Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/323830343a353439343a3a2f33322d3438203d3e20323638363539.roa
File:                     323830343a353439343a3a2f33322d3438203d3e20323638363539.roa (raw, json)
Hash identifier:          WPPmj3Omn90YBuU9Hh+GLq68fpBN4TM7k4U8ALqv7KQ=
Subject key identifier:   39:64:B9:15:65:5C:32:86:FA:6D:71:74:91:78:94:27:83:51:A7:62
Certificate issuer:       /CN=D2F3CF1154C37962C5D2AEB18040800B074D67A5
Certificate serial:       24425C0093B58260450761BA32DC21D0F1C74150
Authority key identifier: D2:F3:CF:11:54:C3:79:62:C5:D2:AE:B1:80:40:80:0B:07:4D:67:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2F3CF1154C37962C5D2AEB18040800B074D67A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/323830343a353439343a3a2f33322d3438203d3e20323638363539.roa
Signing time:             Thu 18 Aug 2022 03:12:09 +0000
ROA not before:           Thu 18 Aug 2022 03:07:09 +0000
ROA not after:            Thu 17 Aug 2023 03:12:09 +0000
asID:                     268659
IP address blocks:        2804:5494::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:42:5c:00:93:b5:82:60:45:07:61:ba:32:dc:21:d0:f1:c7:41:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2F3CF1154C37962C5D2AEB18040800B074D67A5
        Validity
            Not Before: Aug 18 03:07:09 2022 GMT
            Not After : Aug 17 03:12:09 2023 GMT
        Subject: CN=3964B915655C3286FA6D7174917894278351A762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c5:4a:7b:47:e5:c4:a6:f3:04:5d:c2:91:a0:
                    26:63:bb:62:e2:7f:51:75:eb:f9:cd:0b:9f:9a:93:
                    af:81:c0:66:65:90:38:29:f8:48:4b:b2:5c:9b:fe:
                    33:f6:72:ab:3b:d6:1d:86:b5:7f:9c:b4:31:11:b3:
                    95:42:25:43:f4:69:4a:51:9c:26:04:7b:c0:90:84:
                    9f:80:6a:87:7e:a2:c2:0b:f9:ef:48:6d:dc:2c:69:
                    34:ea:38:74:ba:56:42:22:46:61:a9:97:2a:56:8c:
                    6f:c5:44:5d:ca:75:c7:7f:4d:3e:ef:6e:3b:01:62:
                    85:a8:cb:ae:36:a8:97:58:19:6e:4c:0f:8e:4c:02:
                    e4:c9:8d:86:63:4e:00:e4:f0:2b:1a:7a:b8:c5:89:
                    96:d7:95:81:85:9a:ea:f0:fc:ae:5d:63:45:81:eb:
                    9d:a4:44:35:62:ed:35:b1:85:51:8b:6d:1b:ab:7c:
                    f2:52:d8:d0:8f:e6:6c:76:7d:54:74:69:bf:74:95:
                    32:a4:bf:58:9f:a6:ff:d5:f5:c0:1b:81:c2:9e:8e:
                    ea:ff:2b:8c:da:27:57:15:91:9a:33:5a:5a:2f:2c:
                    55:f5:71:f9:17:ef:43:7f:33:48:cc:ed:d1:7c:53:
                    07:84:d0:2c:cf:d0:76:60:bf:28:30:00:6b:84:d7:
                    7b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:64:B9:15:65:5C:32:86:FA:6D:71:74:91:78:94:27:83:51:A7:62
            X509v3 Authority Key Identifier:
                keyid:D2:F3:CF:11:54:C3:79:62:C5:D2:AE:B1:80:40:80:0B:07:4D:67:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/D2F3CF1154C37962C5D2AEB18040800B074D67A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2F3CF1154C37962C5D2AEB18040800B074D67A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/323830343a353439343a3a2f33322d3438203d3e20323638363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5494::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:25:8d:3a:ae:6b:39:23:41:00:9a:bc:af:e8:b8:8b:4f:7f:
         4d:7b:4b:16:9b:26:eb:9a:52:f5:2f:dd:eb:f6:41:fb:d8:f6:
         f9:6a:68:40:7d:2f:4b:3b:91:60:bc:fd:bb:38:dc:78:93:75:
         86:ad:6b:b4:a5:23:9a:f6:e8:a8:d9:bf:69:89:c3:8e:95:a2:
         b1:3b:d9:25:af:9a:77:27:54:7f:c7:fa:91:22:c0:b7:6e:f8:
         f8:10:63:7a:54:16:9e:09:48:04:78:62:b6:b7:c3:ab:8f:29:
         6d:cf:65:a3:d0:39:c8:b8:d5:71:35:ac:23:f7:94:3e:a8:b4:
         c9:e8:cc:3f:30:7b:20:c0:af:60:d0:c2:e8:7e:dd:ed:59:56:
         ca:3e:a3:87:a1:60:67:75:17:24:f4:d7:c1:a6:f4:c2:12:b1:
         3a:1f:a5:52:df:33:19:86:ba:df:e0:23:36:f4:70:ad:33:0e:
         c7:7f:9c:d1:cd:00:76:45:db:08:67:a1:de:cd:48:f8:f0:3a:
         5b:b7:b2:1c:4a:ac:89:2d:18:6a:7d:bf:73:93:79:f7:c0:8c:
         9c:79:6b:a3:b7:72:4f:50:76:56:c9:0c:27:d9:96:c5:ea:8d:
         00:f9:74:5a:f7:92:95:db:b2:85:33:85:d1:32:90:c8:2c:2c:
         dd:d6:ec:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:27:21 2025 by rpki-client