Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ASFPoznE41ueQyALgpiF8HskioVioGWe1BS8NhMCYNcD/0/323830343a333861633a3a2f33322d3438203d3e20323636343933.roa
File:                     323830343a333861633a3a2f33322d3438203d3e20323636343933.roa (raw, json)
Hash identifier:          A6BRlC6EcaQJGbb8lx/Dy3lZyo9I/l6yvA6uaF6BsF8=
Subject key identifier:   5B:DB:63:3B:50:6C:A0:29:04:D5:17:92:72:05:E0:95:28:53:2E:C4
Certificate issuer:       /CN=AEB0C90E0E86EDCAF388499DE512E2E086A39946
Certificate serial:       13507A97953D266FDC302FB38DD556E2E0590B8E
Authority key identifier: AE:B0:C9:0E:0E:86:ED:CA:F3:88:49:9D:E5:12:E2:E0:86:A3:99:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AEB0C90E0E86EDCAF388499DE512E2E086A39946.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ASFPoznE41ueQyALgpiF8HskioVioGWe1BS8NhMCYNcD/0/323830343a333861633a3a2f33322d3438203d3e20323636343933.roa
Signing time:             Fri 11 Aug 2023 13:38:03 +0000
ROA not before:           Fri 11 Aug 2023 13:33:03 +0000
ROA not after:            Fri 09 Aug 2024 13:38:03 +0000
asID:                     266493
IP address blocks:        2804:38ac::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:50:7a:97:95:3d:26:6f:dc:30:2f:b3:8d:d5:56:e2:e0:59:0b:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEB0C90E0E86EDCAF388499DE512E2E086A39946
        Validity
            Not Before: Aug 11 13:33:03 2023 GMT
            Not After : Aug  9 13:38:03 2024 GMT
        Subject: CN=5BDB633B506CA02904D517927205E09528532EC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e9:c1:d5:4f:d8:7b:4e:c7:43:b7:e6:cd:5c:
                    9d:06:f1:65:19:5b:89:6f:46:57:1b:4f:81:7a:b3:
                    4b:ae:d7:d8:4e:67:c7:68:f7:22:96:c3:6d:bd:25:
                    fe:30:a5:a6:39:5d:65:89:21:db:13:43:b0:4d:3e:
                    55:b6:57:4f:6b:13:c4:61:d0:e0:6f:e1:e7:3d:54:
                    dd:9b:a9:e4:c9:98:d7:71:3e:b7:da:b2:11:57:92:
                    d9:c9:0e:e0:12:db:8f:62:ee:75:23:23:ee:1a:fe:
                    ca:91:55:7e:98:cb:c5:c0:85:ac:89:60:54:d3:59:
                    06:2a:ca:15:8b:53:98:2a:ab:f5:b4:10:8a:8d:69:
                    c5:03:e2:93:3f:89:b5:e3:19:15:c5:11:98:e3:a6:
                    6d:c5:eb:71:bf:34:91:b1:8b:ed:b4:68:2f:5e:c5:
                    77:62:2f:d6:61:6b:d8:26:bb:59:22:96:c0:4c:12:
                    13:26:6d:3c:8d:ee:41:3a:c5:8b:8b:1d:95:82:d2:
                    53:54:3a:c6:1e:88:55:29:c3:ec:6d:ca:56:3d:f4:
                    10:8f:6a:80:e9:13:80:34:87:d8:f5:b8:cd:bf:7c:
                    85:62:f1:5a:d1:78:77:59:8a:ed:42:37:3c:81:eb:
                    3f:82:8d:b0:37:c3:cc:0b:38:b5:18:f5:b5:49:cd:
                    a8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:DB:63:3B:50:6C:A0:29:04:D5:17:92:72:05:E0:95:28:53:2E:C4
            X509v3 Authority Key Identifier:
                keyid:AE:B0:C9:0E:0E:86:ED:CA:F3:88:49:9D:E5:12:E2:E0:86:A3:99:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ASFPoznE41ueQyALgpiF8HskioVioGWe1BS8NhMCYNcD/0/AEB0C90E0E86EDCAF388499DE512E2E086A39946.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AEB0C90E0E86EDCAF388499DE512E2E086A39946.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ASFPoznE41ueQyALgpiF8HskioVioGWe1BS8NhMCYNcD/0/323830343a333861633a3a2f33322d3438203d3e20323636343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:38ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:7e:81:9e:33:04:ed:9e:b6:d9:54:2d:aa:36:ba:ea:01:f2:
         d4:fe:e1:ac:d8:fe:fe:9d:15:ad:a5:05:29:4a:59:a2:a0:3f:
         da:d7:cb:e8:4b:3b:81:16:de:ce:56:db:96:38:08:ba:a2:fe:
         4b:0c:79:ad:a2:6d:f6:0e:e7:81:76:8c:ae:08:8c:01:63:f4:
         3f:ad:52:28:52:3a:60:7a:dd:b5:2d:d9:4e:33:0a:d9:2b:d6:
         31:84:2a:39:6c:77:fb:0f:8f:eb:6a:4f:d5:4d:85:f2:df:16:
         a4:fe:42:02:e6:26:13:d6:14:0c:66:db:fd:a6:00:a7:fb:6f:
         eb:bb:98:39:4f:46:4d:f5:50:35:22:a5:34:43:f8:86:94:5e:
         63:ae:f6:d2:32:9d:6b:69:8a:2a:74:f5:0f:e3:ef:4b:57:4d:
         5b:28:ff:6b:b9:ad:50:9b:20:c2:0e:b8:a7:f4:5c:37:fa:bf:
         89:d5:54:8b:35:53:d1:ae:b5:b2:cc:ce:6d:23:2a:5d:4a:6a:
         ba:55:e8:8a:9d:07:7a:d8:82:e0:21:ce:37:2c:70:b6:33:4f:
         fa:1c:67:71:21:9d:2c:8e:89:1d:f7:60:12:db:30:02:87:ec:
         0a:a0:7f:d7:d8:89:f8:ad:44:ec:c5:1c:b7:1a:4d:b4:4d:b7:
         1d:16:c1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:12:34 2025 by rpki-client