Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/323830343a323934383a613030303a3a2f34302d3430203d3e20323634303031.roa
File:                     323830343a323934383a613030303a3a2f34302d3430203d3e20323634303031.roa (raw, json)
Hash identifier:          bekgiFZGnT8B+8jAkh/YQgrVyAFVRyMXT/SaAEyVyNU=
Subject key identifier:   00:3C:88:A7:F7:56:FA:8A:B7:EB:7A:1F:72:51:54:7A:0A:8B:4B:20
Certificate issuer:       /CN=5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1
Certificate serial:       1C627F2460FBCEFF75FD4117876032C9424EF93C
Authority key identifier: 5B:D9:C3:7F:56:17:60:31:7D:A7:70:DA:6B:6E:5E:3C:C7:2A:9F:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/323830343a323934383a613030303a3a2f34302d3430203d3e20323634303031.roa
Signing time:             Thu 18 May 2023 17:19:36 +0000
ROA not before:           Thu 18 May 2023 17:14:36 +0000
ROA not after:            Thu 16 May 2024 17:19:36 +0000
asID:                     264001
IP address blocks:        2804:2948:a000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:62:7f:24:60:fb:ce:ff:75:fd:41:17:87:60:32:c9:42:4e:f9:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1
        Validity
            Not Before: May 18 17:14:36 2023 GMT
            Not After : May 16 17:19:36 2024 GMT
        Subject: CN=003C88A7F756FA8AB7EB7A1F7251547A0A8B4B20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:81:1c:57:34:7e:13:08:07:c0:fe:72:72:b1:
                    8c:c3:cb:c7:74:3d:23:ae:6a:83:83:1d:ff:71:01:
                    d6:a3:52:92:fb:3f:3f:88:b6:27:89:0d:c5:f7:12:
                    37:f4:b4:26:9f:49:22:ed:cf:3c:f4:6d:f2:9f:cd:
                    f7:31:7c:f7:b7:9b:8b:26:7a:66:0f:cf:08:1b:26:
                    dc:30:18:0f:0b:48:b3:80:e3:14:1f:80:16:06:df:
                    a6:39:98:15:dd:58:0a:42:39:ff:88:e9:23:00:e2:
                    d5:4d:61:e6:c4:c0:13:41:e2:af:a6:6c:3b:62:8b:
                    6b:d4:15:cc:00:c3:60:f0:88:24:fb:5e:6b:8c:de:
                    cd:ee:e8:45:37:c9:c3:cd:87:a1:6f:15:87:30:11:
                    77:f6:99:64:f2:08:62:cc:4b:9e:44:fb:ce:41:07:
                    a9:61:92:92:62:2d:8a:5e:1d:79:33:f9:6d:aa:76:
                    1d:a0:46:aa:d5:31:89:c2:09:f6:70:3b:26:18:f2:
                    65:1a:51:d6:de:29:71:a4:a5:c8:55:4b:88:23:71:
                    45:58:df:0b:08:c3:c1:85:01:01:1c:e3:46:0b:6d:
                    ca:9e:bb:9f:a9:d8:10:d4:0a:59:f3:e7:a0:06:96:
                    f4:4d:49:d1:b5:44:a6:e7:40:04:4f:3f:b9:46:52:
                    bc:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:3C:88:A7:F7:56:FA:8A:B7:EB:7A:1F:72:51:54:7A:0A:8B:4B:20
            X509v3 Authority Key Identifier:
                keyid:5B:D9:C3:7F:56:17:60:31:7D:A7:70:DA:6B:6E:5E:3C:C7:2A:9F:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/323830343a323934383a613030303a3a2f34302d3430203d3e20323634303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2948:a000::/40

    Signature Algorithm: sha256WithRSAEncryption
         9f:a5:16:d8:9e:0f:d9:67:37:fd:a6:05:40:58:10:b7:a1:ba:
         21:5d:fa:01:bb:7e:75:8b:5a:79:b1:73:8f:72:48:53:43:9b:
         3d:b8:5b:d1:23:a5:58:4e:1d:87:f8:41:d5:3c:cf:09:6d:49:
         13:57:6e:12:44:da:33:7e:8a:2e:1f:5f:a9:28:e7:c0:28:ec:
         10:26:ea:fd:c3:1a:8c:95:41:9a:cd:2a:f1:1f:d0:19:b0:f6:
         89:07:24:0e:fe:00:ce:3a:88:26:23:8d:35:d2:3c:52:c2:ef:
         b0:30:f3:62:e4:22:9c:b3:ab:ef:fe:f5:eb:81:a6:47:8c:9c:
         93:87:f8:5a:4e:18:20:e9:60:68:3e:fd:85:8a:b5:50:93:98:
         09:e3:bc:e9:04:b7:5b:75:e5:dd:ab:0b:b5:80:7e:73:b2:91:
         2a:e1:ca:c3:a8:a8:48:56:31:75:a8:93:4c:6d:d8:5b:fa:48:
         80:41:d3:72:48:68:24:44:7b:79:01:c2:19:f5:ae:08:cf:3b:
         53:d7:97:20:b3:b2:07:6d:80:5f:da:3a:4d:45:3b:91:09:37:
         04:c3:92:89:8a:96:b3:55:63:7f:6a:20:fa:6d:ac:2b:3a:7a:
         a6:7d:29:a0:0f:7c:17:a9:8d:a1:94:82:20:a1:d5:a0:05:f9:
         b6:d9:2c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:47 2025 by rpki-client