Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/323830343a3364633a383030303a3a2f33332d3333203d3e203532393637.roa
File:                     323830343a3364633a383030303a3a2f33332d3333203d3e203532393637.roa (raw, json)
Hash identifier:          EeJDrRBBNSJZbU38PpNaeGlrlxd93e5aByQpl2EYJf4=
Subject key identifier:   78:7E:CE:F8:EF:1A:4E:B1:BF:DC:78:72:B7:7B:D3:1C:F2:B2:02:B4
Certificate issuer:       /CN=133ACFA06BCB1C106E8FDAD07EB2655C37438C81
Certificate serial:       2D04B5ABF23EA412F995D1D188D5451A526A1C48
Authority key identifier: 13:3A:CF:A0:6B:CB:1C:10:6E:8F:DA:D0:7E:B2:65:5C:37:43:8C:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/133ACFA06BCB1C106E8FDAD07EB2655C37438C81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/323830343a3364633a383030303a3a2f33332d3333203d3e203532393637.roa
Signing time:             Thu 01 Sep 2022 13:50:51 +0000
ROA not before:           Thu 01 Sep 2022 13:45:51 +0000
ROA not after:            Thu 31 Aug 2023 13:50:51 +0000
asID:                     52967
IP address blocks:        2804:3dc:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:04:b5:ab:f2:3e:a4:12:f9:95:d1:d1:88:d5:45:1a:52:6a:1c:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133ACFA06BCB1C106E8FDAD07EB2655C37438C81
        Validity
            Not Before: Sep  1 13:45:51 2022 GMT
            Not After : Aug 31 13:50:51 2023 GMT
        Subject: CN=787ECEF8EF1A4EB1BFDC7872B77BD31CF2B202B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:40:a1:0d:4c:fb:14:ec:ba:40:0d:ef:4d:dc:
                    66:15:4b:47:27:c8:31:7f:76:bf:79:44:11:8e:61:
                    69:09:ee:8f:61:c3:92:b6:52:d3:53:75:40:e2:3a:
                    54:b6:f6:a0:99:53:69:43:0f:a1:37:ff:fb:81:dc:
                    99:f8:c1:8b:80:02:dd:a4:8c:6a:41:f4:e9:ff:ce:
                    a7:aa:ab:cf:88:61:21:23:a8:43:f3:84:26:18:8d:
                    e4:48:cf:cb:45:4e:db:96:be:7a:66:9c:dd:e0:f8:
                    c9:df:06:7c:04:1a:fe:1d:2a:13:29:21:a1:cf:a6:
                    01:e3:8d:44:12:29:21:3f:d8:74:61:a6:ae:74:57:
                    09:2b:94:26:b2:5b:72:52:eb:04:96:0c:af:1d:07:
                    af:be:aa:9c:e9:6e:d7:23:d1:bf:76:c4:58:d9:e4:
                    4f:91:2c:7f:51:a4:11:fd:4c:56:39:47:8c:73:6e:
                    6a:4a:77:2d:a1:d0:e0:21:08:43:03:38:a3:7b:5c:
                    d8:84:03:f9:0d:55:9a:57:49:2b:4f:b0:33:85:d2:
                    81:4d:07:45:9f:65:33:7a:fd:a1:c6:01:2f:90:74:
                    62:58:a5:da:45:5b:ac:38:0c:7d:cd:a9:a5:ad:dc:
                    8e:7e:0a:bb:fe:f0:2e:d3:57:3f:5f:3f:a0:51:0d:
                    35:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:7E:CE:F8:EF:1A:4E:B1:BF:DC:78:72:B7:7B:D3:1C:F2:B2:02:B4
            X509v3 Authority Key Identifier:
                keyid:13:3A:CF:A0:6B:CB:1C:10:6E:8F:DA:D0:7E:B2:65:5C:37:43:8C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/133ACFA06BCB1C106E8FDAD07EB2655C37438C81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/133ACFA06BCB1C106E8FDAD07EB2655C37438C81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/323830343a3364633a383030303a3a2f33332d3333203d3e203532393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3dc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         35:b8:28:8b:24:46:a7:be:59:c3:22:32:53:22:2a:e3:09:77:
         5e:a9:95:ce:c9:5f:ee:34:c1:7b:ef:7e:f1:be:86:86:3a:8c:
         00:88:0f:ce:55:79:1e:ad:54:28:c2:d0:6f:a9:ae:19:36:5f:
         82:66:be:fc:3f:b4:d4:8f:63:d5:ec:4b:93:0d:7d:40:fb:6a:
         b1:58:a8:74:e2:0e:0c:69:13:5c:ed:99:cd:24:cb:d2:71:89:
         62:e1:5a:01:0a:d9:a8:a1:eb:53:f6:cd:e4:68:42:02:a6:f2:
         40:be:ef:8b:e7:e6:be:d6:d9:27:0b:70:9a:84:28:10:c3:a9:
         ef:e0:b7:24:bb:98:cb:dd:23:d9:82:78:58:0f:58:d8:73:ea:
         8e:be:e3:10:00:3a:57:57:88:69:94:52:2f:14:91:8f:77:ac:
         81:44:b3:c5:a8:45:9d:d7:ff:e5:c5:07:27:e5:a8:4b:c2:38:
         c0:09:59:8b:6d:04:11:1f:09:39:fe:16:c3:83:63:af:0e:4a:
         d6:8e:67:72:7e:82:0f:9a:4b:cb:fa:38:51:53:02:36:30:44:
         d2:31:3f:3a:60:6c:3e:63:c5:46:81:ec:e5:47:20:18:19:b5:
         18:7b:dc:25:52:91:25:b1:4b:15:56:2d:c5:5a:be:15:a2:f4:
         f5:45:e6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:30:35 2025 by rpki-client