Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DdDuZqZkBJPmn2kzyLiFFQDbBEUiBbbhGHqGdJ2UtbhC/0/323830343a336564303a3a2f33322d3438203d3e20323636363232.roa
File:                     323830343a336564303a3a2f33322d3438203d3e20323636363232.roa (raw, json)
Hash identifier:          XLcRt6CYBhIk2BI0vNLTPqNcnGXq31q2ds6ySAhs6ac=
Subject key identifier:   35:DD:70:05:62:9C:46:03:AA:6C:97:F2:73:4C:85:D5:3A:CD:34:3C
Certificate issuer:       /CN=4BA7962563F2AD2885E80A088A50C5E789664E55
Certificate serial:       7073637213316E61849EAE5196EB466E6D67DB90
Authority key identifier: 4B:A7:96:25:63:F2:AD:28:85:E8:0A:08:8A:50:C5:E7:89:66:4E:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BA7962563F2AD2885E80A088A50C5E789664E55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DdDuZqZkBJPmn2kzyLiFFQDbBEUiBbbhGHqGdJ2UtbhC/0/323830343a336564303a3a2f33322d3438203d3e20323636363232.roa
Signing time:             Tue 31 Oct 2023 00:58:13 +0000
ROA not before:           Tue 31 Oct 2023 00:53:13 +0000
ROA not after:            Tue 29 Oct 2024 00:58:13 +0000
asID:                     266622
IP address blocks:        2804:3ed0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:73:63:72:13:31:6e:61:84:9e:ae:51:96:eb:46:6e:6d:67:db:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BA7962563F2AD2885E80A088A50C5E789664E55
        Validity
            Not Before: Oct 31 00:53:13 2023 GMT
            Not After : Oct 29 00:58:13 2024 GMT
        Subject: CN=35DD7005629C4603AA6C97F2734C85D53ACD343C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2b:aa:1e:09:98:d8:9b:77:50:27:f7:56:95:
                    68:b0:dd:e2:ec:f7:b9:79:3f:71:ec:a9:60:cb:e3:
                    ae:d3:55:fc:ef:ea:ff:3c:8e:27:18:7e:48:cc:b3:
                    7e:62:5c:c5:93:9d:8b:31:53:24:2f:69:3f:96:33:
                    b8:08:23:bf:55:69:d0:a8:b0:ce:6b:20:17:45:93:
                    a5:7a:69:1c:ec:5a:7b:e0:7a:8d:ee:4f:45:1e:68:
                    54:2e:07:10:fa:8a:c1:dc:d2:cc:72:dc:c1:87:9d:
                    33:fa:26:34:76:9c:44:a9:27:dc:7e:47:5a:13:c4:
                    f1:fb:4c:03:44:51:64:00:10:bb:8b:57:25:cf:2c:
                    12:3a:6f:23:a7:12:56:68:9f:3c:ca:ce:75:7d:13:
                    3d:e9:66:a3:07:bb:b6:45:d9:19:66:93:b2:ba:e3:
                    0f:ad:d1:46:5d:be:a0:b2:52:f7:ba:b9:94:88:9d:
                    cf:1d:cb:47:3d:d7:de:a6:f5:cf:31:3f:0f:0c:a4:
                    01:c4:06:c6:f0:ca:21:73:56:75:12:c3:3e:05:3a:
                    2f:12:e7:3b:bd:98:f5:64:1d:80:29:a1:44:c2:40:
                    cf:f5:4a:91:7c:90:7d:70:a7:1d:06:07:5d:b6:62:
                    cf:63:30:09:20:c2:93:4e:18:c4:6f:52:43:94:99:
                    c3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:DD:70:05:62:9C:46:03:AA:6C:97:F2:73:4C:85:D5:3A:CD:34:3C
            X509v3 Authority Key Identifier:
                keyid:4B:A7:96:25:63:F2:AD:28:85:E8:0A:08:8A:50:C5:E7:89:66:4E:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DdDuZqZkBJPmn2kzyLiFFQDbBEUiBbbhGHqGdJ2UtbhC/0/4BA7962563F2AD2885E80A088A50C5E789664E55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BA7962563F2AD2885E80A088A50C5E789664E55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdDuZqZkBJPmn2kzyLiFFQDbBEUiBbbhGHqGdJ2UtbhC/0/323830343a336564303a3a2f33322d3438203d3e20323636363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ed0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:c2:84:c7:7b:a7:99:2d:af:6f:8b:ab:99:42:5a:00:16:04:
         66:92:7e:02:28:63:a8:03:88:39:0e:24:09:bf:0d:fb:99:94:
         f8:1e:df:13:b1:22:d5:2b:d7:cf:08:91:5a:0c:e4:9e:ef:50:
         48:e8:d9:4c:6a:c2:25:02:d5:7d:52:59:79:31:3f:58:42:b6:
         47:48:01:7f:f5:40:b9:18:cb:b7:c0:a6:c0:ee:2d:64:87:f2:
         40:5a:aa:4a:e8:cd:c6:f4:6a:9b:fb:e1:40:83:8a:c2:77:83:
         1f:f0:78:ed:01:3e:a0:07:f0:9f:e7:12:b3:60:4f:e6:f6:30:
         90:05:1b:c7:88:e3:d3:d3:c2:d3:92:d0:b2:60:2a:09:52:e0:
         33:53:59:ff:b1:a0:8e:7d:b9:a4:bc:de:76:58:ce:ed:07:86:
         d3:0c:86:d1:b6:14:8e:89:19:a4:45:f3:d8:3d:68:48:fc:fe:
         4e:19:33:36:f2:7a:ee:de:80:ba:7c:12:5d:57:e2:88:7f:14:
         f7:9f:77:fc:6e:4f:86:c0:0a:d6:70:28:bc:a7:0d:f9:98:39:
         23:e9:99:b1:3c:16:c5:c8:97:58:10:61:77:d0:56:5a:05:bc:
         d1:58:60:37:cb:c7:bf:74:74:bc:b0:e8:ce:7f:1a:89:08:31:
         a2:cb:b8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:24:21 2025 by rpki-client