Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/91CM1MD61QwDqJUxxMDBVymEQYvzVLeR6RwMJWvXM5Mt/0/323830343a353938383a3a2f33322d313238203d3e20323638373038.roa
File:                     323830343a353938383a3a2f33322d313238203d3e20323638373038.roa (raw, json)
Hash identifier:          fl1JaBTIth8HOsmNoovq/hw8+byfdaVQqDmFvXyJxWg=
Subject key identifier:   87:7D:A3:DC:81:93:53:88:D5:84:5E:CF:0A:C0:8C:1C:F0:95:13:35
Certificate issuer:       /CN=A3BC58A7AD93BFD909F8B39F9334F55633AEF21A
Certificate serial:       19A0B80B3B803B7F8CB86CEA63E993A4CBEFDB4C
Authority key identifier: A3:BC:58:A7:AD:93:BF:D9:09:F8:B3:9F:93:34:F5:56:33:AE:F2:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A3BC58A7AD93BFD909F8B39F9334F55633AEF21A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/91CM1MD61QwDqJUxxMDBVymEQYvzVLeR6RwMJWvXM5Mt/0/323830343a353938383a3a2f33322d313238203d3e20323638373038.roa
Signing time:             Tue 21 Nov 2023 12:49:24 +0000
ROA not before:           Tue 21 Nov 2023 12:44:24 +0000
ROA not after:            Tue 19 Nov 2024 12:49:24 +0000
asID:                     268708
IP address blocks:        2804:5988::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:a0:b8:0b:3b:80:3b:7f:8c:b8:6c:ea:63:e9:93:a4:cb:ef:db:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3BC58A7AD93BFD909F8B39F9334F55633AEF21A
        Validity
            Not Before: Nov 21 12:44:24 2023 GMT
            Not After : Nov 19 12:49:24 2024 GMT
        Subject: CN=877DA3DC81935388D5845ECF0AC08C1CF0951335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:50:6d:65:e4:80:7d:45:ac:3a:1c:d3:c1:33:
                    3a:45:4f:92:20:1e:bf:27:5c:20:c4:8f:bf:22:41:
                    40:7b:7b:56:ee:68:f3:59:6e:91:7f:35:cb:4e:18:
                    c2:84:d0:b4:db:2a:18:0e:59:20:13:fe:00:5a:b7:
                    d8:7a:a6:75:b3:42:02:40:75:6f:c2:b1:48:ff:f8:
                    41:8c:a6:a7:61:c8:34:3e:ab:da:6a:ee:1a:51:4e:
                    8c:11:28:87:82:5f:54:85:24:29:ff:e1:f8:9d:ff:
                    5b:3c:95:1a:ac:77:a3:aa:db:0d:67:93:6e:71:e9:
                    96:ae:e1:13:b1:3d:e7:1c:31:f6:45:b2:c7:ab:27:
                    2f:68:ef:98:c9:87:3d:4f:57:34:cd:5c:55:2f:a1:
                    3c:8a:08:4d:58:d7:b9:ba:27:f9:a9:29:69:13:41:
                    1c:64:e7:aa:d5:98:0d:99:57:0a:fa:a6:15:51:53:
                    69:ee:b1:2a:38:05:e0:aa:23:76:4e:3b:e6:c4:4a:
                    1d:45:b7:a9:70:3f:26:5e:71:89:09:5c:f2:92:2f:
                    30:1d:03:ac:ec:fe:ae:88:e2:63:ea:fa:3a:11:da:
                    59:62:d1:2d:63:04:5d:dd:be:60:77:5a:9e:a5:b4:
                    1a:39:74:d1:69:82:09:0f:0b:df:ab:05:87:2a:00:
                    38:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:7D:A3:DC:81:93:53:88:D5:84:5E:CF:0A:C0:8C:1C:F0:95:13:35
            X509v3 Authority Key Identifier:
                keyid:A3:BC:58:A7:AD:93:BF:D9:09:F8:B3:9F:93:34:F5:56:33:AE:F2:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/91CM1MD61QwDqJUxxMDBVymEQYvzVLeR6RwMJWvXM5Mt/0/A3BC58A7AD93BFD909F8B39F9334F55633AEF21A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A3BC58A7AD93BFD909F8B39F9334F55633AEF21A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/91CM1MD61QwDqJUxxMDBVymEQYvzVLeR6RwMJWvXM5Mt/0/323830343a353938383a3a2f33322d313238203d3e20323638373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5988::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:76:81:84:09:69:cd:a3:78:b1:d7:32:0d:a9:c5:83:85:30:
         38:97:eb:84:be:13:6c:93:97:dd:27:33:98:55:1f:80:42:f6:
         db:c9:12:24:fc:9a:6c:99:4d:3f:04:74:1e:ec:4d:26:62:91:
         49:00:b9:b7:7e:0b:6f:0c:28:a9:9c:2c:73:cb:54:71:17:f1:
         21:0f:6b:72:b3:15:66:10:76:a6:20:61:95:71:22:cf:3d:02:
         48:d9:02:7e:07:0f:74:2b:4b:01:9f:c1:f6:8a:0d:07:03:a3:
         2d:e4:e0:98:d9:32:40:16:93:3c:c7:92:11:74:86:56:50:d3:
         9d:28:66:4b:90:fa:f2:f9:0e:50:65:1a:30:61:ee:18:2d:5f:
         49:03:5e:6e:52:ac:7d:fd:27:9f:8c:b3:0b:b6:ba:f2:96:b5:
         a4:50:50:e7:3f:aa:95:61:08:32:22:29:2c:e4:be:f8:fe:e7:
         8e:61:f7:f8:89:47:2a:ad:c7:08:44:06:1f:c1:44:ce:7a:58:
         f8:e4:d7:8c:7c:a9:21:31:05:7e:49:29:99:ce:a3:a5:a2:80:
         95:39:1a:f7:9d:7f:58:f0:57:ff:08:29:08:fd:c7:25:20:bd:
         e1:34:b1:16:65:c3:7f:a4:3d:38:bd:c6:b1:13:5e:3f:e3:90:
         5b:16:43:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:53:09 2025 by rpki-client