Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/323830343a313336383a636136613a3a2f34382d3438203d3e20323632383038.roa
File:                     323830343a313336383a636136613a3a2f34382d3438203d3e20323632383038.roa (raw, json)
Hash identifier:          +MSBoQhsiTVJro/QbmAJ7DDx0jRak4ADw8qchmhBhTI=
Subject key identifier:   DE:0C:5E:DD:D4:E4:B9:69:04:09:0F:C2:B9:8C:83:AF:15:2E:4C:B5
Certificate issuer:       /CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
Certificate serial:       7D6689A85954A9626EB2BCD75F32C55C861C7865
Authority key identifier: 01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/323830343a313336383a636136613a3a2f34382d3438203d3e20323632383038.roa
Signing time:             Tue 10 Oct 2023 13:57:31 +0000
ROA not before:           Tue 10 Oct 2023 13:52:31 +0000
ROA not after:            Tue 08 Oct 2024 13:57:31 +0000
asID:                     262808
IP address blocks:        2804:1368:ca6a::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:66:89:a8:59:54:a9:62:6e:b2:bc:d7:5f:32:c5:5c:86:1c:78:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
        Validity
            Not Before: Oct 10 13:52:31 2023 GMT
            Not After : Oct  8 13:57:31 2024 GMT
        Subject: CN=DE0C5EDDD4E4B96904090FC2B98C83AF152E4CB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a7:8b:d3:6c:59:62:ca:0d:fb:b8:62:89:73:
                    cf:ae:de:54:98:0b:5c:d3:77:81:3e:3d:e5:b4:ad:
                    4d:6a:0e:10:a3:5c:8f:b2:67:2f:a3:fc:2f:7f:65:
                    35:b1:ac:19:13:fe:a6:0f:ed:69:ba:c1:07:f6:61:
                    85:a2:61:1a:90:5f:e9:81:d0:c8:1c:da:15:3f:8a:
                    4e:f3:1e:f0:27:59:b8:e4:c2:ab:c3:d1:fc:14:37:
                    34:b0:ae:f2:ab:86:aa:6f:99:83:67:89:db:b7:45:
                    d0:4a:53:98:c3:d4:84:f2:0e:48:80:f1:f1:d4:35:
                    dc:63:b7:77:75:fa:ac:8c:ff:6a:2a:6f:a1:b2:54:
                    4a:32:63:cd:5b:b1:5c:a1:9e:8a:4c:04:ef:2f:4b:
                    a2:12:ce:ab:51:d4:53:80:d8:e0:b6:74:26:fc:dc:
                    d2:04:72:06:37:56:6e:25:8e:74:61:eb:92:38:c7:
                    e8:ff:f0:70:54:68:60:e3:8e:8a:9e:dd:8c:f8:94:
                    5a:f0:eb:6b:22:bc:58:9d:97:2e:c6:9d:82:24:94:
                    36:17:b0:ba:64:7a:52:97:9e:87:37:42:ea:89:42:
                    80:19:15:d6:ea:78:93:68:ed:fc:f6:7c:ba:b5:be:
                    b9:1f:05:d5:33:e5:93:17:22:f2:b2:b5:38:17:a2:
                    22:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:0C:5E:DD:D4:E4:B9:69:04:09:0F:C2:B9:8C:83:AF:15:2E:4C:B5
            X509v3 Authority Key Identifier:
                keyid:01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/323830343a313336383a636136613a3a2f34382d3438203d3e20323632383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1368:ca6a::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:16:5a:95:4b:02:ff:8a:a5:23:d0:be:89:d9:08:3b:0c:ef:
         f1:20:e7:da:d4:53:db:5c:7f:d4:b2:c8:5e:cb:d2:c0:13:1a:
         82:36:36:58:49:e7:3b:b8:77:42:e8:6e:c5:a0:16:8c:25:0b:
         e9:ed:a8:31:b2:77:95:c0:42:2a:64:20:db:ba:dc:2c:75:6c:
         94:8c:59:2d:cd:a4:55:4e:c5:47:f0:ad:66:b9:97:82:df:f9:
         7b:fe:8f:f3:ee:ce:d3:84:ab:12:e7:fb:b3:b5:b3:39:a6:c6:
         1c:62:0c:67:f4:f7:f5:46:a1:9b:4b:58:30:0b:10:aa:9d:b2:
         d1:5c:22:8a:39:ca:45:81:23:2c:b6:11:ad:2a:9d:63:3f:e6:
         6c:a3:e5:e7:d7:27:5d:a4:64:ad:fb:02:0d:dc:5b:61:5f:d8:
         c8:dc:01:3a:3b:da:5c:fb:5f:b0:fe:90:ce:13:19:47:10:d3:
         23:25:19:97:69:0f:f5:d8:cf:f5:f3:37:aa:f6:e8:66:59:71:
         b0:61:fc:08:61:1f:6d:70:5b:a3:de:a5:ef:65:78:f0:15:33:
         e4:ab:e6:0b:77:fb:02:39:44:c8:70:a4:dd:91:aa:0d:f0:49:
         3f:af:7a:98:73:c9:9c:de:70:a7:0d:17:99:81:24:5b:26:b5:
         19:59:94:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:40:31 2025 by rpki-client