Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FkULoSVZMg7qmBBcTnwuJBjqj7t6yhGtoGqUJjpdGddZ/0/323830343a333836383a3a2f33322d3438203d3e20323636343735.roa
File:                     323830343a333836383a3a2f33322d3438203d3e20323636343735.roa (raw, json)
Hash identifier:          LZrabF2SCN3Z5aXHmn+4tKUXrGtxiKoHncHUZkopb5w=
Subject key identifier:   32:92:BF:DD:38:8B:00:16:7D:71:6F:5D:07:C4:1B:EF:02:88:7F:08
Certificate issuer:       /CN=5CD4F8C1B48C98F58F19518F7D1AC6EE49C7BF32
Certificate serial:       56587D00B7620A9FAE8E57FC1397C4FBD170F5FE
Authority key identifier: 5C:D4:F8:C1:B4:8C:98:F5:8F:19:51:8F:7D:1A:C6:EE:49:C7:BF:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CD4F8C1B48C98F58F19518F7D1AC6EE49C7BF32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FkULoSVZMg7qmBBcTnwuJBjqj7t6yhGtoGqUJjpdGddZ/0/323830343a333836383a3a2f33322d3438203d3e20323636343735.roa
Signing time:             Tue 07 Nov 2023 20:47:11 +0000
ROA not before:           Tue 07 Nov 2023 20:42:11 +0000
ROA not after:            Tue 05 Nov 2024 20:47:11 +0000
asID:                     266475
IP address blocks:        2804:3868::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:58:7d:00:b7:62:0a:9f:ae:8e:57:fc:13:97:c4:fb:d1:70:f5:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CD4F8C1B48C98F58F19518F7D1AC6EE49C7BF32
        Validity
            Not Before: Nov  7 20:42:11 2023 GMT
            Not After : Nov  5 20:47:11 2024 GMT
        Subject: CN=3292BFDD388B00167D716F5D07C41BEF02887F08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:09:eb:28:11:c0:dc:31:e3:9b:7c:18:e3:1f:
                    96:6d:64:a3:01:ec:6c:31:f8:c6:6d:87:18:12:c8:
                    ef:df:f8:a7:f6:65:5e:9f:3d:bd:09:bc:84:ec:b0:
                    47:13:bc:17:e4:1a:01:d8:37:b7:54:4b:70:ca:d7:
                    df:00:67:56:1b:fc:e4:45:65:7d:bb:55:b7:fe:1f:
                    90:45:38:cb:39:42:99:6d:fa:90:1a:41:e5:df:4c:
                    ee:35:3b:53:c0:71:f3:a1:e4:5d:84:85:87:ed:d6:
                    64:f8:10:7f:b1:67:a7:4d:9c:fc:c2:4b:dc:5f:0c:
                    bf:cc:6e:eb:24:ed:66:88:47:ce:53:11:5c:04:cd:
                    5e:59:19:74:ac:62:0f:2c:9a:87:aa:21:e0:cc:f5:
                    ef:05:f7:a8:b1:a0:20:2c:42:94:47:46:8a:7f:07:
                    14:63:94:fb:60:91:d8:ef:50:a2:77:2b:c5:98:e3:
                    6b:f3:d0:04:5e:01:d7:5e:d6:05:14:c7:d5:4b:ed:
                    dc:55:bb:8c:07:5b:56:d6:42:6f:04:2b:cc:01:7a:
                    42:3e:02:93:59:53:f2:a6:40:9f:b9:7f:3e:24:b4:
                    9e:7d:74:dd:f7:8b:44:4e:89:40:e0:58:fc:04:7f:
                    11:20:26:65:b9:88:b3:e0:95:de:a5:94:55:0c:27:
                    39:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:92:BF:DD:38:8B:00:16:7D:71:6F:5D:07:C4:1B:EF:02:88:7F:08
            X509v3 Authority Key Identifier:
                keyid:5C:D4:F8:C1:B4:8C:98:F5:8F:19:51:8F:7D:1A:C6:EE:49:C7:BF:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FkULoSVZMg7qmBBcTnwuJBjqj7t6yhGtoGqUJjpdGddZ/0/5CD4F8C1B48C98F58F19518F7D1AC6EE49C7BF32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CD4F8C1B48C98F58F19518F7D1AC6EE49C7BF32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FkULoSVZMg7qmBBcTnwuJBjqj7t6yhGtoGqUJjpdGddZ/0/323830343a333836383a3a2f33322d3438203d3e20323636343735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3868::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:3e:b1:08:58:67:6a:38:46:7e:b7:6c:fc:4a:3f:38:57:cc:
         00:43:7e:a4:e5:74:7f:19:67:1c:00:01:b8:d4:70:8b:06:a4:
         4e:26:3a:72:ee:6b:e3:29:23:8b:ae:3a:1b:45:a3:73:d5:71:
         59:74:9b:55:f8:c7:69:18:1a:68:10:eb:4c:75:2a:77:2e:63:
         58:3d:36:d7:80:85:b1:f4:ee:3c:1e:fd:2b:02:14:ee:f2:11:
         1a:39:23:28:a8:c2:fb:8d:1d:2a:85:bf:01:4a:14:89:d5:10:
         25:f8:37:e5:f3:5f:13:1f:72:ea:4a:35:0d:06:55:c2:68:3a:
         a0:15:f2:61:25:6f:46:07:15:04:fc:24:1e:b8:7e:07:f8:e4:
         7b:04:cf:e1:32:c5:cc:3d:a5:64:e4:01:a2:8c:cf:a5:08:c7:
         53:9e:2f:20:1e:d2:6e:ba:6e:bc:48:b8:3f:28:f9:29:ab:d3:
         56:d3:cb:70:41:31:c7:15:fb:da:e4:65:8b:45:8f:07:5d:9a:
         6d:0b:be:6a:ec:3e:8c:6d:e3:df:f3:ae:5f:06:7d:a3:7a:48:
         8f:46:0e:04:74:73:0f:e6:85:b0:b7:3a:02:d3:bf:91:cf:b5:
         05:15:9a:4e:2b:0c:36:24:ee:01:9f:48:0d:98:82:b2:3d:59:
         9c:55:26:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:51:30 2025 by rpki-client