Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BWFkvkfDw6CgpBTYs6jCUGkZvXhxS13evTj1fbgDuYPw/0/323830343a363733633a3a2f33322d3430203d3e20323639363135.roa
File:                     323830343a363733633a3a2f33322d3430203d3e20323639363135.roa (raw, json)
Hash identifier:          UCNMoiUp+CGW7YrTfhZCrKLf9/gDunw0WbOd/5nZna0=
Subject key identifier:   C1:FA:E5:11:03:0D:18:2E:A3:DF:62:61:47:46:26:DB:C6:1D:D0:25
Certificate issuer:       /CN=374FF28757655832E796473386AA89E3873C9674
Certificate serial:       2BABDF019A2EEC6876E1BF09E39043690DAABEBD
Authority key identifier: 37:4F:F2:87:57:65:58:32:E7:96:47:33:86:AA:89:E3:87:3C:96:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/374FF28757655832E796473386AA89E3873C9674.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BWFkvkfDw6CgpBTYs6jCUGkZvXhxS13evTj1fbgDuYPw/0/323830343a363733633a3a2f33322d3430203d3e20323639363135.roa
Signing time:             Thu 16 Nov 2023 17:22:32 +0000
ROA not before:           Thu 16 Nov 2023 17:17:32 +0000
ROA not after:            Thu 14 Nov 2024 17:22:32 +0000
asID:                     269615
IP address blocks:        2804:673c::/32 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:ab:df:01:9a:2e:ec:68:76:e1:bf:09:e3:90:43:69:0d:aa:be:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374FF28757655832E796473386AA89E3873C9674
        Validity
            Not Before: Nov 16 17:17:32 2023 GMT
            Not After : Nov 14 17:22:32 2024 GMT
        Subject: CN=C1FAE511030D182EA3DF6261474626DBC61DD025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d8:ea:0c:b8:75:5c:e0:1d:2f:07:a4:da:e7:
                    fc:61:ee:d5:65:a5:d9:85:46:45:cc:87:ec:87:d2:
                    1d:73:9a:6d:38:6f:f2:89:7f:65:e6:2d:8d:0c:f4:
                    82:13:be:c0:14:61:27:5d:b8:d1:37:e1:0e:02:cc:
                    62:08:19:c8:4a:87:92:c1:5a:e9:eb:f8:bd:32:b0:
                    8a:f3:c6:4d:1a:ad:cf:df:d4:6b:0a:4d:97:55:86:
                    53:2b:3f:ee:02:a1:57:a6:f8:0a:91:29:37:4b:b7:
                    12:63:0d:e7:bb:b2:a0:d2:ba:e4:52:a1:cb:ec:80:
                    ed:66:5f:b5:c2:bc:df:a4:d4:4a:43:0d:9a:c8:eb:
                    86:d4:85:e2:01:46:18:02:74:34:05:22:e4:72:c6:
                    fa:a0:67:e1:2e:d6:f4:f5:f3:c9:41:23:6d:ff:d7:
                    86:85:78:d9:d6:e8:9b:5a:2b:06:6d:a2:a9:8d:48:
                    e1:73:af:d5:ca:87:a3:42:60:dc:69:6f:39:7f:be:
                    72:c9:91:36:94:81:ce:c9:ca:6b:c6:88:77:83:b5:
                    63:de:05:6d:5b:f9:72:c1:1f:69:b3:02:8a:21:a7:
                    62:d8:a2:17:aa:86:e9:18:84:4d:25:12:a9:51:cc:
                    ad:b8:69:11:db:fb:d9:77:fe:27:07:db:52:f9:9a:
                    ca:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:FA:E5:11:03:0D:18:2E:A3:DF:62:61:47:46:26:DB:C6:1D:D0:25
            X509v3 Authority Key Identifier:
                keyid:37:4F:F2:87:57:65:58:32:E7:96:47:33:86:AA:89:E3:87:3C:96:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BWFkvkfDw6CgpBTYs6jCUGkZvXhxS13evTj1fbgDuYPw/0/374FF28757655832E796473386AA89E3873C9674.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/374FF28757655832E796473386AA89E3873C9674.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BWFkvkfDw6CgpBTYs6jCUGkZvXhxS13evTj1fbgDuYPw/0/323830343a363733633a3a2f33322d3430203d3e20323639363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:673c::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:ce:dc:73:6a:4b:92:09:27:76:14:9b:60:b7:ab:44:24:d1:
         6a:ba:f8:4e:7d:01:04:aa:d8:73:a4:56:11:60:2f:03:31:44:
         78:8d:90:4a:38:d8:f6:05:eb:81:3c:30:98:b4:78:f7:d0:98:
         a8:d8:ad:81:9a:42:72:09:d1:13:3d:85:bc:4b:9c:95:b2:05:
         fd:14:a8:9e:cf:b6:e5:86:e6:fd:2f:b5:59:38:72:cb:54:a4:
         ac:02:22:0d:d7:91:01:a9:69:3a:bf:db:c9:b9:72:43:9e:54:
         23:a4:76:14:46:24:8d:aa:9e:04:f5:09:31:7b:7b:ab:b5:11:
         8b:6f:91:b6:bd:01:93:18:f4:60:9e:be:b1:9d:d1:d9:35:a7:
         a5:8c:77:29:2a:9f:12:ee:14:ec:68:91:39:74:60:55:f3:c4:
         a8:20:b4:46:9d:bb:7f:cd:e7:9b:8b:43:1c:a1:35:a6:c5:91:
         bd:a9:b9:07:98:10:a2:d8:92:09:11:09:c6:9a:4f:39:2d:58:
         9b:99:61:21:37:d0:e6:d9:d5:18:20:48:4e:cf:76:47:5d:1d:
         67:08:55:da:a2:4f:9c:06:ec:8b:be:db:b9:88:9f:60:6e:7f:
         f7:81:c0:8e:c3:71:a1:33:bc:c0:6e:36:ef:a1:25:a4:b0:9a:
         f2:77:64:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:42:45 2025 by rpki-client