Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a343030303a3a2f33352d3335203d3e20323635343936.roa
File:                     323830343a333530383a343030303a3a2f33352d3335203d3e20323635343936.roa (raw, json)
Hash identifier:          kfsBjMDNPIz465L598s7j8Bq6YFAKy90XUHmBicR52A=
Subject key identifier:   AB:E1:5D:9D:8C:7B:78:D7:BE:37:28:3B:3F:1C:B5:1C:8B:7E:BF:2F
Certificate issuer:       /CN=1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517
Certificate serial:       46D09A67EB25340772E5B9C2EC67A98C7EDACAA3
Authority key identifier: 14:53:E0:F3:4C:FC:80:20:A8:BB:A2:A1:7C:CD:B7:CA:BC:9C:05:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a343030303a3a2f33352d3335203d3e20323635343936.roa
Signing time:             Mon 03 Apr 2023 10:56:39 +0000
ROA not before:           Mon 03 Apr 2023 10:51:39 +0000
ROA not after:            Mon 01 Apr 2024 10:56:39 +0000
asID:                     265496
IP address blocks:        2804:3508:4000::/35 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:d0:9a:67:eb:25:34:07:72:e5:b9:c2:ec:67:a9:8c:7e:da:ca:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517
        Validity
            Not Before: Apr  3 10:51:39 2023 GMT
            Not After : Apr  1 10:56:39 2024 GMT
        Subject: CN=ABE15D9D8C7B78D7BE37283B3F1CB51C8B7EBF2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:cf:6d:c7:35:c9:e8:46:70:15:a7:07:9b:46:
                    2a:f0:dc:ef:30:51:20:6c:93:92:72:24:84:56:a4:
                    f9:75:1e:aa:06:cf:22:36:07:25:02:dd:fa:63:07:
                    d5:0d:f7:80:e4:89:d6:dc:8e:ac:1e:e0:46:12:1a:
                    ee:da:f9:7f:c6:0b:fd:9b:2f:da:f8:2a:d1:ee:70:
                    f7:3e:1b:60:10:2b:59:69:3b:5d:ba:aa:1c:18:d2:
                    c8:42:4a:50:53:6a:e7:ca:7b:c7:d0:fb:8f:42:d0:
                    89:f5:f9:17:7a:e6:4c:a1:67:37:a4:90:31:22:c7:
                    45:7b:83:20:68:20:15:fe:6a:9c:18:f4:52:d1:22:
                    75:3c:6a:97:38:40:a9:9e:dc:9e:cf:d2:d7:0c:5e:
                    fd:6d:1a:2b:33:11:fa:aa:42:1b:39:d8:d2:8d:9b:
                    bf:75:e2:36:ef:53:48:90:9b:db:e3:d4:ef:1d:01:
                    01:c6:79:60:1f:26:3c:78:ac:68:7f:2e:a4:cc:60:
                    ef:98:4c:da:23:a8:5b:56:d7:83:dd:6e:d9:a5:fb:
                    3b:a7:a3:01:be:53:09:41:19:4c:3c:7a:94:69:9c:
                    22:5c:9f:8d:da:a1:19:9b:96:a3:cd:b6:90:c6:4b:
                    13:ab:58:09:04:ac:04:d4:8e:74:62:ed:7a:67:51:
                    45:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E1:5D:9D:8C:7B:78:D7:BE:37:28:3B:3F:1C:B5:1C:8B:7E:BF:2F
            X509v3 Authority Key Identifier:
                keyid:14:53:E0:F3:4C:FC:80:20:A8:BB:A2:A1:7C:CD:B7:CA:BC:9C:05:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a343030303a3a2f33352d3335203d3e20323635343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3508:4000::/35

    Signature Algorithm: sha256WithRSAEncryption
         82:11:ad:d6:48:c5:95:6f:bf:e2:c3:40:30:ca:dc:b8:06:12:
         42:1f:f6:f2:28:c5:65:3b:85:8d:94:da:1f:ac:65:e5:55:67:
         ec:da:64:9e:c6:ff:4a:2b:09:65:68:6a:da:c8:51:ca:4a:24:
         41:dd:95:86:8d:9b:ce:a2:03:15:07:d5:42:d6:bc:c2:ab:e4:
         ff:84:fc:6d:53:67:be:32:f5:21:93:5c:9b:73:24:07:28:a8:
         e7:e3:d1:61:85:4b:49:42:4a:b3:e5:bf:db:58:f8:d9:d1:26:
         49:5a:91:4c:57:d3:aa:fc:2a:cc:78:75:da:c1:9c:33:bb:15:
         9f:ce:d8:3f:44:ad:17:e8:d1:41:a5:cd:df:5b:7a:d3:dd:fa:
         d4:76:49:1e:dc:e7:3f:64:3c:d9:14:35:24:31:e7:4d:84:30:
         77:3f:f9:7d:0c:b1:78:c9:f7:c0:02:c4:e2:2d:a3:53:69:aa:
         b7:b1:86:36:0e:63:9f:f3:28:6e:c4:2d:96:dc:4b:02:0a:58:
         b3:de:a4:53:ba:b6:f3:16:3f:05:7b:17:5c:4b:ee:3c:95:d6:
         e6:df:84:c2:92:f2:7d:5d:15:16:dd:b3:0f:de:6c:24:55:89:
         7b:dd:9a:4a:30:62:2a:59:94:04:3f:af:c4:8c:37:88:94:9d:
         dd:dc:3c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 06:04:08 2025 by rpki-client