Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/323830343a326362633a3a2f33362d3336203d3e20323635323430.roa
File:                     323830343a326362633a3a2f33362d3336203d3e20323635323430.roa (raw, json)
Hash identifier:          cIGAWzukfq0LN6PaCI2L6Yn4H5IQueRqH4aWvyT2O/w=
Subject key identifier:   30:5B:94:F4:78:0B:47:66:3F:48:53:29:47:6F:8F:39:39:59:F2:35
Certificate issuer:       /CN=42C85A39ED0D33A761B78E8D797BDD5D476B11C4
Certificate serial:       20088F0AAAA8B12C2E847D5CE43B1812369F0CA9
Authority key identifier: 42:C8:5A:39:ED:0D:33:A7:61:B7:8E:8D:79:7B:DD:5D:47:6B:11:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42C85A39ED0D33A761B78E8D797BDD5D476B11C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/323830343a326362633a3a2f33362d3336203d3e20323635323430.roa
Signing time:             Mon 11 Sep 2023 12:21:36 +0000
ROA not before:           Mon 11 Sep 2023 12:16:36 +0000
ROA not after:            Mon 09 Sep 2024 12:21:36 +0000
asID:                     265240
IP address blocks:        2804:2cbc::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:08:8f:0a:aa:a8:b1:2c:2e:84:7d:5c:e4:3b:18:12:36:9f:0c:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42C85A39ED0D33A761B78E8D797BDD5D476B11C4
        Validity
            Not Before: Sep 11 12:16:36 2023 GMT
            Not After : Sep  9 12:21:36 2024 GMT
        Subject: CN=305B94F4780B47663F485329476F8F393959F235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f9:96:35:9e:d6:7e:90:20:76:10:16:8a:d0:
                    5b:ff:ed:36:d3:11:ce:c1:b0:ee:f9:53:a7:5e:94:
                    a9:95:20:f7:f7:aa:db:b5:a5:cd:6b:12:8b:0f:20:
                    f2:4c:e8:71:7c:19:05:28:90:41:ca:93:cd:e9:59:
                    b6:3d:33:23:82:d4:fc:6e:80:5c:1a:35:b6:89:31:
                    ed:25:78:60:be:ae:4a:74:1d:bc:8b:4e:17:4e:61:
                    00:48:91:51:78:81:1b:30:5a:67:5e:3f:80:81:b7:
                    8d:d0:e8:e0:25:a3:42:2a:1f:3f:8f:4f:21:06:d6:
                    d3:48:c9:9c:b2:13:bc:8a:fa:89:c0:f1:93:c0:25:
                    bc:b0:58:73:3e:6f:fb:fe:1f:58:f6:b3:45:0f:72:
                    fa:7a:93:3d:08:9a:76:d2:dc:58:be:df:15:80:64:
                    06:0e:d3:b1:88:91:5e:ef:02:0e:91:34:9d:70:e2:
                    9a:3f:61:6e:e1:dc:71:9e:e3:f8:a1:ea:fa:a4:da:
                    82:14:eb:7e:8d:6a:2a:a5:18:63:c0:ba:4e:f4:cc:
                    60:64:01:68:df:70:15:da:be:7c:03:d7:e5:c8:6d:
                    8e:9e:f1:0e:4c:61:c6:93:46:86:36:8f:24:5b:a5:
                    14:3d:0c:a0:5d:69:54:91:3d:c8:a8:6c:3f:80:a0:
                    4f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:5B:94:F4:78:0B:47:66:3F:48:53:29:47:6F:8F:39:39:59:F2:35
            X509v3 Authority Key Identifier:
                keyid:42:C8:5A:39:ED:0D:33:A7:61:B7:8E:8D:79:7B:DD:5D:47:6B:11:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/42C85A39ED0D33A761B78E8D797BDD5D476B11C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42C85A39ED0D33A761B78E8D797BDD5D476B11C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/323830343a326362633a3a2f33362d3336203d3e20323635323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2cbc::/36

    Signature Algorithm: sha256WithRSAEncryption
         72:a1:3f:9f:8f:9f:24:4d:77:03:7a:3a:e8:d8:b4:0e:e7:de:
         c7:d9:90:b9:0e:da:70:91:fa:c5:3d:a9:e2:17:f7:fb:a3:85:
         4f:dd:a1:e6:55:22:4e:f0:b7:9d:7e:c9:d2:28:55:82:f5:bd:
         6e:59:e3:06:d9:09:e0:5b:a6:89:dd:92:08:5c:38:7b:90:ab:
         30:19:24:88:a2:51:cc:10:af:20:3e:e6:9b:a8:6d:d1:9e:dc:
         5e:f4:a1:1c:cb:a1:51:fd:6b:94:b5:d7:f2:c8:11:dd:5c:a7:
         fd:33:f9:3e:6e:fa:fa:49:7e:09:a4:44:42:f3:9a:4f:72:09:
         a0:1c:2a:11:82:a6:40:b7:ac:f1:dc:c4:92:3d:02:4a:f2:b2:
         57:28:f9:7a:37:64:90:dc:b1:c5:5b:71:b9:7e:a0:7e:8b:0c:
         53:39:7f:7a:8f:52:5e:c1:f2:52:7a:2f:fb:99:31:8f:d5:9b:
         3d:14:91:e6:1d:5c:e9:2a:06:9f:6b:d7:4f:d3:3b:48:64:24:
         2c:9a:48:c6:d7:7d:a9:25:92:44:4c:f1:ef:49:35:97:76:bb:
         03:fd:14:af:f6:29:28:14:71:f5:6f:dc:1b:92:a5:d6:cf:6c:
         1b:b5:c9:81:5a:e4:19:b9:94:4f:63:a6:ca:2b:b7:00:18:31:
         bb:27:c5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:46:57 2025 by rpki-client