Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/0/323830313a38303a336537313a3a2f34382d3438203d3e20323731353431.roa
File:                     323830313a38303a336537313a3a2f34382d3438203d3e20323731353431.roa (raw, json)
Hash identifier:          i4X0WjU+Yr+Juqcg2vH9V7JLqoBMqioufJdJmV9/yWc=
Subject key identifier:   E5:6F:E5:F3:20:3A:DE:E0:06:5A:7B:17:66:ED:9E:3D:BB:FC:BF:DD
Certificate issuer:       /CN=85661D4BB5D0C9DD35FA91F11679E902EB66AF4D
Certificate serial:       7DF7CCD5F895419EA05DE27976FEDC3FEB634575
Authority key identifier: 85:66:1D:4B:B5:D0:C9:DD:35:FA:91:F1:16:79:E9:02:EB:66:AF:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85661D4BB5D0C9DD35FA91F11679E902EB66AF4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/0/323830313a38303a336537313a3a2f34382d3438203d3e20323731353431.roa
Signing time:             Tue 24 Oct 2023 19:20:31 +0000
ROA not before:           Tue 24 Oct 2023 19:15:31 +0000
ROA not after:            Tue 22 Oct 2024 19:20:31 +0000
asID:                     271541
IP address blocks:        2801:80:3e71::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:f7:cc:d5:f8:95:41:9e:a0:5d:e2:79:76:fe:dc:3f:eb:63:45:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85661D4BB5D0C9DD35FA91F11679E902EB66AF4D
        Validity
            Not Before: Oct 24 19:15:31 2023 GMT
            Not After : Oct 22 19:20:31 2024 GMT
        Subject: CN=E56FE5F3203ADEE0065A7B1766ED9E3DBBFCBFDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:35:65:86:29:56:05:af:f2:0d:dc:c3:da:0a:
                    77:39:b7:c5:8a:70:ab:1f:33:a2:e8:02:18:66:91:
                    a5:02:8b:cc:d8:d1:00:56:16:ca:21:f5:78:d6:0f:
                    3b:ae:ca:2c:4f:23:03:9c:3a:00:c3:b1:de:70:d3:
                    4e:fe:80:be:0a:14:45:eb:d1:31:cb:db:d3:fa:f5:
                    a3:23:bd:8e:6e:24:f1:1a:00:2c:ac:38:c4:77:57:
                    8d:26:b7:08:26:e0:73:36:4e:81:0d:d9:50:11:7e:
                    8a:ba:f4:24:e9:ea:7b:c8:9f:57:5a:6c:58:42:30:
                    85:a5:b2:2e:92:bc:61:83:30:b4:be:56:89:6a:df:
                    85:a0:e0:79:f4:19:71:52:7b:92:0f:99:80:55:0c:
                    cf:52:4f:ef:bd:39:53:98:b5:38:15:5e:76:2c:18:
                    42:a3:0d:2d:d0:1f:53:f7:65:2e:8a:a3:91:38:5c:
                    c5:52:a6:5b:0e:f8:e1:2e:ea:a5:c0:cd:bc:ae:a5:
                    20:da:1f:91:0b:d4:01:5e:80:37:b9:a0:4a:5d:a6:
                    41:c8:a7:18:1a:f1:be:c2:76:38:9d:a1:9b:c8:97:
                    f1:9c:60:98:98:05:12:08:00:27:bd:7c:23:93:e9:
                    ae:bf:f5:29:93:a9:3d:9d:00:54:32:48:fb:04:13:
                    e1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:6F:E5:F3:20:3A:DE:E0:06:5A:7B:17:66:ED:9E:3D:BB:FC:BF:DD
            X509v3 Authority Key Identifier:
                keyid:85:66:1D:4B:B5:D0:C9:DD:35:FA:91:F1:16:79:E9:02:EB:66:AF:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/0/85661D4BB5D0C9DD35FA91F11679E902EB66AF4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85661D4BB5D0C9DD35FA91F11679E902EB66AF4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/0/323830313a38303a336537313a3a2f34382d3438203d3e20323731353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:3e71::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:b8:34:0b:1c:5e:68:d0:f3:21:9f:db:44:a5:95:c6:a1:86:
         c7:ee:fb:61:8d:46:6c:87:9c:be:95:69:e5:32:dd:d0:9e:94:
         01:9d:18:46:8f:2c:88:af:03:7d:55:f4:6d:e8:fe:e5:c2:88:
         d2:3f:1a:82:41:34:ab:81:38:61:f1:b8:47:73:92:f4:f5:c8:
         b3:ca:c3:4a:ed:33:2d:f1:86:61:a6:04:c0:01:9c:09:60:c6:
         e4:c7:dc:da:3a:db:3a:85:bb:a8:09:cf:fc:c9:af:6a:43:bd:
         53:db:71:b3:87:c6:a1:50:24:48:cd:a6:9a:06:92:3a:c0:65:
         be:d2:01:2b:7d:d1:c6:e4:4c:4b:ce:18:35:f5:be:68:37:17:
         7d:f1:76:fa:34:3f:f3:83:0b:7f:cc:92:c1:fa:1b:1c:7f:f0:
         91:e9:15:16:9f:11:f1:d9:a1:7e:8d:86:d8:35:0e:cd:f7:20:
         d5:a0:b8:93:8f:cf:66:71:fb:7c:bd:2d:47:75:1c:44:35:7f:
         e2:15:d5:1d:75:6b:01:54:7d:41:37:f2:1e:40:4b:7d:b1:98:
         a4:b5:b7:03:fc:5e:48:9c:1a:95:f6:ca:c9:d5:a6:94:fe:b3:
         6b:90:e3:8b:af:7b:f7:18:2d:f0:c1:bd:cc:65:eb:61:07:63:
         ce:6a:a3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 08:10:57 2025 by rpki-client