Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J7wPLxobGZUuKfUKstopvBiDWqUNaTqH6cheqLBkqpa1/0/323830343a336334343a3a2f33322d3336203d3e20323636323030.roa
File:                     323830343a336334343a3a2f33322d3336203d3e20323636323030.roa (raw, json)
Hash identifier:          327a58Us2211YDX3n2MDsWHQ1Px25DQsBo5tkgG7S4A=
Subject key identifier:   F6:52:EB:FA:C6:36:1B:28:DF:75:58:89:8D:D5:47:60:D5:46:34:CD
Certificate issuer:       /CN=7159DD0D2DE022650C2526E3276BD39C7268E3E5
Certificate serial:       5D990B09CE77C041FC9F017D75846EFEB1AD4578
Authority key identifier: 71:59:DD:0D:2D:E0:22:65:0C:25:26:E3:27:6B:D3:9C:72:68:E3:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7159DD0D2DE022650C2526E3276BD39C7268E3E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J7wPLxobGZUuKfUKstopvBiDWqUNaTqH6cheqLBkqpa1/0/323830343a336334343a3a2f33322d3336203d3e20323636323030.roa
Signing time:             Thu 05 Oct 2023 16:13:47 +0000
ROA not before:           Thu 05 Oct 2023 16:08:47 +0000
ROA not after:            Thu 03 Oct 2024 16:13:47 +0000
asID:                     266200
IP address blocks:        2804:3c44::/32 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:99:0b:09:ce:77:c0:41:fc:9f:01:7d:75:84:6e:fe:b1:ad:45:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7159DD0D2DE022650C2526E3276BD39C7268E3E5
        Validity
            Not Before: Oct  5 16:08:47 2023 GMT
            Not After : Oct  3 16:13:47 2024 GMT
        Subject: CN=F652EBFAC6361B28DF7558898DD54760D54634CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:42:d1:2a:4b:35:bb:96:ac:ad:ce:a6:8d:88:
                    ac:60:1d:c7:4f:c5:a3:84:6b:7f:36:d0:94:19:36:
                    88:8a:e9:6d:84:1d:88:d0:d2:35:41:3e:83:73:15:
                    49:09:0b:f2:17:c0:b8:88:55:de:39:57:b5:5e:bf:
                    20:03:e6:52:e0:fd:b4:4a:aa:86:86:19:86:49:60:
                    5b:90:b0:f8:70:99:8b:fb:ab:5c:8e:a6:9c:60:fe:
                    6d:d0:c6:cc:f6:5d:8a:8a:36:ae:a4:27:bd:4e:d4:
                    96:80:86:11:7d:55:c2:f1:f3:5f:10:09:0a:fb:f1:
                    6e:2a:50:db:8b:85:82:61:a8:a3:6b:bb:7a:67:0f:
                    82:93:b6:70:c6:57:38:44:d8:1e:d8:48:e8:fd:25:
                    c6:a5:bb:0b:25:2b:6d:8a:a6:f8:27:c8:54:20:e1:
                    41:e2:c6:a8:25:af:69:7f:c2:4b:cc:d6:16:30:b4:
                    83:85:1c:c5:d7:65:b3:66:57:b8:d9:97:cb:40:95:
                    9f:ab:ea:dd:5a:9d:48:c0:d9:5c:d9:9b:93:4b:35:
                    ed:45:8f:f5:a5:a2:6f:6d:54:e9:66:e6:e1:6a:27:
                    4b:4e:e9:f1:b4:53:ad:2f:a7:fc:65:ee:e5:b0:9d:
                    f1:77:35:f9:66:3b:ef:da:f2:2d:b9:38:c0:ea:2c:
                    89:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:52:EB:FA:C6:36:1B:28:DF:75:58:89:8D:D5:47:60:D5:46:34:CD
            X509v3 Authority Key Identifier:
                keyid:71:59:DD:0D:2D:E0:22:65:0C:25:26:E3:27:6B:D3:9C:72:68:E3:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J7wPLxobGZUuKfUKstopvBiDWqUNaTqH6cheqLBkqpa1/0/7159DD0D2DE022650C2526E3276BD39C7268E3E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7159DD0D2DE022650C2526E3276BD39C7268E3E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7wPLxobGZUuKfUKstopvBiDWqUNaTqH6cheqLBkqpa1/0/323830343a336334343a3a2f33322d3336203d3e20323636323030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c44::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:8d:b3:69:61:98:52:15:68:d2:03:bc:8b:7b:0a:ad:7b:42:
         8c:f7:ce:09:65:ea:26:1d:26:7e:44:03:01:91:98:01:a7:1f:
         66:7d:99:4c:02:a5:29:76:fc:b3:77:34:da:94:a8:7d:ed:7b:
         5e:79:4d:ca:cd:e6:21:14:fb:22:56:d3:a6:ac:76:35:bf:4d:
         57:f3:21:8d:14:34:44:d6:3d:96:75:92:ac:62:09:c0:cb:eb:
         d6:15:b6:62:06:e9:c0:66:3e:bd:88:ba:e8:4a:57:3b:e0:e1:
         dd:20:a2:ed:26:56:fc:a5:ee:53:34:e8:00:51:29:81:1a:c1:
         9b:ce:d7:28:cb:3b:0d:91:e9:84:5e:e7:cc:9a:6e:f0:03:4d:
         d6:58:96:76:65:ae:74:2c:72:62:9b:81:9e:ae:48:2a:fc:f8:
         ec:64:b6:1c:b2:37:38:3b:cd:58:c9:7d:ad:5b:1c:66:37:80:
         a2:b0:9a:9c:c5:07:39:21:51:19:5b:4f:ac:cc:c6:e0:4b:31:
         3e:54:34:cb:eb:b5:75:d7:eb:16:30:c7:e4:16:ba:fa:28:f2:
         5e:6c:12:85:d9:30:8f:c0:a0:9f:08:7a:19:e2:bf:e2:fb:53:
         ba:e0:af:af:5c:7f:e6:ee:26:91:25:22:28:ce:38:e2:9d:66:
         b1:16:95:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:15:16 2025 by rpki-client