Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E8gwGQmVsyGMqLXfNhACZnm1kpnTV7PHRUys6VDgF4t6/0/323830343a333639383a383030303a3a2f33332d3333203d3e20323636333538.roa
File:                     323830343a333639383a383030303a3a2f33332d3333203d3e20323636333538.roa (raw, json)
Hash identifier:          leGp16gMighpo1VKm1LYrjScxMw71qruuLxD4wM0HMY=
Subject key identifier:   FA:31:BF:8E:13:71:F6:A8:9C:C9:79:50:5C:D2:1E:88:42:91:CC:83
Certificate issuer:       /CN=689A0904150851FE4D3E06A04569C2EE6143E398
Certificate serial:       7A752A4DD21545B20FEA65C78B4266FA90BE8756
Authority key identifier: 68:9A:09:04:15:08:51:FE:4D:3E:06:A0:45:69:C2:EE:61:43:E3:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/689A0904150851FE4D3E06A04569C2EE6143E398.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E8gwGQmVsyGMqLXfNhACZnm1kpnTV7PHRUys6VDgF4t6/0/323830343a333639383a383030303a3a2f33332d3333203d3e20323636333538.roa
Signing time:             Tue 28 Mar 2023 18:48:05 +0000
ROA not before:           Tue 28 Mar 2023 18:43:05 +0000
ROA not after:            Tue 26 Mar 2024 18:48:05 +0000
asID:                     266358
IP address blocks:        2804:3698:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:75:2a:4d:d2:15:45:b2:0f:ea:65:c7:8b:42:66:fa:90:be:87:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=689A0904150851FE4D3E06A04569C2EE6143E398
        Validity
            Not Before: Mar 28 18:43:05 2023 GMT
            Not After : Mar 26 18:48:05 2024 GMT
        Subject: CN=FA31BF8E1371F6A89CC979505CD21E884291CC83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e3:f5:2f:c9:70:ee:be:18:0b:14:e5:32:50:
                    fe:77:67:26:57:99:27:d4:61:9c:4b:b9:f6:b5:93:
                    74:a4:f6:ff:36:e1:35:07:c8:36:7f:aa:c4:ad:0a:
                    bc:ed:87:7d:84:ca:98:f0:ef:b5:b7:73:22:f4:8d:
                    66:62:2c:84:41:89:a1:eb:6e:f1:ff:d9:90:bd:96:
                    c9:47:94:12:ce:f2:2e:1b:45:27:3c:e3:18:68:77:
                    99:1c:50:79:37:ad:f2:0c:d3:bd:db:47:0b:6d:07:
                    97:48:a5:3e:26:c4:ce:5f:5d:1c:c6:5c:9a:a6:3b:
                    0f:51:25:82:24:f6:5b:6d:f4:69:82:53:97:10:63:
                    6d:00:b5:56:00:04:eb:5a:12:e5:af:81:53:a4:fa:
                    f9:81:38:23:72:09:94:3b:4c:62:a0:b3:12:a1:e4:
                    c7:1e:31:00:9e:60:df:c2:a6:bf:7e:8b:e3:62:d7:
                    75:67:14:cd:cc:f0:8b:35:b3:85:0d:b8:ec:4a:59:
                    b2:db:3e:fd:09:56:fc:d0:dc:54:cd:7e:0e:22:28:
                    97:8c:bf:6d:a3:fa:0d:81:70:de:ce:09:03:91:e7:
                    33:7d:73:01:63:60:23:b8:31:5e:71:d7:f7:f7:c7:
                    ac:04:44:a8:69:a5:9d:11:65:c1:da:b3:d7:f7:dd:
                    51:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:31:BF:8E:13:71:F6:A8:9C:C9:79:50:5C:D2:1E:88:42:91:CC:83
            X509v3 Authority Key Identifier:
                keyid:68:9A:09:04:15:08:51:FE:4D:3E:06:A0:45:69:C2:EE:61:43:E3:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E8gwGQmVsyGMqLXfNhACZnm1kpnTV7PHRUys6VDgF4t6/0/689A0904150851FE4D3E06A04569C2EE6143E398.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/689A0904150851FE4D3E06A04569C2EE6143E398.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E8gwGQmVsyGMqLXfNhACZnm1kpnTV7PHRUys6VDgF4t6/0/323830343a333639383a383030303a3a2f33332d3333203d3e20323636333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3698:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         76:90:a7:05:2b:70:a7:53:02:df:1d:96:7b:77:56:6a:87:c8:
         e2:e1:53:15:04:7c:f1:90:2f:7d:4c:15:99:b7:2d:f0:aa:6e:
         96:82:3c:1e:af:24:a1:19:79:f3:87:9d:64:b5:1a:60:02:ee:
         6f:83:b7:23:79:e1:39:b7:1a:87:e5:02:e2:44:ca:1b:d5:92:
         c0:9e:3f:ab:fa:53:73:67:8e:69:8f:bd:be:6d:ad:8a:18:d4:
         79:89:7f:f0:1d:5d:92:4e:84:be:4f:77:51:2c:31:01:4c:8d:
         cd:ce:b3:f3:3b:14:bf:23:ee:f2:c7:aa:1c:41:c4:9b:4f:a1:
         a5:26:57:51:f1:5f:ff:65:8a:d3:ff:ef:66:60:d9:c4:a9:80:
         09:26:7d:dc:9b:8b:30:16:af:d5:e2:fc:9e:97:c2:e0:37:0b:
         6d:9b:9f:35:60:79:f1:8b:75:8a:87:e3:0d:67:07:d3:8b:cb:
         66:72:60:ad:da:21:7d:aa:0f:64:51:42:ad:e1:a0:ea:14:18:
         d5:61:75:92:c2:30:6f:1e:9c:4e:59:51:35:00:61:18:a9:ba:
         1d:aa:f8:f7:c7:57:7c:fa:c6:20:66:6d:f1:fb:04:70:a5:58:
         0d:f7:1f:11:10:df:af:24:5d:c6:fa:ac:40:55:b2:1d:e8:91:
         9e:0d:f6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:38:17 2025 by rpki-client