Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/1/323830343a3362383a3a2f33322d3332203d3e203532393635.roa
File:                     323830343a3362383a3a2f33322d3332203d3e203532393635.roa (raw, json)
Hash identifier:          L6K6yn5Br0/De4UISzelmtu/v57oPkLE68+hD/m7Gw8=
Subject key identifier:   89:8F:62:4B:9C:91:F5:1E:8D:CB:50:10:EA:43:63:B0:AC:AE:93:B3
Certificate issuer:       /CN=3235A266D447CA3B72A35513BA9761F5805F23E2
Certificate serial:       4E8F79BF2ED718F570EAAC7C882E32213562E694
Authority key identifier: 32:35:A2:66:D4:47:CA:3B:72:A3:55:13:BA:97:61:F5:80:5F:23:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3235A266D447CA3B72A35513BA9761F5805F23E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/1/323830343a3362383a3a2f33322d3332203d3e203532393635.roa
Signing time:             Thu 09 Mar 2023 12:58:42 +0000
ROA not before:           Thu 09 Mar 2023 12:53:42 +0000
ROA not after:            Thu 07 Mar 2024 12:58:42 +0000
asID:                     52965
IP address blocks:        2804:3b8::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:8f:79:bf:2e:d7:18:f5:70:ea:ac:7c:88:2e:32:21:35:62:e6:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3235A266D447CA3B72A35513BA9761F5805F23E2
        Validity
            Not Before: Mar  9 12:53:42 2023 GMT
            Not After : Mar  7 12:58:42 2024 GMT
        Subject: CN=898F624B9C91F51E8DCB5010EA4363B0ACAE93B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:16:13:c5:ae:01:fe:1c:a0:51:8d:39:e2:be:
                    fd:b3:b1:51:c9:42:02:8e:95:6b:27:85:14:7f:90:
                    3c:b2:76:46:5d:a5:cf:a7:05:3b:92:c4:a5:7e:e0:
                    13:8c:54:4e:8e:70:74:f7:15:5e:c2:20:69:b5:f4:
                    86:5d:d9:7e:1d:6b:a4:1b:81:5c:3c:4d:e0:40:2e:
                    97:35:a7:d7:99:af:19:7b:b7:bd:a1:00:74:7e:5c:
                    d2:93:4c:b5:5a:31:60:bb:4c:c1:7c:e6:f3:62:89:
                    0e:e5:9c:d2:63:fc:de:fc:60:98:07:d2:9f:71:d2:
                    83:f8:07:6a:b1:dc:9e:b6:db:2e:32:d7:f7:2f:77:
                    ad:f5:07:97:5c:55:64:87:fd:65:bb:e3:97:5c:6f:
                    5b:b0:c5:84:87:59:ee:6f:d0:25:48:a9:59:c0:15:
                    d7:ee:5e:09:05:d9:73:b9:d4:d3:21:da:3d:3d:43:
                    ea:8f:33:f5:4e:ec:63:c9:71:dc:6e:a0:f9:39:2c:
                    4e:94:30:0b:af:28:42:05:45:3f:bd:74:64:87:eb:
                    fb:d2:93:b7:a4:3c:df:e8:78:92:69:6a:bb:d8:ce:
                    dd:eb:a2:c0:ec:88:26:f2:54:66:26:5d:88:dc:22:
                    a0:1a:a0:67:c8:98:e0:4e:76:d5:88:3a:bb:57:37:
                    d4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:8F:62:4B:9C:91:F5:1E:8D:CB:50:10:EA:43:63:B0:AC:AE:93:B3
            X509v3 Authority Key Identifier:
                keyid:32:35:A2:66:D4:47:CA:3B:72:A3:55:13:BA:97:61:F5:80:5F:23:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/1/3235A266D447CA3B72A35513BA9761F5805F23E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3235A266D447CA3B72A35513BA9761F5805F23E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/1/323830343a3362383a3a2f33322d3332203d3e203532393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:db:94:a8:ae:42:9a:ea:bc:fd:25:38:69:d1:ba:2c:58:f8:
         f3:0a:95:98:97:09:a7:16:61:87:e4:d9:46:c1:e2:c4:a8:bd:
         54:52:9a:33:8e:f6:89:72:65:40:3f:a0:f3:d4:35:77:d2:10:
         b7:45:45:91:8a:4e:86:ae:d5:56:17:3f:fa:4f:37:83:55:46:
         59:bc:09:84:31:f3:a8:ef:30:d9:6c:82:e3:42:db:cb:be:d1:
         36:25:a1:c6:9b:44:c8:81:c1:18:92:db:c6:a8:46:23:a9:bd:
         29:69:9b:e3:61:8d:52:42:39:06:53:36:40:b8:51:51:f5:fe:
         e0:9d:6b:05:4d:00:3c:10:e6:72:a5:5a:56:74:d9:e2:d5:32:
         b5:04:18:29:be:56:9e:60:4f:7a:2a:ea:86:12:8a:53:9a:07:
         be:ad:ef:e1:22:2e:9f:1f:b7:11:c7:e0:6c:35:a0:26:1e:c3:
         2c:70:53:94:c6:91:67:f5:15:48:6d:db:11:8b:dc:ba:9c:34:
         26:5a:e1:72:10:73:7a:b2:45:18:a1:33:57:9e:4f:25:b2:84:
         ac:2c:6a:2d:44:05:2f:0b:f0:5c:be:0c:9e:70:cc:b2:75:26:
         31:2c:7f:41:cf:e5:8d:8e:a5:c7:ef:e1:bd:75:b9:64:42:5f:
         1c:5b:a3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:02 2025 by rpki-client