Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E71vLuB3byW8Gn2Cb4pJiRu6wMQVPEpf35mEC953HjuL/0/323830343a346265383a383030303a3a2f33332d3333203d3e20323637333336.roa
File:                     323830343a346265383a383030303a3a2f33332d3333203d3e20323637333336.roa (raw, json)
Hash identifier:          U/xL5QhdIy2cvXwPOcWfgMYipPVUbBAIeF8ncswWQCs=
Subject key identifier:   1C:0E:A7:85:76:AD:30:9E:C1:48:F3:39:D6:BF:36:41:62:D2:DC:F7
Certificate issuer:       /CN=108C048048A7574A82BE3D8E849203BD34D76390
Certificate serial:       2DE3C99E1B43DB961B345368F23BF67F6AA33EC4
Authority key identifier: 10:8C:04:80:48:A7:57:4A:82:BE:3D:8E:84:92:03:BD:34:D7:63:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/108C048048A7574A82BE3D8E849203BD34D76390.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E71vLuB3byW8Gn2Cb4pJiRu6wMQVPEpf35mEC953HjuL/0/323830343a346265383a383030303a3a2f33332d3333203d3e20323637333336.roa
Signing time:             Fri 24 Feb 2023 13:31:13 +0000
ROA not before:           Fri 24 Feb 2023 13:26:13 +0000
ROA not after:            Fri 23 Feb 2024 13:31:13 +0000
asID:                     267336
IP address blocks:        2804:4be8:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:e3:c9:9e:1b:43:db:96:1b:34:53:68:f2:3b:f6:7f:6a:a3:3e:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=108C048048A7574A82BE3D8E849203BD34D76390
        Validity
            Not Before: Feb 24 13:26:13 2023 GMT
            Not After : Feb 23 13:31:13 2024 GMT
        Subject: CN=1C0EA78576AD309EC148F339D6BF364162D2DCF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:d3:40:26:f3:d3:db:6a:90:e8:12:9e:94:b4:
                    79:23:03:3c:1b:2b:5f:f5:46:6f:5a:f7:c5:05:57:
                    3e:6e:0b:66:8b:38:d1:42:99:68:28:df:63:ca:43:
                    c4:e9:b7:2f:7f:c9:57:5b:63:9e:09:9c:8b:f7:4f:
                    a1:dd:75:9f:aa:b6:94:88:c8:25:f4:37:54:12:d1:
                    bf:9f:04:ad:80:20:cc:e8:bf:76:a4:9f:74:46:b3:
                    2d:37:74:bf:37:87:ea:52:2f:a5:30:45:9a:f6:7c:
                    3c:9e:70:36:5e:ad:ff:96:77:89:72:72:69:f5:c7:
                    cc:e1:49:ae:ac:48:9a:24:0f:6d:11:bf:57:3a:ac:
                    ec:69:d5:66:47:7e:c0:ab:df:49:2b:be:3a:02:fe:
                    f5:a0:1a:e7:a7:94:e0:c0:b7:b4:59:91:12:e4:75:
                    e0:b2:d7:50:ef:d4:fd:bd:55:e8:8e:63:23:33:70:
                    8f:1a:4b:68:30:20:74:ce:e4:e8:cc:41:95:e8:66:
                    5e:d7:fe:b5:08:87:96:ca:02:e5:70:4a:33:a6:18:
                    da:91:ba:85:5a:91:16:ae:fc:a9:a3:8c:06:55:3c:
                    f6:e1:fd:dc:95:11:9f:71:ab:54:be:87:59:41:8c:
                    43:16:4a:3d:50:83:3b:c7:63:02:ca:47:c2:c1:63:
                    d7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:0E:A7:85:76:AD:30:9E:C1:48:F3:39:D6:BF:36:41:62:D2:DC:F7
            X509v3 Authority Key Identifier:
                keyid:10:8C:04:80:48:A7:57:4A:82:BE:3D:8E:84:92:03:BD:34:D7:63:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E71vLuB3byW8Gn2Cb4pJiRu6wMQVPEpf35mEC953HjuL/0/108C048048A7574A82BE3D8E849203BD34D76390.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/108C048048A7574A82BE3D8E849203BD34D76390.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E71vLuB3byW8Gn2Cb4pJiRu6wMQVPEpf35mEC953HjuL/0/323830343a346265383a383030303a3a2f33332d3333203d3e20323637333336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4be8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         22:1e:1e:9c:75:ad:a0:4c:ab:9e:eb:92:41:59:04:cc:69:c0:
         19:75:ef:36:1f:c6:a2:ae:d4:4c:7c:bb:bc:d0:59:20:8d:ba:
         0f:36:a8:76:4f:1b:96:03:da:cc:15:57:a6:de:34:3e:24:f7:
         c1:14:8a:4c:e6:f0:cd:16:3b:d4:37:c5:81:f3:6e:a8:53:bf:
         52:91:eb:a6:72:fa:aa:6c:33:aa:eb:ee:82:0e:89:97:75:c8:
         68:0b:33:f2:9b:fa:5d:5d:89:99:c9:01:38:1f:71:f7:68:19:
         55:0f:80:fb:0b:a5:5d:96:f9:27:6b:ce:6c:20:0c:99:2a:e7:
         b3:16:0f:67:f8:a3:df:78:7d:80:00:cf:61:6b:44:c5:0f:d3:
         d9:cc:5a:31:ef:4b:cd:7e:df:e6:48:7d:69:d7:27:4a:a9:88:
         b2:68:0c:62:96:48:2b:91:df:ab:46:46:c5:12:cd:9f:c3:ad:
         e8:5f:d5:c0:7a:2f:0b:0a:90:16:fc:b5:f5:95:35:b3:3b:40:
         61:e1:2b:32:c9:28:90:78:96:46:b9:22:b6:76:bc:9b:2c:94:
         13:a5:7e:f8:e4:4e:04:61:32:8d:7b:1a:04:67:a4:25:02:f5:
         87:c0:6f:37:4e:9a:06:c0:be:ff:13:20:6a:22:3e:ec:64:e7:
         02:fa:f5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 06:08:13 2025 by rpki-client