Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a393030303a3a2f33362d3336203d3e20323635343936.roa
File:                     323830343a333530383a393030303a3a2f33362d3336203d3e20323635343936.roa (raw, json)
Hash identifier:          0W0FO3SZfYTEmlWaWaEdv8MDAdTP3ghw9pApGo9OXDc=
Subject key identifier:   E4:00:21:6B:ED:AC:35:EA:BD:59:FD:88:21:48:7A:D9:5B:C4:76:12
Certificate issuer:       /CN=1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517
Certificate serial:       7A0117EF962CA8A9EDF64727361DCBBD7FBAFD13
Authority key identifier: 14:53:E0:F3:4C:FC:80:20:A8:BB:A2:A1:7C:CD:B7:CA:BC:9C:05:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a393030303a3a2f33362d3336203d3e20323635343936.roa
Signing time:             Mon 03 Apr 2023 10:56:41 +0000
ROA not before:           Mon 03 Apr 2023 10:51:41 +0000
ROA not after:            Mon 01 Apr 2024 10:56:41 +0000
asID:                     265496
IP address blocks:        2804:3508:9000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:01:17:ef:96:2c:a8:a9:ed:f6:47:27:36:1d:cb:bd:7f:ba:fd:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517
        Validity
            Not Before: Apr  3 10:51:41 2023 GMT
            Not After : Apr  1 10:56:41 2024 GMT
        Subject: CN=E400216BEDAC35EABD59FD8821487AD95BC47612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:25:91:ea:ad:c4:54:86:b7:32:30:88:6a:13:
                    d7:57:56:57:c1:c0:a2:df:b2:d0:1f:20:19:31:90:
                    43:1e:56:cf:f2:b4:52:8f:09:ed:e2:a5:e9:26:11:
                    f7:4e:c5:96:a3:ad:9e:23:23:ed:12:2e:36:6a:87:
                    e6:ca:7e:77:31:ae:42:b0:c5:5f:d6:48:af:45:5d:
                    78:86:64:46:11:f2:19:7f:bb:cd:31:b7:93:0c:a1:
                    1e:45:d9:b1:b0:60:18:86:51:cc:2f:8b:3b:50:d0:
                    23:bb:bc:d9:40:53:4d:6f:4c:59:0c:07:d9:6a:99:
                    33:cc:b4:86:1d:a7:af:c9:a3:41:e3:48:2b:a5:e9:
                    9a:75:85:a2:98:d9:8c:ac:47:83:f2:29:fe:71:22:
                    8e:2c:8c:24:12:de:2c:aa:23:58:a1:c1:ef:d3:fe:
                    41:fb:7a:d2:46:17:12:57:93:f9:a7:8b:c3:e7:ff:
                    a5:8b:19:4e:cf:c9:d6:a7:00:7d:3c:56:ef:88:20:
                    2a:a7:fc:18:bf:bd:ca:a8:a3:db:83:bc:a6:31:4b:
                    a2:a3:22:e4:2e:68:3d:a6:bd:e4:ca:8e:97:82:71:
                    52:25:d6:b2:c5:f0:ad:28:43:4e:60:12:a0:27:da:
                    9e:83:d2:aa:48:b6:5e:b6:7f:d1:60:97:41:ef:e8:
                    af:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:00:21:6B:ED:AC:35:EA:BD:59:FD:88:21:48:7A:D9:5B:C4:76:12
            X509v3 Authority Key Identifier:
                keyid:14:53:E0:F3:4C:FC:80:20:A8:BB:A2:A1:7C:CD:B7:CA:BC:9C:05:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a393030303a3a2f33362d3336203d3e20323635343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3508:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         d0:11:10:a7:61:2a:78:8c:87:b0:e4:49:bb:d9:68:34:37:35:
         8f:13:f5:1a:43:dc:f5:8e:e8:cf:67:51:be:65:1d:03:0c:d6:
         a3:50:4a:1e:b6:38:87:cc:72:2b:d0:a8:fd:91:ff:09:f6:48:
         4d:c0:e0:50:3c:ab:c6:cf:6c:b7:97:e0:8e:51:ed:37:16:c9:
         52:98:f5:1d:b1:3d:77:f2:d8:e3:d3:0c:d4:34:29:bf:24:a9:
         19:cc:69:4f:ec:43:b8:ad:cd:fd:b0:a4:bf:8c:9a:c4:04:2c:
         61:ad:68:7b:a2:47:7f:fe:68:a0:e1:39:c5:b2:71:79:ef:a8:
         62:1e:65:de:83:af:c8:71:ee:f0:01:1d:be:c0:c1:a8:5a:cd:
         06:0a:e7:cd:19:47:45:c0:fe:2a:08:03:ec:35:00:18:bf:ee:
         f5:93:eb:f7:c6:af:3a:76:55:55:50:e0:ae:fe:48:86:72:79:
         92:33:c1:f7:d0:02:57:bf:58:15:43:d2:96:b6:38:ef:6a:4d:
         cb:9f:13:53:d3:1f:68:f9:1e:00:f4:44:7b:02:32:fa:c1:2e:
         b7:44:e8:5c:c4:04:4c:b6:52:da:9a:83:38:52:e5:a8:a4:dd:
         61:ed:ee:3a:ad:87:63:95:5d:28:95:af:17:31:22:23:a7:da:
         59:d8:c6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:36:24 2025 by rpki-client