Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/323830343a363838383a3a2f33322d3332203d3e20323639363939.roa
File:                     323830343a363838383a3a2f33322d3332203d3e20323639363939.roa (raw, json)
Hash identifier:          Rtv/wGOhkdmzqO+uXtN7hEwLWzM+/95J9KW/Z5IqtEU=
Subject key identifier:   5B:4F:07:03:73:12:FF:2F:16:1C:92:69:1E:A2:E2:9E:B9:07:12:7A
Certificate issuer:       /CN=7587F597C9C1E2232867D6F1F2C2B5703F7150D1
Certificate serial:       2DB25B09AC427116E83910B1A02AF300E74F63EB
Authority key identifier: 75:87:F5:97:C9:C1:E2:23:28:67:D6:F1:F2:C2:B5:70:3F:71:50:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7587F597C9C1E2232867D6F1F2C2B5703F7150D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/323830343a363838383a3a2f33322d3332203d3e20323639363939.roa
Signing time:             Thu 09 Nov 2023 23:10:09 +0000
ROA not before:           Thu 09 Nov 2023 23:05:09 +0000
ROA not after:            Thu 07 Nov 2024 23:10:09 +0000
asID:                     269699
IP address blocks:        2804:6888::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:b2:5b:09:ac:42:71:16:e8:39:10:b1:a0:2a:f3:00:e7:4f:63:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7587F597C9C1E2232867D6F1F2C2B5703F7150D1
        Validity
            Not Before: Nov  9 23:05:09 2023 GMT
            Not After : Nov  7 23:10:09 2024 GMT
        Subject: CN=5B4F07037312FF2F161C92691EA2E29EB907127A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a3:88:9d:81:46:30:3b:84:28:54:29:8e:08:
                    0d:fe:f3:8c:c5:c8:a4:f3:02:c6:03:22:61:30:62:
                    10:1e:7b:c7:f4:6a:dd:06:98:b0:fd:fd:b5:89:b6:
                    eb:dc:ae:e3:3d:13:d9:fa:e5:3b:5f:aa:c2:fc:0a:
                    c2:e8:a2:9a:a5:53:4d:4a:3b:c9:d0:e2:52:7d:99:
                    c0:8f:1a:43:d5:45:77:20:c4:93:b2:2c:86:f9:12:
                    75:ff:82:9b:0a:98:a4:f1:d2:da:9c:8e:11:d1:89:
                    62:36:a1:3f:34:ff:f3:3c:3e:1b:8b:94:52:b4:7d:
                    fa:31:62:6a:72:20:e7:ef:17:b2:74:4a:88:3b:6e:
                    bd:26:56:8c:63:ef:a5:73:05:73:c5:60:3d:a9:af:
                    2f:75:f1:57:4d:a1:a3:9e:4d:9b:d3:ff:c2:fa:1f:
                    b8:df:8c:0b:97:23:50:53:b5:07:1d:0e:87:a2:2d:
                    13:ec:52:00:46:79:c3:e4:00:f6:80:33:64:41:eb:
                    80:ee:6b:70:8f:32:d1:88:6c:ff:08:b8:fb:bf:78:
                    c2:ba:b4:32:75:99:54:f6:57:b5:2f:7b:d5:a3:df:
                    e3:22:12:8c:eb:57:ef:03:fa:bd:fd:21:98:23:ec:
                    55:b9:f3:89:63:c8:2b:54:63:ac:54:9f:67:58:4d:
                    07:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:4F:07:03:73:12:FF:2F:16:1C:92:69:1E:A2:E2:9E:B9:07:12:7A
            X509v3 Authority Key Identifier:
                keyid:75:87:F5:97:C9:C1:E2:23:28:67:D6:F1:F2:C2:B5:70:3F:71:50:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/7587F597C9C1E2232867D6F1F2C2B5703F7150D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7587F597C9C1E2232867D6F1F2C2B5703F7150D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/323830343a363838383a3a2f33322d3332203d3e20323639363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6888::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:98:40:00:18:59:ef:0a:10:26:b5:f6:03:35:08:1b:a0:b0:
         93:e5:44:53:21:dc:63:f2:4b:b2:4e:68:f3:6f:c1:71:c9:99:
         48:fb:19:a6:ee:ae:7c:ad:2f:47:20:12:54:49:1a:74:aa:f7:
         16:56:a1:35:48:39:a6:48:1e:fc:91:fc:14:fb:a3:5d:58:26:
         4b:ba:55:eb:62:34:8a:bc:76:61:56:6f:30:7d:79:6f:99:03:
         c6:6a:17:c1:aa:c8:a5:7a:71:38:e8:15:8b:2c:07:28:b5:36:
         1f:eb:6f:aa:7c:6f:c4:1a:58:d0:be:82:a1:a4:17:4b:f4:b8:
         ac:28:d7:3d:f4:aa:df:87:6d:87:a9:9a:e2:95:6c:e5:23:08:
         8b:22:70:d1:9a:ca:6c:0a:75:95:c7:b1:f2:37:34:ec:db:17:
         b3:d7:10:7b:5d:eb:b3:67:3b:e0:d9:45:00:bb:fd:98:1c:37:
         50:d5:35:6a:19:15:5b:89:c7:46:c2:9b:20:97:c3:0c:c1:35:
         6b:eb:18:ec:05:9c:a6:48:d5:0e:c0:91:73:53:4a:79:48:cc:
         34:4e:a0:0b:bb:fe:ab:e9:76:77:dd:ba:6b:03:4c:98:9b:a2:
         51:3a:9a:21:96:46:ae:59:f2:b8:7a:ac:07:cd:67:4c:de:55:
         53:da:11:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:42:28 2025 by rpki-client