Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/323830343a383638343a613030303a3a2f33362d3336203d3e20323732363439.roa
File:                     323830343a383638343a613030303a3a2f33362d3336203d3e20323732363439.roa (raw, json)
Hash identifier:          hLS2lD9HpeoDslf7NOM1FmmaUCGgZY4rDGok9e5radI=
Subject key identifier:   DF:BD:8D:B1:99:65:17:2E:1B:0B:CB:FD:0D:AA:D0:CE:B8:B9:33:96
Certificate issuer:       /CN=70427113C728F653176866A2E47D9746EA86B842
Certificate serial:       6A9A9B220568516A6BA219FADD3E103C57634217
Authority key identifier: 70:42:71:13:C7:28:F6:53:17:68:66:A2:E4:7D:97:46:EA:86:B8:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70427113C728F653176866A2E47D9746EA86B842.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/323830343a383638343a613030303a3a2f33362d3336203d3e20323732363439.roa
Signing time:             Tue 21 Nov 2023 15:11:19 +0000
ROA not before:           Tue 21 Nov 2023 15:06:19 +0000
ROA not after:            Tue 19 Nov 2024 15:11:19 +0000
asID:                     272649
IP address blocks:        2804:8684:a000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:9a:9b:22:05:68:51:6a:6b:a2:19:fa:dd:3e:10:3c:57:63:42:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70427113C728F653176866A2E47D9746EA86B842
        Validity
            Not Before: Nov 21 15:06:19 2023 GMT
            Not After : Nov 19 15:11:19 2024 GMT
        Subject: CN=DFBD8DB19965172E1B0BCBFD0DAAD0CEB8B93396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f2:82:f5:a8:0e:9c:21:8b:89:aa:21:10:c1:
                    81:b0:dd:1f:94:38:cf:f6:41:af:73:fe:f3:2a:cd:
                    23:2f:90:1c:fa:89:d3:45:4d:7f:84:8b:44:a0:30:
                    45:3d:c1:77:b2:5d:f0:d8:bd:b4:bb:02:ad:9d:e7:
                    61:0e:b6:90:bb:93:4a:8a:d3:91:0b:02:c6:b5:71:
                    54:70:68:59:1a:43:3f:db:75:85:c6:82:71:64:4a:
                    d8:8f:5f:3c:0e:31:e2:ae:87:77:c4:6c:17:d4:8a:
                    2f:3e:27:5d:ad:af:a3:20:f0:2f:a1:e2:65:26:46:
                    5f:ef:da:9e:b9:73:59:61:5a:11:e1:b5:e8:51:53:
                    7b:cf:9f:59:0d:83:aa:59:a0:5c:23:eb:45:98:b1:
                    d9:8f:21:7f:ee:a8:36:42:8e:9f:0b:cc:7f:b3:bd:
                    44:2c:85:35:ec:c4:cd:e3:97:7f:c9:0c:11:18:b9:
                    33:20:38:da:ad:30:47:61:04:fc:e7:c7:f0:a8:7c:
                    65:7c:cc:11:e3:e0:48:31:3b:27:27:19:13:e8:14:
                    c5:0a:44:55:4d:b2:f8:18:d9:6c:07:72:7c:57:8f:
                    4c:9a:53:2e:c5:62:ef:63:43:1b:61:79:da:65:c6:
                    79:3c:33:9f:5e:21:81:6a:da:d5:71:cf:42:97:e1:
                    47:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:BD:8D:B1:99:65:17:2E:1B:0B:CB:FD:0D:AA:D0:CE:B8:B9:33:96
            X509v3 Authority Key Identifier:
                keyid:70:42:71:13:C7:28:F6:53:17:68:66:A2:E4:7D:97:46:EA:86:B8:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/70427113C728F653176866A2E47D9746EA86B842.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70427113C728F653176866A2E47D9746EA86B842.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/323830343a383638343a613030303a3a2f33362d3336203d3e20323732363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8684:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5b:13:ff:ee:89:56:7b:91:47:36:d0:fc:b6:4e:9c:28:5d:37:
         b7:c8:c2:d0:38:13:82:91:e0:3b:02:6d:91:72:1d:cc:8d:d4:
         a5:66:98:73:3d:ce:28:0b:e8:7a:9e:2a:da:e0:a8:c1:a2:65:
         83:3c:af:4a:33:97:4a:3c:56:80:85:a9:24:dc:f8:c9:91:5b:
         9c:ee:56:cc:3b:5c:5f:35:04:cd:ac:05:74:64:5c:8f:e5:17:
         23:a9:1e:3b:da:d7:f8:fc:50:0a:67:b0:e4:0a:5a:14:45:8b:
         6f:b5:1d:07:b4:f0:b8:b5:6e:eb:e3:cb:87:3b:6c:03:05:a8:
         e8:a2:d7:02:43:73:72:f1:da:bf:e0:1c:02:ef:72:9b:74:28:
         bb:3f:05:75:bf:fb:ca:68:58:e0:6f:b2:2c:3f:37:0c:90:12:
         77:a2:92:ab:fc:2a:4f:57:ff:a5:25:5a:30:fb:34:ee:3d:a2:
         79:b3:e6:a2:94:73:8e:5f:a0:d4:88:65:e5:66:fa:96:02:f7:
         03:cd:1a:e6:bb:d6:91:37:f5:22:cd:2f:23:1b:b4:44:5e:56:
         56:25:76:f0:8e:26:1e:95:3f:ac:89:cc:f8:7a:cb:8f:ea:6f:
         b5:78:83:7f:a7:0b:b3:c2:43:a4:fd:37:8e:b6:cb:8e:1b:44:
         00:d0:ec:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:09:19 2025 by rpki-client