Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/1/323830343a336333383a633030303a3a2f33342d3334203d3e20323636313937.roa
File:                     323830343a336333383a633030303a3a2f33342d3334203d3e20323636313937.roa (raw, json)
Hash identifier:          TBUi4AAe0ommIcjVVp38Eg/kGvou7qYGW2/l6HCq0bk=
Subject key identifier:   29:81:DC:D6:89:D7:9D:CD:D3:02:A4:32:8A:23:07:BB:31:53:08:51
Certificate issuer:       /CN=20462542E7D750389A93D0ECB9BA39FEB7970339
Certificate serial:       3D92ADF555854873EBD4E7774CFDDB9F82994E9B
Authority key identifier: 20:46:25:42:E7:D7:50:38:9A:93:D0:EC:B9:BA:39:FE:B7:97:03:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20462542E7D750389A93D0ECB9BA39FEB7970339.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/1/323830343a336333383a633030303a3a2f33342d3334203d3e20323636313937.roa
Signing time:             Fri 08 Sep 2023 18:42:56 +0000
ROA not before:           Fri 08 Sep 2023 18:37:56 +0000
ROA not after:            Fri 06 Sep 2024 18:42:56 +0000
asID:                     266197
IP address blocks:        2804:3c38:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:92:ad:f5:55:85:48:73:eb:d4:e7:77:4c:fd:db:9f:82:99:4e:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20462542E7D750389A93D0ECB9BA39FEB7970339
        Validity
            Not Before: Sep  8 18:37:56 2023 GMT
            Not After : Sep  6 18:42:56 2024 GMT
        Subject: CN=2981DCD689D79DCDD302A4328A2307BB31530851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d8:fd:d1:1d:98:bb:c6:91:a2:47:af:64:fa:
                    f4:33:9a:37:c9:f5:b1:4d:2b:51:17:b6:4a:1d:8d:
                    64:2d:9d:ad:64:cc:28:85:8d:5c:0d:42:2e:9c:32:
                    5e:7d:92:7f:50:d5:eb:d5:f6:ac:7b:69:37:72:20:
                    00:de:00:b6:6a:3c:be:28:c2:f2:72:1a:f1:7e:32:
                    a4:c1:21:1a:67:8b:bf:0a:42:6f:1b:80:5d:6e:d2:
                    6d:d5:cd:ed:5a:ea:8b:db:68:d6:32:45:c5:04:66:
                    2b:6b:37:88:5e:21:6a:68:70:58:d2:93:6b:ab:3b:
                    72:85:4b:a3:bc:6e:0a:5d:07:b7:23:1a:09:f4:53:
                    6e:e3:70:14:71:3d:66:80:05:81:a3:37:1a:23:a3:
                    3b:5d:7b:24:74:34:0d:6e:a0:52:c4:8f:0d:bc:e3:
                    44:6e:6b:00:11:4e:f8:63:72:0a:4a:22:03:41:db:
                    00:4d:3c:52:6d:84:9d:a9:07:48:07:56:8c:4e:75:
                    2d:c8:a2:bf:48:9c:0f:ae:c8:ad:1b:64:2f:3a:8a:
                    b9:9b:65:cb:1f:2a:42:77:c9:96:39:dc:a7:95:17:
                    35:4a:24:b6:b2:67:b5:e8:6d:1d:08:75:df:1d:0b:
                    2d:d2:a8:63:6e:55:56:1b:f4:4b:5b:9d:fa:9f:15:
                    94:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:81:DC:D6:89:D7:9D:CD:D3:02:A4:32:8A:23:07:BB:31:53:08:51
            X509v3 Authority Key Identifier:
                keyid:20:46:25:42:E7:D7:50:38:9A:93:D0:EC:B9:BA:39:FE:B7:97:03:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/1/20462542E7D750389A93D0ECB9BA39FEB7970339.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20462542E7D750389A93D0ECB9BA39FEB7970339.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/1/323830343a336333383a633030303a3a2f33342d3334203d3e20323636313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c38:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         ad:9d:07:53:8d:e6:57:02:8d:14:75:70:15:8a:0a:28:05:cd:
         19:97:f3:75:fa:e9:f0:a2:b9:19:24:10:87:1a:a3:9e:26:f6:
         4c:37:63:98:44:29:cd:2a:c2:cd:8a:da:e9:69:7f:08:5a:cd:
         bf:c1:bd:72:e7:de:17:6d:90:d0:83:56:33:78:da:db:51:5f:
         2c:b9:7f:81:07:9b:32:b5:16:14:47:8c:a9:b2:9f:1c:80:d2:
         ad:c9:fe:c2:7c:68:4e:be:3b:11:9d:a8:a8:49:44:4a:31:25:
         d3:0e:f0:bb:3d:95:14:00:58:2f:1d:2f:15:0f:a3:3c:b4:0e:
         e4:d9:30:f4:8e:f6:0e:84:3b:07:77:15:15:a4:35:32:63:8f:
         8f:18:89:59:75:ef:be:a7:c0:32:dd:4a:b0:7e:b8:13:f9:d0:
         8d:f3:e7:0c:21:cc:e7:35:9f:3a:c1:7c:6a:ab:e9:b9:3d:12:
         d2:31:96:be:1a:02:b0:67:a2:8f:94:a8:f6:e5:5d:8f:a6:e6:
         12:86:be:51:10:76:5d:aa:f3:48:7b:0b:c9:9f:93:70:9c:b6:
         2d:b4:f8:e9:a2:da:6a:d7:4d:91:5d:fd:ee:86:11:76:51:c3:
         21:b5:a6:be:db:19:dc:00:c7:d2:b3:6e:1e:60:c8:cf:eb:cd:
         7d:4f:72:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:27:27 2025 by rpki-client