Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/323830343a376433633a323030303a3a2f33362d3336203d3e20323731353438.roa
File:                     323830343a376433633a323030303a3a2f33362d3336203d3e20323731353438.roa (raw, json)
Hash identifier:          Lz9edzcsMae451ce4XBHMUAkXfXkU4SOukYhe4I5Tz4=
Subject key identifier:   6E:49:75:0F:08:6F:35:1E:DE:07:AF:EC:A7:DB:66:75:76:49:B9:86
Certificate issuer:       /CN=838E8C7DF33C0F1070BE1BC0C0E962934C64FAF8
Certificate serial:       286FCD378A5AB21033DC55503298F1A3FB3FCA91
Authority key identifier: 83:8E:8C:7D:F3:3C:0F:10:70:BE:1B:C0:C0:E9:62:93:4C:64:FA:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/838E8C7DF33C0F1070BE1BC0C0E962934C64FAF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/323830343a376433633a323030303a3a2f33362d3336203d3e20323731353438.roa
Signing time:             Sat 21 Jan 2023 12:39:27 +0000
ROA not before:           Sat 21 Jan 2023 12:34:27 +0000
ROA not after:            Sat 20 Jan 2024 12:39:27 +0000
asID:                     271548
IP address blocks:        2804:7d3c:2000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:6f:cd:37:8a:5a:b2:10:33:dc:55:50:32:98:f1:a3:fb:3f:ca:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=838E8C7DF33C0F1070BE1BC0C0E962934C64FAF8
        Validity
            Not Before: Jan 21 12:34:27 2023 GMT
            Not After : Jan 20 12:39:27 2024 GMT
        Subject: CN=6E49750F086F351EDE07AFECA7DB66757649B986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:23:a8:81:e7:c7:56:4c:c8:36:d5:3b:4e:84:
                    0d:81:10:00:67:9b:b6:a3:9e:ac:1c:9e:a5:0b:5d:
                    42:61:41:36:f6:90:bc:cd:cc:37:7a:8c:0c:ec:a6:
                    dd:1e:8d:ee:40:b1:99:21:6a:92:f6:c7:f9:d6:e7:
                    ef:8d:0f:db:9f:d8:5c:44:91:33:2d:a1:34:a3:13:
                    1c:bf:b4:25:df:69:9c:15:34:3a:da:d0:e0:82:f8:
                    d5:53:ef:09:da:79:2c:2e:ee:6b:e0:e7:7a:12:ee:
                    79:18:c8:f6:df:82:d1:84:f2:94:5b:c6:61:4e:0f:
                    e1:64:93:f5:82:07:d2:7b:54:03:0e:d0:f8:bb:5d:
                    b6:7c:a0:bd:8a:77:fb:26:06:42:77:ad:70:dc:a7:
                    65:4d:f5:5f:52:68:f7:fd:7e:09:69:f6:30:74:90:
                    5e:52:df:ff:c9:36:97:81:b4:b9:13:29:07:7c:9b:
                    bb:17:30:d2:4f:67:e9:c0:73:71:73:ed:bb:a3:09:
                    66:2f:71:90:c2:38:c6:63:57:61:fe:8f:9c:bd:4b:
                    66:a4:4c:04:2e:d5:f8:be:b0:ed:be:c4:8e:2e:6c:
                    90:57:55:04:cd:d6:ed:97:e0:59:63:7d:41:81:cd:
                    7d:f7:84:5e:8a:f9:ae:1a:1a:12:c8:ca:6a:d2:11:
                    1f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:49:75:0F:08:6F:35:1E:DE:07:AF:EC:A7:DB:66:75:76:49:B9:86
            X509v3 Authority Key Identifier:
                keyid:83:8E:8C:7D:F3:3C:0F:10:70:BE:1B:C0:C0:E9:62:93:4C:64:FA:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/838E8C7DF33C0F1070BE1BC0C0E962934C64FAF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/838E8C7DF33C0F1070BE1BC0C0E962934C64FAF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/323830343a376433633a323030303a3a2f33362d3336203d3e20323731353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d3c:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b8:24:a8:3d:18:87:89:05:94:0a:52:b1:38:1e:2a:1a:94:f9:
         0e:39:42:6c:e1:8e:19:4e:6b:d4:0a:65:4f:c6:14:69:ea:04:
         6e:7d:6e:b3:88:66:a8:4a:dc:00:22:86:da:9d:c5:72:a7:7f:
         38:5f:3d:8b:65:02:d6:d9:ab:2c:7b:7c:91:2f:1a:27:b3:57:
         fd:f0:b3:62:75:bd:8e:a4:19:e1:b9:e6:86:54:ae:72:f7:86:
         e3:f6:cc:7d:d3:61:f2:65:ed:c0:d7:bc:93:de:03:19:01:75:
         cc:69:66:6e:ba:73:23:77:c6:cd:39:e0:35:74:33:cd:3d:7b:
         3f:d8:ea:8f:cb:94:9a:ae:17:73:34:ee:2c:64:1a:d6:95:40:
         e9:5e:72:40:b5:59:60:96:72:d8:06:77:78:91:3e:e8:94:d4:
         29:7e:78:6b:08:ba:9a:c5:5d:36:1b:05:df:59:86:c1:f7:d0:
         24:2f:3f:cf:08:86:bc:b0:7b:b1:9e:0f:60:01:76:8a:92:a4:
         c0:ce:93:38:e0:ff:9f:3a:80:a0:f8:08:1e:47:74:8f:6c:57:
         d5:e2:90:2b:72:15:45:40:b3:be:c5:d6:eb:c7:dd:04:b8:af:
         d7:d5:9d:ef:7a:25:a5:6f:28:5e:5a:c5:36:88:c7:07:89:8b:
         77:ac:43:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:54 2025 by rpki-client