Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EEXt3fYM3i11uZnKfgfBvJ92D2gSjJcVGjimDyGBVHsz/0/323830343a346661633a3a2f33322d3332203d3e20323638333432.roa
File:                     323830343a346661633a3a2f33322d3332203d3e20323638333432.roa (raw, json)
Hash identifier:          Mwb66IDQPQTUF1IY9UtjtzeA1thzlO+a6x+4JWsN14k=
Subject key identifier:   CC:A8:FF:CE:64:7A:18:F5:00:05:49:34:08:6B:09:C5:BC:59:2E:A4
Certificate issuer:       /CN=3B2BE0C1F2F6BF6A1A808FD07FE1FDA87168C826
Certificate serial:       712B97CF1C7DA7EABBF38D3C3E1404789D453714
Authority key identifier: 3B:2B:E0:C1:F2:F6:BF:6A:1A:80:8F:D0:7F:E1:FD:A8:71:68:C8:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B2BE0C1F2F6BF6A1A808FD07FE1FDA87168C826.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EEXt3fYM3i11uZnKfgfBvJ92D2gSjJcVGjimDyGBVHsz/0/323830343a346661633a3a2f33322d3332203d3e20323638333432.roa
Signing time:             Tue 13 Sep 2022 03:52:02 +0000
ROA not before:           Tue 13 Sep 2022 03:47:02 +0000
ROA not after:            Tue 12 Sep 2023 03:52:02 +0000
asID:                     268342
IP address blocks:        2804:4fac::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:2b:97:cf:1c:7d:a7:ea:bb:f3:8d:3c:3e:14:04:78:9d:45:37:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B2BE0C1F2F6BF6A1A808FD07FE1FDA87168C826
        Validity
            Not Before: Sep 13 03:47:02 2022 GMT
            Not After : Sep 12 03:52:02 2023 GMT
        Subject: CN=CCA8FFCE647A18F500054934086B09C5BC592EA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a2:58:33:16:34:52:85:d7:44:01:2a:05:4c:
                    25:04:3b:fa:12:a3:a4:70:79:eb:65:49:38:c7:0f:
                    59:20:82:81:47:22:00:30:ff:20:d7:17:23:80:a7:
                    fd:3f:3e:7c:fe:8e:a0:16:27:98:b0:2b:25:b6:5a:
                    e0:e6:92:f0:f5:9f:ff:02:1e:6d:0c:b2:f2:82:2e:
                    5e:77:f7:2b:45:b6:a5:b0:80:22:0e:bb:db:09:05:
                    ab:79:61:e5:62:19:e6:c1:c3:26:b6:ce:30:ac:d0:
                    2e:85:dc:a2:bf:fb:38:c9:76:bc:b1:b1:db:96:40:
                    7f:51:0f:11:02:4e:99:c4:20:cb:62:b9:17:83:06:
                    03:37:cd:d9:be:7b:1d:07:cb:bd:b4:d7:47:b4:e3:
                    8a:21:c9:17:af:75:18:c8:2b:92:43:87:77:82:41:
                    39:3c:32:59:e4:37:93:2c:b6:6c:cb:50:d2:21:28:
                    59:09:cd:16:fb:8a:72:bb:39:81:3a:06:0b:9b:47:
                    a9:4a:26:a8:3d:bd:74:9f:ec:df:31:ab:9a:8a:2c:
                    66:7d:c2:6b:3f:41:a8:9f:65:ed:d1:66:4f:08:53:
                    7c:4a:b9:fd:9c:68:64:db:3d:12:76:b6:0d:0a:a2:
                    c6:ed:1a:27:38:36:bb:b7:1e:92:51:c3:17:2a:c4:
                    af:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A8:FF:CE:64:7A:18:F5:00:05:49:34:08:6B:09:C5:BC:59:2E:A4
            X509v3 Authority Key Identifier:
                keyid:3B:2B:E0:C1:F2:F6:BF:6A:1A:80:8F:D0:7F:E1:FD:A8:71:68:C8:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EEXt3fYM3i11uZnKfgfBvJ92D2gSjJcVGjimDyGBVHsz/0/3B2BE0C1F2F6BF6A1A808FD07FE1FDA87168C826.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B2BE0C1F2F6BF6A1A808FD07FE1FDA87168C826.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EEXt3fYM3i11uZnKfgfBvJ92D2gSjJcVGjimDyGBVHsz/0/323830343a346661633a3a2f33322d3332203d3e20323638333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4fac::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:dd:42:88:fe:10:a4:b6:c8:18:0e:bb:e4:69:e3:44:22:ba:
         30:c8:61:45:d2:20:8e:28:de:fc:ea:0d:ef:0e:ff:52:36:31:
         ec:c9:fd:1f:f6:ae:3f:af:02:c9:d9:d1:a0:9b:5e:07:99:82:
         1a:8d:49:9d:c8:51:13:6e:5e:78:42:a8:50:cc:6d:b7:70:f1:
         b6:a1:7e:09:49:1f:5a:9f:39:78:34:41:00:aa:c0:39:d1:dc:
         d1:fc:11:f5:52:e8:5c:f3:80:88:db:de:b6:9b:f4:7e:64:d2:
         68:fb:3b:ab:ac:08:54:45:32:1c:2e:5b:2d:00:81:7f:90:12:
         c5:0d:9d:f6:54:64:48:38:a3:f7:88:97:7c:90:c6:b9:34:73:
         5d:0a:da:ac:4a:f6:0a:14:cf:c7:ac:64:c2:39:dc:9a:ad:76:
         9b:dc:33:0b:01:81:b0:45:58:6c:29:fe:63:b0:b9:5a:14:98:
         64:d4:9e:61:83:d2:55:0c:36:3f:41:42:c1:1d:d2:b3:57:21:
         43:d4:a5:95:c2:4a:ce:3a:62:80:15:24:c7:8d:d0:6e:e7:bf:
         7b:ee:6c:cf:d2:29:0a:a1:59:61:ad:d4:9c:16:48:0e:0b:44:
         fb:c8:62:d3:0f:15:87:38:60:af:09:f7:7b:7d:cc:16:b0:61:
         1d:4e:6b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:38:46 2025 by rpki-client