Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/323830343a3763633a3a2f33322d3438203d3e203238363639.roa
File:                     323830343a3763633a3a2f33322d3438203d3e203238363639.roa (raw, json)
Hash identifier:          5ORbLgyZEzee2xMz40KfdL7yy7xxIfsJwo+FNczniBA=
Subject key identifier:   7B:1D:29:96:15:D6:04:63:A2:1B:7C:CA:4A:87:F2:10:D7:C3:CD:AC
Certificate issuer:       /CN=36DF3C54C34BC0040ABBBE412EC6948C87D1622A
Certificate serial:       18433F9A221162863924BBA7E8CB4C56737215B0
Authority key identifier: 36:DF:3C:54:C3:4B:C0:04:0A:BB:BE:41:2E:C6:94:8C:87:D1:62:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/323830343a3763633a3a2f33322d3438203d3e203238363639.roa
Signing time:             Fri 03 Nov 2023 13:04:05 +0000
ROA not before:           Fri 03 Nov 2023 12:59:05 +0000
ROA not after:            Fri 01 Nov 2024 13:04:05 +0000
asID:                     28669
IP address blocks:        2804:7cc::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:43:3f:9a:22:11:62:86:39:24:bb:a7:e8:cb:4c:56:73:72:15:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36DF3C54C34BC0040ABBBE412EC6948C87D1622A
        Validity
            Not Before: Nov  3 12:59:05 2023 GMT
            Not After : Nov  1 13:04:05 2024 GMT
        Subject: CN=7B1D299615D60463A21B7CCA4A87F210D7C3CDAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:80:bd:73:b4:51:5c:70:a7:ef:bb:4a:d3:4d:
                    3e:23:4f:ae:51:9e:38:42:f9:8b:02:93:0b:41:02:
                    70:4f:3c:5c:c9:35:bb:13:77:74:c8:e7:36:f2:24:
                    82:13:b2:20:db:ce:4e:f7:90:b5:b6:8d:bc:79:78:
                    80:ff:ad:24:59:1f:77:af:c8:a2:b2:22:d0:7b:62:
                    4a:90:63:bf:f2:99:07:02:6d:33:35:0e:60:59:48:
                    10:a7:88:1f:ee:6b:63:98:9e:c5:40:ec:51:a8:03:
                    58:cd:de:6f:10:88:d8:ce:06:d9:5f:80:75:13:05:
                    49:8d:2d:22:79:76:c3:46:09:84:04:00:f5:0c:d8:
                    3f:65:82:a4:92:e0:f8:f3:6c:af:2b:54:79:d9:c0:
                    b7:8d:78:38:d5:5f:5a:24:c7:90:8a:a9:f6:0d:63:
                    3e:35:f6:47:b4:43:30:b5:fb:44:a4:30:42:5a:59:
                    59:b1:ad:e5:fd:8d:c4:c5:7d:13:cd:79:18:a5:d7:
                    90:93:73:ce:cc:f7:56:19:94:59:c2:65:64:5e:7e:
                    27:3f:80:af:96:53:4f:5f:fd:f8:98:a7:1b:63:22:
                    4a:e3:2d:bc:b8:04:96:15:da:0f:22:7f:01:01:5d:
                    64:1f:45:e8:c4:75:ac:06:6f:c4:7c:13:c7:93:a3:
                    8c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:1D:29:96:15:D6:04:63:A2:1B:7C:CA:4A:87:F2:10:D7:C3:CD:AC
            X509v3 Authority Key Identifier:
                keyid:36:DF:3C:54:C3:4B:C0:04:0A:BB:BE:41:2E:C6:94:8C:87:D1:62:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/323830343a3763633a3a2f33322d3438203d3e203238363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:dd:42:27:f8:9f:b9:b7:9e:ff:dd:0a:9b:bd:b2:53:09:46:
         09:a3:70:8e:11:32:0a:85:a1:72:1f:ef:2b:5b:44:b0:d2:e3:
         c7:07:aa:22:d1:cb:12:8b:56:5f:4c:9c:49:60:4f:a4:ec:bc:
         dd:3b:67:05:e5:e2:6c:4e:f3:4e:60:6b:30:ed:75:c4:26:65:
         c9:83:51:d9:be:0c:02:6a:ec:db:fa:fe:da:0a:5c:50:42:8d:
         42:5e:6f:cc:76:2b:60:f0:a8:60:56:7e:1e:87:71:22:dc:3d:
         ad:05:dc:c0:40:01:d6:56:77:ca:ae:1e:c5:29:2f:7a:41:67:
         0c:07:51:a0:38:3d:3a:be:a8:ec:c3:45:f6:c8:ae:bb:d2:e8:
         f8:1e:5a:4c:8c:e1:7d:1a:ba:39:b7:75:7d:ac:ff:d7:b8:d7:
         9f:79:e5:04:8b:26:7b:cf:cc:7a:a5:17:bb:f9:cc:2f:c2:48:
         1e:84:51:fd:d4:09:1b:a4:01:4a:9a:53:ab:fc:0b:6b:70:dc:
         eb:4e:26:1a:21:e5:5b:92:39:75:8b:4c:27:1f:a4:9e:25:48:
         79:29:e2:f0:3e:6f:ec:28:90:d6:25:e9:b7:5a:a8:93:05:9f:
         1b:7c:e0:b7:33:48:c7:ce:c4:fb:38:c9:56:13:7b:65:39:4d:
         72:3a:ba:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:27:52 2025 by rpki-client