Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/0/323830343a343461303a3a2f33322d3438203d3e20323637363433.roa
File:                     323830343a343461303a3a2f33322d3438203d3e20323637363433.roa (raw, json)
Hash identifier:          8XAvjS0WXtNraQ9abZMf6rwUx27+zrQa7YUMqSVRt9U=
Subject key identifier:   02:49:40:1B:8D:9B:8F:FE:E8:AE:D9:02:C1:6E:84:E1:3B:99:21:27
Certificate issuer:       /CN=8A60A1D51D94FF013FFF7A8A96E75406CB8D4354
Certificate serial:       12074A1162BF9C64803323E2C7D81BD6E097967F
Authority key identifier: 8A:60:A1:D5:1D:94:FF:01:3F:FF:7A:8A:96:E7:54:06:CB:8D:43:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A60A1D51D94FF013FFF7A8A96E75406CB8D4354.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/0/323830343a343461303a3a2f33322d3438203d3e20323637363433.roa
Signing time:             Thu 10 Aug 2023 11:52:52 +0000
ROA not before:           Thu 10 Aug 2023 11:47:52 +0000
ROA not after:            Thu 08 Aug 2024 11:52:52 +0000
asID:                     267643
IP address blocks:        2804:44a0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:07:4a:11:62:bf:9c:64:80:33:23:e2:c7:d8:1b:d6:e0:97:96:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A60A1D51D94FF013FFF7A8A96E75406CB8D4354
        Validity
            Not Before: Aug 10 11:47:52 2023 GMT
            Not After : Aug  8 11:52:52 2024 GMT
        Subject: CN=0249401B8D9B8FFEE8AED902C16E84E13B992127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9d:c6:96:8d:49:76:0c:54:ff:f1:a3:9c:b9:
                    95:e1:5e:29:a0:7e:33:3b:2c:83:88:f9:96:1c:a6:
                    e9:88:7c:0c:7b:2a:2e:9b:d7:e1:aa:b8:84:b9:95:
                    34:16:ff:62:f3:fd:1d:ae:a4:8c:7b:67:2b:ce:66:
                    7a:60:64:72:3b:01:f5:76:66:dd:45:03:48:43:7b:
                    e0:7d:56:2c:0e:b9:b6:20:62:7c:98:14:04:83:a3:
                    72:b0:51:86:49:76:fd:e4:a9:6b:9b:07:a6:09:73:
                    29:fe:66:c3:74:2a:d9:7e:bc:da:9a:e6:ea:b0:21:
                    09:47:67:8c:de:bc:c0:4f:16:44:8e:2d:0f:5b:86:
                    39:f2:0a:e5:93:81:94:2b:12:35:67:68:bf:62:57:
                    ad:03:a8:74:3f:4e:92:b2:24:dd:5a:02:09:5f:3d:
                    e3:b8:bb:11:68:63:ca:5c:89:e6:e9:40:16:5e:36:
                    f9:5f:62:cf:2c:32:bd:1e:e6:99:0a:97:18:e9:a5:
                    96:4a:bc:94:d5:8a:fb:6d:01:aa:9a:3a:00:d6:e4:
                    c8:72:86:bf:e1:61:0b:58:5c:6e:6f:79:ec:db:21:
                    b1:89:ee:1f:a5:80:b2:5d:91:5f:39:4b:7a:ea:c6:
                    55:4b:e5:d9:c6:8e:8d:74:17:69:8b:80:74:bb:de:
                    1b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:49:40:1B:8D:9B:8F:FE:E8:AE:D9:02:C1:6E:84:E1:3B:99:21:27
            X509v3 Authority Key Identifier:
                keyid:8A:60:A1:D5:1D:94:FF:01:3F:FF:7A:8A:96:E7:54:06:CB:8D:43:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/0/8A60A1D51D94FF013FFF7A8A96E75406CB8D4354.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A60A1D51D94FF013FFF7A8A96E75406CB8D4354.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/0/323830343a343461303a3a2f33322d3438203d3e20323637363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:44a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:ad:73:96:58:0d:cb:84:37:5a:cf:cb:83:f3:06:ec:1f:c3:
         45:63:84:da:05:25:b2:ac:c3:dc:a8:ac:6d:2e:40:d5:7e:27:
         fa:9b:e5:e1:8d:f5:c1:0c:64:a6:85:55:a4:81:fa:ce:cf:de:
         e5:cc:81:e5:24:a7:8d:3d:74:86:eb:f1:0a:03:a6:48:0c:7c:
         47:c2:be:39:f4:fd:d9:6d:23:7d:35:20:9b:e7:d3:44:e8:d5:
         27:b3:0a:dc:61:f4:db:c1:e4:26:7b:05:f8:0f:32:9a:ef:d6:
         e0:dd:69:78:20:c6:a4:65:d0:5d:75:f5:5e:26:ec:78:d2:5c:
         bc:5b:cd:c9:fe:a2:a0:0d:4b:04:71:75:c3:91:e0:22:a6:0f:
         46:81:ed:00:5a:17:49:cd:c0:d6:02:39:40:eb:89:4c:80:9b:
         ac:69:40:b9:ea:b1:14:4a:83:88:fc:c7:12:4d:2d:f1:14:77:
         8d:e2:a8:36:d2:42:f7:3f:12:96:7c:35:b6:fe:48:a3:2f:79:
         d8:2d:38:da:6d:70:5f:3f:f8:20:d3:6d:d3:e3:65:d2:a7:4c:
         0b:17:f7:26:d8:8a:7c:c9:2c:3c:b7:70:96:37:4f:42:80:48:
         9e:57:c8:93:ba:ac:27:fd:a5:54:b3:7a:e7:c4:2d:85:72:02:
         90:00:d5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:33:02 2025 by rpki-client