Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/323830343a383638343a323030303a3a2f33362d3336203d3e20323732363439.roa
File:                     323830343a383638343a323030303a3a2f33362d3336203d3e20323732363439.roa (raw, json)
Hash identifier:          iL/AZU8lbW6tHACiwB79luh7U9fk0CLO8ctb1vyXCLo=
Subject key identifier:   FF:59:B7:18:CF:EC:EE:76:DA:76:E6:6F:CB:69:13:D3:29:A2:65:0B
Certificate issuer:       /CN=70427113C728F653176866A2E47D9746EA86B842
Certificate serial:       33379D74235EB651D028D29A4F3BE86F218521DF
Authority key identifier: 70:42:71:13:C7:28:F6:53:17:68:66:A2:E4:7D:97:46:EA:86:B8:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70427113C728F653176866A2E47D9746EA86B842.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/323830343a383638343a323030303a3a2f33362d3336203d3e20323732363439.roa
Signing time:             Tue 21 Nov 2023 15:11:22 +0000
ROA not before:           Tue 21 Nov 2023 15:06:22 +0000
ROA not after:            Tue 19 Nov 2024 15:11:22 +0000
asID:                     272649
IP address blocks:        2804:8684:2000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:37:9d:74:23:5e:b6:51:d0:28:d2:9a:4f:3b:e8:6f:21:85:21:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70427113C728F653176866A2E47D9746EA86B842
        Validity
            Not Before: Nov 21 15:06:22 2023 GMT
            Not After : Nov 19 15:11:22 2024 GMT
        Subject: CN=FF59B718CFECEE76DA76E66FCB6913D329A2650B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:76:bc:75:43:f2:57:4b:70:65:9b:d6:a8:e1:
                    b6:b6:af:ab:21:07:2c:ce:09:cc:c5:48:7d:40:de:
                    6d:56:56:94:09:3d:88:35:45:b0:c9:a0:8b:3c:54:
                    45:8d:f1:da:7a:b1:e7:19:6e:51:f3:11:dd:04:29:
                    d3:c5:f5:f8:18:61:b9:63:a8:32:2c:ba:c1:59:60:
                    52:39:f1:84:06:14:6e:80:44:07:9c:03:53:00:61:
                    1f:10:b3:9e:77:72:ce:2b:1f:fc:5e:47:df:aa:bb:
                    09:21:db:2e:83:96:f4:b1:74:cd:60:f9:09:8c:c8:
                    10:b6:b5:c4:b1:bd:1b:fb:0a:b7:eb:80:d2:4e:b9:
                    19:71:57:3b:c3:87:c6:6a:cf:0c:fd:00:8b:c9:62:
                    c1:96:15:ae:92:b2:75:8b:3a:04:2a:3b:3c:23:fb:
                    a4:0d:b8:cf:f9:82:ba:bb:36:2d:cb:3f:ac:94:47:
                    18:6a:f2:2e:6b:30:e6:0f:93:96:90:94:3a:95:fb:
                    64:4d:ef:7f:32:65:66:bf:09:03:4f:63:f6:81:27:
                    b3:3b:99:74:24:5d:ee:13:b7:f8:aa:a3:3e:89:14:
                    35:fb:0f:10:02:0b:a3:c0:14:f9:e5:8d:22:fc:5e:
                    27:79:35:30:5d:c2:08:f0:9b:15:46:e7:0e:6c:b8:
                    95:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:59:B7:18:CF:EC:EE:76:DA:76:E6:6F:CB:69:13:D3:29:A2:65:0B
            X509v3 Authority Key Identifier:
                keyid:70:42:71:13:C7:28:F6:53:17:68:66:A2:E4:7D:97:46:EA:86:B8:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/70427113C728F653176866A2E47D9746EA86B842.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70427113C728F653176866A2E47D9746EA86B842.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/323830343a383638343a323030303a3a2f33362d3336203d3e20323732363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8684:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3f:66:ac:cd:4d:af:28:c2:96:8d:bb:3f:48:81:f6:9f:8d:41:
         2d:3a:68:29:04:99:5f:7b:c3:3e:70:b1:3f:e2:30:50:45:f6:
         25:90:a5:96:ce:39:33:97:8a:29:3a:8c:65:6b:0d:9b:5f:b0:
         7a:f6:d7:bc:56:ad:bf:dd:6f:36:92:ae:d4:d7:6e:4e:48:f3:
         64:a3:53:c0:8d:e7:d0:9d:6c:c2:f4:d7:bd:a1:a7:89:0a:8b:
         2c:09:31:d4:ff:7e:95:4c:75:9f:11:aa:37:bf:17:da:ec:98:
         32:cc:8a:e3:73:c8:63:26:78:ea:c8:89:a5:48:e9:88:23:f7:
         cf:c5:e5:72:cd:e2:27:94:b9:21:ba:a3:ca:1e:1a:91:92:ec:
         fc:93:8e:62:dc:41:13:f0:be:5d:02:61:07:8f:56:91:88:5d:
         90:e1:67:8d:55:47:cd:c5:1d:7f:89:94:86:67:b1:56:9a:b6:
         2a:85:d3:ea:0b:1b:50:7f:6b:2d:02:25:07:90:cb:bb:75:9e:
         7c:92:e3:e4:67:ac:16:76:ad:32:95:07:de:e7:2e:c9:9f:d6:
         98:99:4f:f5:37:c0:be:c0:e9:9d:83:85:82:f3:e7:35:b9:0a:
         0f:ce:8b:73:73:b8:69:e6:c8:60:50:cc:e7:26:70:c0:a5:a6:
         fb:24:e6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:35:06 2025 by rpki-client