Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/323830343a373266633a383030303a3a2f33332d313238203d3e20323730383838.roa
File:                     323830343a373266633a383030303a3a2f33332d313238203d3e20323730383838.roa (raw, json)
Hash identifier:          vrJUp9umtV8J91MykDah+O+f0A3lToaRFuCxxQVjBfs=
Subject key identifier:   B3:6E:A6:D6:99:3C:22:12:52:4A:F3:5A:3F:73:C3:11:D5:30:5A:47
Certificate issuer:       /CN=82F104AF0446BD6AA6137DBEB898D516D0B92989
Certificate serial:       4806255FB89A71E236857355C387DB1A2323E295
Authority key identifier: 82:F1:04:AF:04:46:BD:6A:A6:13:7D:BE:B8:98:D5:16:D0:B9:29:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82F104AF0446BD6AA6137DBEB898D516D0B92989.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/323830343a373266633a383030303a3a2f33332d313238203d3e20323730383838.roa
Signing time:             Mon 07 Nov 2022 19:25:09 +0000
ROA not before:           Mon 07 Nov 2022 19:20:09 +0000
ROA not after:            Mon 06 Nov 2023 19:25:09 +0000
asID:                     270888
IP address blocks:        2804:72fc:8000::/33 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:06:25:5f:b8:9a:71:e2:36:85:73:55:c3:87:db:1a:23:23:e2:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82F104AF0446BD6AA6137DBEB898D516D0B92989
        Validity
            Not Before: Nov  7 19:20:09 2022 GMT
            Not After : Nov  6 19:25:09 2023 GMT
        Subject: CN=B36EA6D6993C2212524AF35A3F73C311D5305A47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:28:3c:a2:44:61:e9:7d:4c:95:9a:59:70:f3:
                    83:27:94:d6:14:37:23:85:80:7f:de:8d:a0:11:b6:
                    c4:42:87:c0:68:42:e0:08:8b:88:fd:44:08:ef:a1:
                    a6:22:30:11:65:61:0c:2f:19:22:31:90:7d:3c:0a:
                    9b:1c:d2:ed:92:60:cc:e6:0c:25:54:ee:c1:7a:66:
                    45:09:51:22:36:bf:ce:26:e9:c7:3d:7e:c2:00:3f:
                    94:4f:59:b1:dc:cc:06:c6:d3:ef:cb:a9:43:ba:13:
                    59:37:a7:03:09:36:90:f6:f4:59:be:6f:d3:0d:a3:
                    e8:72:b2:a0:67:04:32:0b:4f:16:ac:e5:dc:99:ef:
                    21:60:8b:c6:b8:3c:c5:c2:73:52:be:8b:d6:13:6e:
                    52:aa:2e:c5:f1:1c:4d:b0:71:39:f0:0d:5b:65:b9:
                    e5:75:92:fb:76:8b:60:3a:5a:49:4d:d6:2d:52:35:
                    3a:e9:5e:4c:8b:5c:98:c4:cb:b0:3a:49:01:e4:a7:
                    4a:87:74:f3:16:83:69:98:45:41:49:32:6b:78:fa:
                    6e:32:1d:8c:06:99:68:44:95:ca:28:4c:04:c0:a1:
                    1d:ae:a9:d4:6b:b3:d3:6a:86:76:0f:85:cd:49:06:
                    8e:e5:99:02:09:08:b3:7b:02:59:f6:55:47:36:61:
                    27:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:6E:A6:D6:99:3C:22:12:52:4A:F3:5A:3F:73:C3:11:D5:30:5A:47
            X509v3 Authority Key Identifier:
                keyid:82:F1:04:AF:04:46:BD:6A:A6:13:7D:BE:B8:98:D5:16:D0:B9:29:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/82F104AF0446BD6AA6137DBEB898D516D0B92989.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82F104AF0446BD6AA6137DBEB898D516D0B92989.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/323830343a373266633a383030303a3a2f33332d313238203d3e20323730383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:72fc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         70:06:42:c6:f7:af:3b:5a:e6:71:4f:d7:18:10:4e:fe:3d:8f:
         0c:4f:51:f8:cb:90:a3:15:4d:88:ad:71:82:f0:0b:25:7f:13:
         79:81:eb:8b:0c:68:3e:f4:4f:35:59:df:78:2a:bf:6e:9e:7d:
         17:20:c2:a7:cb:73:82:b3:0b:ca:01:5f:d2:d8:5c:f5:38:4e:
         48:55:43:fe:5c:ce:a7:1b:75:6c:4f:dc:f8:df:45:a1:2d:01:
         39:d4:a6:ee:a0:89:a1:63:40:07:9e:c3:bc:ad:ac:00:4a:b9:
         5a:e2:d3:aa:fb:bf:65:04:07:0f:5d:b3:53:eb:ec:25:cf:4f:
         b8:82:cf:35:7e:63:78:f0:46:d5:8e:ec:60:28:6d:30:ec:bf:
         a2:6e:e7:65:66:b6:93:f9:38:ab:94:29:63:bc:9e:34:c2:1a:
         1b:1d:c3:f5:29:61:f0:8a:12:92:04:f3:90:60:2f:5a:4a:8d:
         48:1c:1a:ca:a1:be:a9:3c:22:6e:96:cb:bc:c0:7f:73:2d:46:
         be:95:bd:c7:c0:11:71:31:ca:d9:61:7c:a3:19:58:cc:71:47:
         0e:35:1a:ed:85:b0:c0:e6:e6:88:c1:d0:f1:56:f8:b1:02:52:
         c4:71:28:b0:41:d2:20:95:fa:ce:2d:a4:7c:63:67:10:18:df:
         cb:c5:5e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:38:26 2025 by rpki-client