Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/323830343a3364633a3a2f33322d3438203d3e203532393637.roa
File:                     323830343a3364633a3a2f33322d3438203d3e203532393637.roa (raw, json)
Hash identifier:          tQ6CzDE0VrPtoIjHKVo5xPuXMiFBqi3COC2rze3pQV4=
Subject key identifier:   3E:FE:06:35:93:6E:FC:F9:59:F7:C1:15:47:BF:1D:A3:BC:94:6A:85
Certificate issuer:       /CN=AF13A2166949DAD17884467559DDBA331811C5FC
Certificate serial:       33C560C41183A2D66260DE4E7D9691A467C0EE51
Authority key identifier: AF:13:A2:16:69:49:DA:D1:78:84:46:75:59:DD:BA:33:18:11:C5:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF13A2166949DAD17884467559DDBA331811C5FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/323830343a3364633a3a2f33322d3438203d3e203532393637.roa
Signing time:             Thu 11 Aug 2022 21:25:59 +0000
ROA not before:           Thu 11 Aug 2022 21:20:59 +0000
ROA not after:            Thu 10 Aug 2023 21:25:59 +0000
asID:                     52967
IP address blocks:        2804:3dc::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:c5:60:c4:11:83:a2:d6:62:60:de:4e:7d:96:91:a4:67:c0:ee:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF13A2166949DAD17884467559DDBA331811C5FC
        Validity
            Not Before: Aug 11 21:20:59 2022 GMT
            Not After : Aug 10 21:25:59 2023 GMT
        Subject: CN=3EFE0635936EFCF959F7C11547BF1DA3BC946A85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bf:78:70:9f:0f:a4:aa:fc:9d:5b:7f:aa:b0:
                    68:95:ef:31:52:c3:d7:f3:87:2d:de:96:21:e8:4f:
                    ec:f6:83:fe:d9:ea:dc:53:3b:f7:00:60:45:24:5e:
                    11:90:01:68:de:6e:cb:fb:73:3b:de:4d:74:51:96:
                    76:6f:7f:a9:16:d7:25:29:07:2b:db:ef:52:fc:4e:
                    f2:c8:79:37:7d:a4:5c:c9:de:f7:6f:91:61:a7:4c:
                    08:61:e0:c5:8d:b2:64:c7:7a:ec:06:50:7d:27:94:
                    11:a9:5a:74:23:3e:6f:11:de:2d:0b:4d:29:74:18:
                    f8:33:12:ef:c9:bc:f7:04:c4:24:97:fe:de:a0:e4:
                    20:c3:5c:97:29:a6:47:fb:55:0c:cc:0d:77:66:3e:
                    d7:e3:be:ac:ee:cb:55:27:44:ab:55:10:be:9d:86:
                    9a:d2:1e:31:9e:72:1b:65:6f:b8:e0:e4:a5:45:a6:
                    a7:69:41:7a:15:58:08:25:6d:bd:eb:0c:a8:6d:3d:
                    6e:7e:86:e7:2f:01:cc:3e:06:58:fe:54:f6:85:60:
                    13:11:3d:7b:71:98:bf:78:15:e0:e1:3b:f1:94:0d:
                    f9:a9:53:d1:5d:f3:39:b2:ed:96:a3:99:50:8f:07:
                    47:18:a4:fd:a2:98:87:a8:c8:d7:70:f2:74:14:ee:
                    af:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:FE:06:35:93:6E:FC:F9:59:F7:C1:15:47:BF:1D:A3:BC:94:6A:85
            X509v3 Authority Key Identifier:
                keyid:AF:13:A2:16:69:49:DA:D1:78:84:46:75:59:DD:BA:33:18:11:C5:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/AF13A2166949DAD17884467559DDBA331811C5FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF13A2166949DAD17884467559DDBA331811C5FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/323830343a3364633a3a2f33322d3438203d3e203532393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:e6:e8:89:37:53:3f:36:47:69:73:e4:67:aa:bf:87:bd:b9:
         81:77:6f:e5:5c:2f:b7:3d:d5:33:49:e2:86:cb:82:7c:49:ca:
         40:bc:d8:e9:7c:85:e7:bc:42:f5:3a:e6:04:f9:05:0c:0a:73:
         91:d1:e6:5f:d5:20:36:1d:09:b6:f6:27:1e:e2:a6:f1:b5:98:
         6b:e4:51:8c:05:ea:f1:cb:11:a8:03:a7:9e:22:7d:f0:ea:91:
         85:2d:27:81:9b:ec:87:e0:66:3e:d8:60:f4:57:4d:af:75:b7:
         b7:7e:1d:90:b8:65:b8:a9:d2:c8:13:56:f1:2e:ff:a5:64:2f:
         6e:35:a1:ea:e4:8c:d9:71:08:20:ba:6b:ae:c7:2f:77:10:24:
         94:fe:dd:c0:1f:e0:a6:b8:01:30:27:b7:0d:be:13:23:1d:30:
         76:bc:d5:3f:aa:43:20:8d:43:db:cc:85:c7:7d:ef:47:0f:a0:
         d2:65:94:64:b1:be:bc:64:5b:79:14:5f:6f:94:07:42:05:33:
         41:a2:59:1d:4b:1d:b3:34:41:5f:83:7e:6c:df:d6:c8:d0:b8:
         27:36:04:a0:e1:57:54:15:23:81:e3:d4:5e:7e:05:d5:2d:c7:
         87:53:d2:2d:33:29:eb:cc:23:09:a3:f3:8b:53:89:5d:d7:5c:
         d6:fd:aa:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 00:06:33 2025 by rpki-client