Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/323830343a363830303a3a2f33322d3332203d3e20323639363634.roa
File:                     323830343a363830303a3a2f33322d3332203d3e20323639363634.roa (raw, json)
Hash identifier:          HIg49CHsMWXl/oq53Kri+VTWLrMviWOkBOSSSAPOVz4=
Subject key identifier:   FF:B3:08:32:D1:85:3B:01:01:74:47:DD:50:E3:3D:8B:34:3A:A2:AE
Certificate issuer:       /CN=B5E880AC0ED4A359D2B0CAF40F9BA427AD76F336
Certificate serial:       14E8A5173A0CCA8F292308902B34BE1B41B52C25
Authority key identifier: B5:E8:80:AC:0E:D4:A3:59:D2:B0:CA:F4:0F:9B:A4:27:AD:76:F3:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B5E880AC0ED4A359D2B0CAF40F9BA427AD76F336.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/323830343a363830303a3a2f33322d3332203d3e20323639363634.roa
Signing time:             Thu 19 Jan 2023 18:32:27 +0000
ROA not before:           Thu 19 Jan 2023 18:27:27 +0000
ROA not after:            Thu 18 Jan 2024 18:32:27 +0000
asID:                     269664
IP address blocks:        2804:6800::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:e8:a5:17:3a:0c:ca:8f:29:23:08:90:2b:34:be:1b:41:b5:2c:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5E880AC0ED4A359D2B0CAF40F9BA427AD76F336
        Validity
            Not Before: Jan 19 18:27:27 2023 GMT
            Not After : Jan 18 18:32:27 2024 GMT
        Subject: CN=FFB30832D1853B01017447DD50E33D8B343AA2AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:be:7b:2c:90:aa:ca:90:37:db:55:8f:4a:4a:
                    ac:10:53:81:34:c8:4e:6b:73:d2:93:f4:13:d5:fd:
                    08:4d:81:62:da:7b:ba:d7:be:67:f2:20:b3:0e:a3:
                    bc:07:8e:69:bf:f1:2d:c8:05:1d:1c:55:5a:22:a4:
                    8e:7f:48:e4:67:d9:65:e4:be:54:10:25:18:11:b3:
                    5a:70:9e:6f:bc:d6:e8:5a:23:ac:58:e9:f1:7c:9c:
                    c5:1c:d7:02:41:0c:c3:93:b4:3a:e9:1b:f2:57:c0:
                    f6:15:b6:07:81:0b:4f:fc:92:83:21:bd:8a:f8:5f:
                    a9:d4:45:96:a6:10:1a:03:d1:59:ce:76:4f:69:2d:
                    96:b0:2d:ea:1d:e9:14:84:8a:40:e7:78:28:9f:7d:
                    23:bf:22:cc:36:fb:e0:29:00:d1:ef:16:dd:23:70:
                    1c:77:48:3a:37:93:7d:06:c7:20:88:44:e1:a4:50:
                    30:2e:23:4f:a6:17:c6:07:1d:80:70:a4:7f:98:37:
                    68:f3:c8:88:ac:84:89:bf:af:e7:fc:5e:6e:3b:44:
                    f3:e2:71:9c:02:bc:ea:9f:7f:cc:13:72:49:d3:7f:
                    ba:27:fb:55:d3:79:8d:0a:ef:10:d5:cc:ae:18:ae:
                    0a:58:eb:cc:99:c7:61:0f:f3:1b:c3:a9:4c:a0:bf:
                    6c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B3:08:32:D1:85:3B:01:01:74:47:DD:50:E3:3D:8B:34:3A:A2:AE
            X509v3 Authority Key Identifier:
                keyid:B5:E8:80:AC:0E:D4:A3:59:D2:B0:CA:F4:0F:9B:A4:27:AD:76:F3:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/B5E880AC0ED4A359D2B0CAF40F9BA427AD76F336.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B5E880AC0ED4A359D2B0CAF40F9BA427AD76F336.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/323830343a363830303a3a2f33322d3332203d3e20323639363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6800::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:13:04:65:88:a1:f4:1b:7b:fc:19:62:ad:f3:e0:41:ba:84:
         d1:6a:c4:34:df:5e:9f:d0:bb:e9:99:80:a4:54:ca:a7:6e:ee:
         1a:0d:75:4a:54:66:98:9a:d1:6b:0a:d8:da:5c:c8:92:fa:4a:
         14:69:ff:e3:23:6d:0a:1f:0a:81:5d:3f:7d:36:e9:a4:30:41:
         52:3a:f9:fe:ae:6e:12:29:1d:bd:2b:c4:b2:2e:c3:9b:77:ae:
         d9:33:36:21:6f:10:f0:1d:28:dc:f3:04:34:81:93:3e:aa:dc:
         5e:4f:f2:66:18:74:5d:f3:a8:6b:25:e4:43:50:d6:9c:83:4b:
         35:cb:2b:28:7a:76:08:bf:6e:d1:43:28:a6:44:77:6b:c4:61:
         fc:d1:88:fc:4b:4a:6b:60:67:ed:73:c3:df:22:fd:9e:5f:fd:
         46:81:b6:df:73:7b:d5:bf:08:87:1b:15:58:ed:1c:e2:de:0b:
         f2:31:c4:9c:33:a1:20:4e:72:f8:76:6e:89:34:d2:a9:24:ee:
         be:12:a4:78:41:81:d0:88:2f:be:f9:81:20:60:38:19:33:89:
         db:16:52:e9:9c:e2:00:a1:d7:ce:39:b8:20:25:e6:73:71:0d:
         63:83:24:62:05:5b:19:c5:72:da:1c:27:f9:b9:0b:fc:f6:53:
         9d:cd:8b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 07:08:18 2025 by rpki-client