Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/323830343a383638343a363030303a3a2f33362d3336203d3e20323732363439.roa
File:                     323830343a383638343a363030303a3a2f33362d3336203d3e20323732363439.roa (raw, json)
Hash identifier:          R53GxV7ijGhjK1xi/FDbz0N3KRNafR1z0dlQiQouQSg=
Subject key identifier:   01:C1:9D:91:29:59:99:D9:13:C6:25:F2:86:67:6D:DF:45:EF:66:5F
Certificate issuer:       /CN=70427113C728F653176866A2E47D9746EA86B842
Certificate serial:       3C0C77641C6DF810927923D9AE567A05C8B9D620
Authority key identifier: 70:42:71:13:C7:28:F6:53:17:68:66:A2:E4:7D:97:46:EA:86:B8:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70427113C728F653176866A2E47D9746EA86B842.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/323830343a383638343a363030303a3a2f33362d3336203d3e20323732363439.roa
Signing time:             Tue 21 Nov 2023 15:11:19 +0000
ROA not before:           Tue 21 Nov 2023 15:06:19 +0000
ROA not after:            Tue 19 Nov 2024 15:11:19 +0000
asID:                     272649
IP address blocks:        2804:8684:6000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:0c:77:64:1c:6d:f8:10:92:79:23:d9:ae:56:7a:05:c8:b9:d6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70427113C728F653176866A2E47D9746EA86B842
        Validity
            Not Before: Nov 21 15:06:19 2023 GMT
            Not After : Nov 19 15:11:19 2024 GMT
        Subject: CN=01C19D91295999D913C625F286676DDF45EF665F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:90:45:63:92:e8:07:3f:7a:9f:ea:1e:6d:32:
                    01:30:cf:fc:b0:c8:c7:bb:45:43:93:e2:4e:23:a0:
                    da:1a:5d:93:b0:64:c9:da:20:5a:48:b6:d3:57:77:
                    76:20:ac:0c:78:e3:bc:56:17:75:20:dc:a5:f2:86:
                    f6:06:7f:d8:97:42:8c:08:4f:0c:80:48:38:82:e7:
                    c6:b9:40:e6:91:05:13:0e:2a:b8:58:2c:91:70:6b:
                    4d:56:0a:54:b5:9d:18:6d:3e:18:3d:d4:76:9f:56:
                    af:6f:3a:6c:4a:a6:29:43:c9:6b:09:7a:5d:13:06:
                    8a:d2:55:12:72:94:c4:91:fe:ac:4e:a9:27:8b:2f:
                    c4:84:f3:30:3b:9e:02:de:01:e2:b8:11:bd:f5:cb:
                    e8:8b:35:7a:5a:0a:6d:a1:50:91:43:b5:51:f5:a0:
                    63:9c:ff:61:23:2c:39:67:72:5c:40:0e:41:db:f5:
                    aa:ec:66:6c:fe:00:f3:3b:32:5b:2e:d1:1a:67:99:
                    7d:be:2d:b5:1f:66:a9:ee:49:88:c6:cb:99:bf:f4:
                    6b:ea:e0:9d:d0:9b:b9:85:39:ca:22:ab:78:e3:ea:
                    ab:85:d3:78:41:68:c0:47:16:b2:f6:aa:b0:c3:6e:
                    c2:b0:e4:d6:6f:41:41:56:d8:19:29:03:f9:e9:8a:
                    6e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C1:9D:91:29:59:99:D9:13:C6:25:F2:86:67:6D:DF:45:EF:66:5F
            X509v3 Authority Key Identifier:
                keyid:70:42:71:13:C7:28:F6:53:17:68:66:A2:E4:7D:97:46:EA:86:B8:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/70427113C728F653176866A2E47D9746EA86B842.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70427113C728F653176866A2E47D9746EA86B842.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/323830343a383638343a363030303a3a2f33362d3336203d3e20323732363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8684:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         00:3f:1b:89:ce:a0:99:2d:21:80:3c:99:ac:a8:c7:04:b0:fa:
         e3:91:78:c0:e3:fb:49:de:4d:6c:3d:eb:f4:8c:37:cb:88:4e:
         0c:49:e2:24:2e:0f:aa:20:3b:f4:6a:3e:08:f2:fb:28:60:86:
         26:2b:fe:b7:86:78:17:7e:b2:e8:0c:2f:ca:31:c8:e4:37:c2:
         03:b4:ad:f6:a7:b1:42:be:06:c7:7e:76:61:ed:b3:a9:e6:1e:
         0b:39:29:1e:e6:ef:59:ab:62:15:65:c1:9b:46:ea:a6:76:61:
         f7:48:03:a3:9e:7b:ca:95:1e:b3:f3:d3:70:46:71:41:92:f9:
         18:bf:c4:6b:e5:c2:a9:64:db:b2:d2:d9:83:55:1a:4d:b6:4c:
         3b:7b:80:05:53:c6:87:ff:7b:72:06:1a:e1:1a:57:f3:23:59:
         9b:4d:cb:11:44:62:b9:25:69:de:cb:dd:c5:b8:60:5f:93:d1:
         85:09:e1:fa:e3:5d:cd:32:b5:ea:2b:42:ed:01:56:90:1e:c1:
         1d:29:68:fe:84:e6:2a:54:78:2c:16:4e:85:7d:2e:8f:85:b1:
         bb:b9:f2:04:8e:91:66:f9:3a:a4:f6:7f:76:95:30:77:08:85:
         5c:7e:ad:22:84:40:a2:e8:f7:be:bd:5f:32:28:35:a9:1e:c1:
         8f:a5:56:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:54:11 2025 by rpki-client