Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/323830343a383638343a333030303a3a2f33362d3336203d3e20323732363439.roa
File:                     323830343a383638343a333030303a3a2f33362d3336203d3e20323732363439.roa (raw, json)
Hash identifier:          IKk50wa5TuUPeOFOUDXisP0qcNFaTZc13dLWBp3hBZc=
Subject key identifier:   A6:21:A9:F9:D8:B2:67:41:CC:7F:5E:18:70:88:46:4B:58:24:E1:52
Certificate issuer:       /CN=70427113C728F653176866A2E47D9746EA86B842
Certificate serial:       262DDACFC34C75E7F9C681B21E1256F1E6D7D7A1
Authority key identifier: 70:42:71:13:C7:28:F6:53:17:68:66:A2:E4:7D:97:46:EA:86:B8:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70427113C728F653176866A2E47D9746EA86B842.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/323830343a383638343a333030303a3a2f33362d3336203d3e20323732363439.roa
Signing time:             Tue 21 Nov 2023 15:11:20 +0000
ROA not before:           Tue 21 Nov 2023 15:06:20 +0000
ROA not after:            Tue 19 Nov 2024 15:11:20 +0000
asID:                     272649
IP address blocks:        2804:8684:3000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:2d:da:cf:c3:4c:75:e7:f9:c6:81:b2:1e:12:56:f1:e6:d7:d7:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70427113C728F653176866A2E47D9746EA86B842
        Validity
            Not Before: Nov 21 15:06:20 2023 GMT
            Not After : Nov 19 15:11:20 2024 GMT
        Subject: CN=A621A9F9D8B26741CC7F5E187088464B5824E152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:65:4e:ef:a9:77:39:52:d4:43:93:22:0e:35:
                    b0:f0:a4:11:b2:e0:5e:a5:bc:79:63:0c:9d:cd:54:
                    8b:cf:30:9f:38:3c:e6:36:cb:ab:0f:22:99:ee:1c:
                    ab:ab:7d:9d:e7:bf:8f:d7:68:56:f1:c8:47:2b:e7:
                    23:51:b5:e2:e1:30:9b:ec:88:81:01:e5:d5:cb:f0:
                    d8:fe:a9:81:da:f7:08:b0:84:69:7a:36:40:6c:01:
                    3f:3c:a8:94:79:6c:d9:35:99:9b:6f:90:c5:35:8a:
                    74:50:87:24:8b:5e:30:b2:db:2e:07:45:66:7c:63:
                    79:40:8f:3c:d0:be:1c:4a:3e:22:11:e8:fa:7b:2d:
                    8a:10:b9:41:cc:05:b7:a1:d9:c7:d0:c9:6a:57:ad:
                    fb:38:5a:60:53:e0:d3:09:54:ce:79:30:66:d6:45:
                    86:af:50:cb:f0:94:8b:ae:b1:c2:22:84:2e:30:e1:
                    c6:4f:6d:3c:51:da:05:67:24:6d:e9:45:c1:e0:74:
                    28:4e:4c:e7:c2:d9:67:d6:e9:e5:b7:72:fd:1f:f4:
                    c3:57:cc:46:62:25:a1:66:89:8e:f1:9e:85:d1:99:
                    ea:fc:da:e4:41:91:53:03:d1:0b:a7:73:10:c5:0f:
                    65:6e:17:31:29:d2:d1:6c:47:ac:f0:d8:b1:61:ca:
                    bd:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:21:A9:F9:D8:B2:67:41:CC:7F:5E:18:70:88:46:4B:58:24:E1:52
            X509v3 Authority Key Identifier:
                keyid:70:42:71:13:C7:28:F6:53:17:68:66:A2:E4:7D:97:46:EA:86:B8:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/70427113C728F653176866A2E47D9746EA86B842.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70427113C728F653176866A2E47D9746EA86B842.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/323830343a383638343a333030303a3a2f33362d3336203d3e20323732363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8684:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         68:a6:68:b3:c3:b9:56:5a:6a:95:5b:e2:49:0b:64:5d:3b:3a:
         39:32:9c:bb:40:c0:24:0a:a5:7d:3f:0a:8e:45:23:75:91:a2:
         93:90:08:2a:8f:1c:5f:49:2b:c6:9f:93:ca:b2:17:7d:87:0c:
         bc:b1:b5:cc:3f:20:bc:8d:7f:94:55:ab:56:55:08:f6:de:29:
         8a:79:a8:65:73:7a:71:c4:c3:c8:c1:31:82:f8:29:e5:6e:14:
         19:7d:a2:00:78:9e:9b:ff:c0:12:18:e1:a7:d0:f2:df:7f:8e:
         a2:ad:a9:0a:be:55:68:3c:44:0d:c3:e3:4f:47:7a:c5:cf:92:
         55:5a:e6:b7:c6:fe:67:d0:7f:12:76:ee:5a:7e:0c:05:43:83:
         df:b5:8b:59:d0:03:18:aa:31:2c:81:7c:f4:bc:8c:a5:d6:fd:
         cb:5f:89:9c:19:2a:f0:80:36:23:5e:3b:c5:21:e7:4b:43:c8:
         6f:0d:0f:5b:25:01:2b:b6:db:4e:a2:03:15:40:94:03:4c:08:
         4c:a8:6a:0d:01:f3:58:d7:fc:c7:c1:20:6e:4a:18:6a:f8:30:
         57:a5:86:0a:bd:31:31:ae:75:5e:48:0c:a0:27:49:d7:35:52:
         15:24:19:cb:99:b3:9b:33:00:16:a9:fe:59:08:cb:0b:44:58:
         88:45:63:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:18 2025 by rpki-client