Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/323830343a346337633a3a2f33322d3332203d3e20323637333733.roa
File:                     323830343a346337633a3a2f33322d3332203d3e20323637333733.roa (raw, json)
Hash identifier:          lB0ikpHBYvXnbtr7QKzUG6qEOYMsfeMSVga6c51KzbA=
Subject key identifier:   11:E1:11:ED:AE:E0:05:05:CD:58:E7:7C:99:00:57:C3:83:DD:79:20
Certificate issuer:       /CN=98C8564D2D23C0B3238882D116CD64384F680CDC
Certificate serial:       70DB8B500204C1CEC5274A9CC5DF39612782ACDD
Authority key identifier: 98:C8:56:4D:2D:23:C0:B3:23:88:82:D1:16:CD:64:38:4F:68:0C:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98C8564D2D23C0B3238882D116CD64384F680CDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/323830343a346337633a3a2f33322d3332203d3e20323637333733.roa
Signing time:             Tue 25 Apr 2023 21:32:18 +0000
ROA not before:           Tue 25 Apr 2023 21:27:18 +0000
ROA not after:            Tue 23 Apr 2024 21:32:18 +0000
asID:                     267373
IP address blocks:        2804:4c7c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:db:8b:50:02:04:c1:ce:c5:27:4a:9c:c5:df:39:61:27:82:ac:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98C8564D2D23C0B3238882D116CD64384F680CDC
        Validity
            Not Before: Apr 25 21:27:18 2023 GMT
            Not After : Apr 23 21:32:18 2024 GMT
        Subject: CN=11E111EDAEE00505CD58E77C990057C383DD7920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b9:fa:e3:09:ce:28:f0:35:12:d0:00:41:e3:
                    e0:7e:bd:ac:34:13:a1:47:59:f4:ea:6e:c6:37:a2:
                    55:c1:d5:7c:3f:77:a1:a6:98:91:2f:98:51:ec:13:
                    79:e0:fc:12:f5:1a:1c:0a:d7:5f:74:0d:64:1c:3c:
                    fd:e3:2e:b5:f6:98:4c:c5:de:a5:a5:82:b7:ad:3b:
                    e2:96:32:95:7f:03:df:9a:a3:4e:0f:f8:72:a3:29:
                    1c:f7:ef:08:ea:c1:e0:02:fb:2d:5a:d5:3c:02:5e:
                    c2:d5:6f:e0:c2:fc:e5:a7:85:d9:27:d3:f0:4b:16:
                    07:bd:99:12:4e:02:9b:f2:65:74:61:d5:e2:1e:a3:
                    7a:64:78:d5:4b:d0:64:87:f5:a1:a6:b7:8f:c7:9a:
                    36:46:39:0f:1b:44:db:49:be:b6:30:21:9f:21:e9:
                    9d:b9:9d:c5:74:c5:27:b6:92:f7:ba:50:9a:34:92:
                    f5:17:71:8d:2c:c5:b9:a5:5f:a5:34:2b:04:08:dd:
                    ca:31:e8:1e:c0:b7:ae:d1:9b:1d:3a:a0:8e:0d:9a:
                    e5:a1:54:9b:94:76:bb:05:a4:ef:59:a2:37:98:62:
                    a2:bd:b4:79:0f:fd:f1:31:f6:14:45:2f:14:29:0a:
                    34:3c:08:7f:84:9d:a4:3f:39:74:3d:0e:c9:84:87:
                    a6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E1:11:ED:AE:E0:05:05:CD:58:E7:7C:99:00:57:C3:83:DD:79:20
            X509v3 Authority Key Identifier:
                keyid:98:C8:56:4D:2D:23:C0:B3:23:88:82:D1:16:CD:64:38:4F:68:0C:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/98C8564D2D23C0B3238882D116CD64384F680CDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98C8564D2D23C0B3238882D116CD64384F680CDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/323830343a346337633a3a2f33322d3332203d3e20323637333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:47:5a:65:04:6d:8c:cf:98:fc:66:21:02:8f:8a:16:12:17:
         e8:f3:3e:f2:54:25:1f:fd:94:47:6c:49:c0:b7:bb:bf:71:5b:
         97:29:57:cb:45:b4:17:26:10:ee:ca:83:74:8a:24:0a:e8:b1:
         93:1c:80:10:03:46:c0:6b:b1:f7:e6:7e:22:69:cd:f3:b3:48:
         ce:b4:6f:58:93:35:2c:c3:c8:c5:d5:94:93:72:0a:c0:ec:fb:
         e6:55:b4:a0:8c:fd:6a:a7:41:02:23:21:08:02:92:81:d5:a1:
         73:bc:08:de:14:38:b2:86:87:89:6f:70:36:be:bb:a9:a9:4b:
         2c:75:0d:f3:19:5f:98:81:41:48:0e:af:cb:99:e8:2d:37:7a:
         01:18:bb:01:c5:0d:7f:a4:50:0d:4b:59:5d:b2:54:0c:dc:fb:
         cc:3a:96:a3:b4:b6:9e:c3:5c:f1:95:5f:0b:8e:84:07:c7:7d:
         04:51:76:0a:6e:28:f2:14:1c:dc:d0:58:3d:47:00:e6:be:82:
         75:90:d2:f4:e9:e3:63:c8:0b:9d:af:f0:93:49:6d:3f:41:51:
         19:d9:4c:48:52:4a:39:29:81:7e:5d:be:a8:00:2b:b6:89:5a:
         05:f3:be:91:0e:1e:c2:03:68:2c:d9:35:3d:53:70:02:4c:3c:
         6b:7c:e9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 21:15:18 2025 by rpki-client