Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/323830343a313765303a3a2f33342d3334203d3e20323633323536.roa
File:                     323830343a313765303a3a2f33342d3334203d3e20323633323536.roa (raw, json)
Hash identifier:          +sKXUJdSh0IhCyL47blIv1B7Lk2/NYjFOxYK0ZsfKpk=
Subject key identifier:   D3:03:FF:32:72:68:77:D8:95:B5:F7:F3:83:E6:1D:0F:7F:6C:53:65
Certificate issuer:       /CN=0156B956215AE4C7F951D9FABA7689B0C1830680
Certificate serial:       323C23F6CA7A5613596E22F889F3170D7A18C939
Authority key identifier: 01:56:B9:56:21:5A:E4:C7:F9:51:D9:FA:BA:76:89:B0:C1:83:06:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0156B956215AE4C7F951D9FABA7689B0C1830680.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/323830343a313765303a3a2f33342d3334203d3e20323633323536.roa
Signing time:             Fri 23 May 2025 16:53:05 +0000
ROA not before:           Fri 23 May 2025 16:48:05 +0000
ROA not after:            Fri 22 May 2026 16:53:05 +0000
asID:                     263256
IP address blocks:        2804:17e0::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:3c:23:f6:ca:7a:56:13:59:6e:22:f8:89:f3:17:0d:7a:18:c9:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0156B956215AE4C7F951D9FABA7689B0C1830680
        Validity
            Not Before: May 23 16:48:05 2025 GMT
            Not After : May 22 16:53:05 2026 GMT
        Subject: CN=D303FF32726877D895B5F7F383E61D0F7F6C5365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:da:2e:8c:fb:ad:6d:e0:aa:e1:dd:37:cf:4e:
                    c1:d4:f6:df:df:6d:9f:2c:55:b0:73:38:49:31:f9:
                    e3:b1:6f:78:f0:40:59:45:01:39:70:ca:ce:ce:23:
                    a0:17:41:e6:40:da:f4:52:13:09:2a:6e:e5:50:ed:
                    d5:8e:3b:37:0f:ca:5d:86:11:88:eb:41:2c:ad:2b:
                    63:4c:cc:25:b9:05:d2:51:c2:a4:2e:4c:9e:0c:2b:
                    43:36:69:8a:ea:81:74:43:73:63:54:f5:1b:0f:fa:
                    e1:d7:f6:7a:0f:f7:d1:4e:bc:42:c6:77:e7:a6:4c:
                    f0:38:b2:06:54:fd:ee:86:2f:61:08:75:9d:26:5d:
                    2e:62:de:34:ec:d7:2a:25:19:94:eb:6c:61:75:eb:
                    5f:92:f6:56:3a:78:6f:61:95:27:ea:6a:c7:26:11:
                    4d:a3:61:9e:c9:b7:7c:e2:bb:9e:fa:a5:1e:05:fe:
                    96:49:54:da:69:d8:25:ed:b3:da:4f:f7:71:3f:43:
                    00:27:2e:43:3c:85:6a:dd:1b:0a:e6:bf:a2:ee:f9:
                    63:72:bd:94:7a:eb:0b:22:c3:f0:30:a0:a9:60:43:
                    51:56:4b:7a:37:a5:fc:3d:6b:f9:64:9c:39:9a:65:
                    df:09:8d:d4:35:4b:5e:eb:89:34:49:c8:c5:35:74:
                    83:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:03:FF:32:72:68:77:D8:95:B5:F7:F3:83:E6:1D:0F:7F:6C:53:65
            X509v3 Authority Key Identifier:
                keyid:01:56:B9:56:21:5A:E4:C7:F9:51:D9:FA:BA:76:89:B0:C1:83:06:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/0156B956215AE4C7F951D9FABA7689B0C1830680.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0156B956215AE4C7F951D9FABA7689B0C1830680.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/323830343a313765303a3a2f33342d3334203d3e20323633323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:17e0::/34

    Signature Algorithm: sha256WithRSAEncryption
         45:08:67:03:5b:23:bc:56:c9:30:68:74:7b:2e:b3:af:dd:6f:
         a6:37:6d:eb:96:ec:7a:01:22:6e:cf:ad:a4:2b:65:59:a4:b2:
         11:e7:87:97:71:ec:2e:8b:3e:06:f8:98:fc:41:dd:4e:bd:71:
         bd:24:f8:09:11:4b:b8:65:e9:8d:cc:14:d3:61:4e:71:52:77:
         a1:de:a7:89:25:e2:7f:96:dc:4f:54:4f:2f:74:a1:7c:b5:07:
         fa:64:ab:0a:c8:0c:aa:ac:87:8e:fd:79:55:e0:34:97:19:5e:
         ef:ac:fa:b2:9d:b3:ae:4b:fe:22:12:d1:09:67:57:aa:a4:09:
         40:64:84:ad:d4:a5:27:dd:d7:8c:43:86:e7:8f:7b:4e:55:5f:
         c6:e9:a0:04:32:a8:0d:e5:60:a1:24:f7:8c:3c:34:85:1b:83:
         cf:41:dc:82:fe:bd:e4:70:4a:d7:fd:de:3b:79:98:5c:11:7b:
         84:f2:68:03:8a:ea:4b:87:4a:eb:5d:34:d6:39:33:07:1d:f3:
         5a:ce:6d:8f:69:aa:da:89:c2:4f:77:2e:7a:4f:94:0c:91:ce:
         ef:94:69:9f:cd:83:02:ce:59:07:7c:9d:cb:3c:ed:50:58:4f:
         14:1b:e9:e3:ff:c3:f6:30:a4:04:e9:de:b1:be:5f:e5:2d:70:
         c3:58:9e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 00:22:17 2025 by rpki-client