Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/323830343a313336383a663064303a3a2f34382d3438203d3e20323632383038.roa
File:                     323830343a313336383a663064303a3a2f34382d3438203d3e20323632383038.roa (raw, json)
Hash identifier:          qgcjFnNKs9ZSEkLUUCdnKZ44WXTGiu7xwHHkCly/t7c=
Subject key identifier:   D2:FF:02:7E:45:05:1F:7F:F2:5F:03:C4:C2:16:26:B3:BA:FC:C4:8B
Certificate issuer:       /CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
Certificate serial:       47DF23F3CC5512018C093FE4BE5DC56EF8B84407
Authority key identifier: 01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/323830343a313336383a663064303a3a2f34382d3438203d3e20323632383038.roa
Signing time:             Tue 10 Oct 2023 13:57:30 +0000
ROA not before:           Tue 10 Oct 2023 13:52:30 +0000
ROA not after:            Tue 08 Oct 2024 13:57:30 +0000
asID:                     262808
IP address blocks:        2804:1368:f0d0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:df:23:f3:cc:55:12:01:8c:09:3f:e4:be:5d:c5:6e:f8:b8:44:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
        Validity
            Not Before: Oct 10 13:52:30 2023 GMT
            Not After : Oct  8 13:57:30 2024 GMT
        Subject: CN=D2FF027E45051F7FF25F03C4C21626B3BAFCC48B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ad:6a:d4:08:29:22:79:ed:2b:1a:78:20:06:
                    c3:ce:b5:ea:e4:23:7c:17:fc:a0:7b:d2:c5:75:94:
                    f2:c1:2c:83:87:d7:12:c9:f8:06:c9:51:45:87:7e:
                    d8:5f:63:ff:95:dc:cb:4c:09:17:bf:86:c5:c1:48:
                    c2:37:d8:70:f9:4c:36:e4:91:a8:ea:b8:75:59:b5:
                    7a:de:67:8a:a6:c9:94:f1:15:b9:37:28:f5:18:f7:
                    bb:ec:66:72:93:cb:60:a0:ea:ca:28:91:95:a1:81:
                    62:d8:ea:e2:45:b2:f2:89:33:22:07:c9:45:6c:97:
                    14:50:ff:f3:a5:06:9a:3c:df:99:69:61:05:8c:48:
                    be:22:d4:4f:77:00:5a:fc:4a:42:28:60:01:1d:e4:
                    96:7e:81:9d:76:42:2c:59:93:de:b5:26:6f:30:5b:
                    b4:98:56:f4:79:0d:4d:27:be:b0:39:35:52:15:d8:
                    b1:5c:af:24:5b:f8:37:ba:b9:eb:7c:8d:56:f7:bf:
                    5f:fd:a3:6b:d4:b8:36:f1:f8:68:7e:be:53:c7:65:
                    dc:88:6d:8f:a1:c0:50:6b:74:bf:9e:79:6d:82:91:
                    f5:b4:9c:2c:ed:07:f1:64:7a:c9:cd:5d:8c:3d:3d:
                    31:a8:64:b8:ca:70:1e:b2:d8:ca:0d:d1:de:da:1e:
                    e5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:FF:02:7E:45:05:1F:7F:F2:5F:03:C4:C2:16:26:B3:BA:FC:C4:8B
            X509v3 Authority Key Identifier:
                keyid:01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/323830343a313336383a663064303a3a2f34382d3438203d3e20323632383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1368:f0d0::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:57:e1:c4:f5:c9:50:7d:a4:84:0d:90:8e:51:26:68:e2:3d:
         f8:4b:8e:a9:1f:59:43:aa:94:9a:f5:74:18:0d:eb:d3:d9:f8:
         2d:e9:90:44:a6:65:1d:83:64:b7:23:4e:54:69:e9:79:70:5c:
         75:82:0f:e7:61:40:80:ae:b9:a4:ff:08:95:7a:06:25:87:fd:
         98:be:fc:52:82:2b:37:a6:c6:43:37:80:b4:b3:9b:cd:30:e2:
         86:4a:b9:71:7d:5f:99:07:df:2b:74:20:2d:29:75:54:1a:fd:
         27:81:f4:4a:03:8b:24:0c:d7:85:b0:46:8d:69:b1:52:6f:8c:
         50:0c:4c:3e:5e:87:13:83:e8:6f:da:00:0f:0d:0d:2d:c9:7b:
         65:10:2d:d8:3f:b3:2c:2f:f1:85:ad:c8:6f:c1:ec:ac:93:d5:
         e1:70:4a:fe:57:ab:06:c5:29:e2:18:ad:90:61:c5:4d:e5:34:
         ba:65:02:84:4c:ad:20:30:8d:c7:24:0a:7b:b8:d7:92:0d:a3:
         fe:97:cd:6f:58:26:a3:e2:a4:09:55:91:fe:cc:77:dd:e0:05:
         37:53:51:9c:66:2e:e6:e6:fd:ee:a0:c0:d2:dd:bd:a9:9d:7f:
         5d:47:4b:22:22:8b:ae:55:63:0a:e2:7c:08:94:80:f7:17:ca:
         f3:72:82:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:49:06 2025 by rpki-client