be:39:49:71:5e:60:6f:
                    c1:df:a6:6a:6d:ac:10:19:aa:91:f4:03:6c:09:36:
                    74:0e:6b:e6:fe:d4:fd:70:b8:66:94:75:cd:d2:10:
                    a8:85:8d:b3:50:6b:60:ce:93:90:10:be:b3:a6:9a:
                    a1:6d:90:0d:7b:d8:5b:25:90:a9:80:68:7f:06:38:
                    f2:7f:7e:a7:51:6b:c8:5a:2d:aa:58:16:99:22:3e:
                    fb:4c:4f:8c:1c:a2:1d:fa:21:0e:78:5f:8b:43:b9:
                    bb:a4:d8:6c:17:fb:38:6f:93:1b:42:6f:1a:15:7e:
                    2d:11:12:12:82:a3:c1:21:23:38:1f:ab:e9:05:bf:
                    3a:5c:a3:8b:42:ee:e3:34:6e:7d:4d:ae:2d:05:ad:
                    f7:8f:e0:b2:b6:87:34:e7:c7:34:56:41:41:43:0c:
                    4f:58:3e:b3:f8:27:ff:a4:c1:da:51:2c:41:3c:bd:
                    f7:72:4e:4a:a8:ef:14:4e:1e:40:5b:28:93:de:bb:
                    9a:e2:e1:08:ba:d0:86:93:d4:76:82:b3:27:4b:5e:
                    b0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:60:2E:25:BB:9F:E1:B1:93:2D:18:2F:BD:52:89:95:F3:BF:AA:5D
            X509v3 Authority Key Identifier:
                keyid:23:8A:02:EA:76:00:0E:14:7B:64:4A:CF:90:13:3F:3E:8B:E5:7A:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8j7dWSq1VABVRj5PPPYq3zFSwTJD3AgqiAjQpjkf9Hxr/0/238A02EA76000E147B644ACF90133F3E8BE57A6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/238A02EA76000E147B644ACF90133F3E8BE57A6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8j7dWSq1VABVRj5PPPYq3zFSwTJD3AgqiAjQpjkf9Hxr/0/323830343a313866633a3a2f33322d3333203d3e203631373637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:18fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:0e:92:2e:0a:3b:52:b4:c8:89:04:28:b4:1f:26:a5:d4:13:
         4b:6d:46:87:b3:d5:98:34:77:b3:ef:a3:ed:cb:31:a2:a6:07:
         7d:ec:99:95:b0:11:13:9c:0c:e1:58:c7:ba:ef:1d:f2:36:72:
         d1:fd:29:d7:ca:a8:64:df:34:5b:d6:ca:a5:45:56:cb:5d:87:
         31:75:00:eb:52:cf:e4:2b:37:b5:fa:24:5f:e8:3b:4b:56:51:
         e9:08:cf:50:c8:59:01:9d:98:b9:e8:58:9f:e4:79:2f:38:b0:
         95:82:ca:2c:5b:83:ad:6a:1b:1e:d8:5d:1e:e0:08:65:23:9d:
         99:ed:1e:65:43:0c:18:ef:64:b1:a2:17:c8:e3:f2:8c:8e:62:
         1f:4e:2a:63:d6:7f:ea:b1:12:88:5a:47:71:f7:03:28:ef:b7:
         a1:50:d5:2a:86:36:56:6f:4b:c4:77:2d:32:dd:9d:6f:67:0e:
         5b:3d:07:83:fc:49:46:01:1d:7b:66:e7:ad:83:f3:fc:e1:47:
         e1:cd:41:77:99:19:59:bc:9d:20:d2:c4:80:a8:dc:b4:5a:b1:
         16:8e:d9:d6:58:5d:6a:97:ab:e0:b9:6f:39:e3:4f:d2:cf:dd:
         0d:27:53:ba:be:92:11:1d:5b:92:2b:09:59:43:cb:2e:59:f8:
         5e:0d:70:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:25:00 2025 by rpki-client