Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DBrF5jJekmG7HW1qWyPiuXbogi4QmbiwafVnsvFksnNf/0/323830343a333261633a3a2f33322d3438203d3e20323635303932.roa
File:                     323830343a333261633a3a2f33322d3438203d3e20323635303932.roa (raw, json)
Hash identifier:          E5HyDFQ9AOJ5/aG8vd+xMw75IPLPHxcAmXvz3eSPvN8=
Subject key identifier:   72:75:40:DC:A1:A1:65:8C:04:BD:6E:31:22:35:56:60:D1:49:0D:B0
Certificate issuer:       /CN=8D988D923E91FEEFA99C59AE0125347EFC8CB2AC
Certificate serial:       1479FC73B3AB7064971DE66F30D9BB54CF698337
Authority key identifier: 8D:98:8D:92:3E:91:FE:EF:A9:9C:59:AE:01:25:34:7E:FC:8C:B2:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8D988D923E91FEEFA99C59AE0125347EFC8CB2AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DBrF5jJekmG7HW1qWyPiuXbogi4QmbiwafVnsvFksnNf/0/323830343a333261633a3a2f33322d3438203d3e20323635303932.roa
Signing time:             Wed 15 Jun 2022 12:03:51 +0000
ROA not before:           Wed 15 Jun 2022 11:58:51 +0000
ROA not after:            Wed 14 Jun 2023 12:03:51 +0000
asID:                     265092
IP address blocks:        2804:32ac::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:79:fc:73:b3:ab:70:64:97:1d:e6:6f:30:d9:bb:54:cf:69:83:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D988D923E91FEEFA99C59AE0125347EFC8CB2AC
        Validity
            Not Before: Jun 15 11:58:51 2022 GMT
            Not After : Jun 14 12:03:51 2023 GMT
        Subject: CN=727540DCA1A1658C04BD6E3122355660D1490DB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:40:1e:6e:79:62:c3:0f:eb:34:65:50:23:1e:
                    5e:fd:b4:0e:49:65:00:93:a9:7d:57:57:47:fb:ea:
                    07:90:eb:56:fd:42:3a:ac:5b:e1:b6:f9:72:ef:88:
                    95:79:7a:0d:5a:e2:7b:2c:ea:84:1d:ef:fe:91:5a:
                    16:a3:93:2b:9f:88:c6:d4:97:23:75:d2:ad:e6:d2:
                    1d:f4:de:7e:89:9f:2b:0f:6b:9d:33:b5:2c:e5:d4:
                    db:80:9c:6a:6a:ab:d6:28:34:59:98:00:50:76:87:
                    f9:4e:2a:be:b4:ef:11:d4:bc:d2:db:83:c8:be:91:
                    3a:d4:23:1e:3c:52:fd:a2:8c:55:ce:bb:b6:36:11:
                    ba:d2:96:97:fb:91:d0:3c:f0:d3:f9:99:d8:4f:52:
                    75:3c:90:67:e7:e0:ed:01:e0:79:c3:0e:eb:a5:ac:
                    4c:7a:69:13:4b:66:05:77:0e:15:3a:2d:70:b6:b6:
                    2e:3e:60:cf:0c:e0:5b:24:5c:2f:06:8d:b4:58:19:
                    0e:9e:e5:da:0b:0d:10:82:38:b8:4f:26:d7:58:8e:
                    10:29:12:ab:f0:78:d3:9e:bb:e1:81:14:69:81:ff:
                    e2:bd:47:58:41:37:63:de:1e:bf:07:db:92:62:44:
                    ec:64:b3:0f:16:b3:56:b0:b6:1a:29:c7:8d:0d:8b:
                    97:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:75:40:DC:A1:A1:65:8C:04:BD:6E:31:22:35:56:60:D1:49:0D:B0
            X509v3 Authority Key Identifier:
                keyid:8D:98:8D:92:3E:91:FE:EF:A9:9C:59:AE:01:25:34:7E:FC:8C:B2:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DBrF5jJekmG7HW1qWyPiuXbogi4QmbiwafVnsvFksnNf/0/8D988D923E91FEEFA99C59AE0125347EFC8CB2AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8D988D923E91FEEFA99C59AE0125347EFC8CB2AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DBrF5jJekmG7HW1qWyPiuXbogi4QmbiwafVnsvFksnNf/0/323830343a333261633a3a2f33322d3438203d3e20323635303932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:32ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:1a:ca:43:28:7f:7a:8b:e4:e3:fd:07:1b:b1:6a:dd:37:d1:
         27:7f:36:d4:d6:e3:50:40:97:2a:a0:f8:18:44:65:cf:82:33:
         25:51:24:cc:9b:7a:3f:ef:06:6b:73:bb:d0:82:61:8b:79:8a:
         5a:d5:90:d7:07:25:03:63:c4:33:4b:28:5f:3f:22:e2:75:c7:
         f0:63:25:27:20:c0:bd:16:83:6b:ab:33:36:cc:14:61:cb:fb:
         e7:6b:8a:9b:30:a8:01:26:8e:2e:e1:64:88:1a:4e:d0:1b:80:
         f9:56:45:07:f6:ed:72:f6:ae:c0:80:26:c3:8a:da:6b:67:2b:
         e6:d2:c7:67:28:3b:9a:10:82:3a:a3:9d:36:69:19:8b:3a:30:
         5e:b5:55:70:ab:07:72:80:0c:82:53:88:c4:04:8b:5d:05:6b:
         53:4c:10:06:7a:be:e8:b4:3d:b9:57:c9:43:95:1f:46:da:1f:
         55:06:33:8d:d6:ee:0a:97:57:e3:99:bc:e1:f7:1e:7a:b9:e9:
         22:f0:66:9a:f3:7d:88:de:a2:a4:04:34:54:d7:ef:1f:4d:96:
         fb:40:3d:15:41:7f:bc:f2:8d:76:b1:53:2a:5b:df:12:51:36:
         25:59:da:a5:e1:18:62:25:80:16:5c:78:21:69:12:56:5d:d8:
         67:58:44:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:33:16 2025 by rpki-client