Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/323830343a6264383a363030303a3a2f34302d3430203d3e203532383338.roa
File:                     323830343a6264383a363030303a3a2f34302d3430203d3e203532383338.roa (raw, json)
Hash identifier:          LwBBWDctvlHk1Nyf3A7V/MCUW90j5at/ohVP0UeXKq8=
Subject key identifier:   F6:73:95:D4:50:41:8B:01:76:AE:E6:A9:C0:77:8C:67:AC:DA:A7:57
Certificate issuer:       /CN=CD71344C46FD5D9EF1EA61A2EDF9769851E16BE2
Certificate serial:       7EB4FBF1602313712910C3BB0C547E7D4D7CF761
Authority key identifier: CD:71:34:4C:46:FD:5D:9E:F1:EA:61:A2:ED:F9:76:98:51:E1:6B:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD71344C46FD5D9EF1EA61A2EDF9769851E16BE2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/323830343a6264383a363030303a3a2f34302d3430203d3e203532383338.roa
Signing time:             Tue 14 Jun 2022 20:08:57 +0000
ROA not before:           Tue 14 Jun 2022 20:03:57 +0000
ROA not after:            Tue 13 Jun 2023 20:08:57 +0000
asID:                     52838
IP address blocks:        2804:bd8:6000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:b4:fb:f1:60:23:13:71:29:10:c3:bb:0c:54:7e:7d:4d:7c:f7:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD71344C46FD5D9EF1EA61A2EDF9769851E16BE2
        Validity
            Not Before: Jun 14 20:03:57 2022 GMT
            Not After : Jun 13 20:08:57 2023 GMT
        Subject: CN=F67395D450418B0176AEE6A9C0778C67ACDAA757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:63:a0:08:98:bc:f9:98:80:67:24:fa:ba:ba:
                    4c:c6:cb:7a:d5:9d:d9:66:5c:43:0d:a0:c6:f2:38:
                    65:06:25:6f:14:8d:8b:26:c3:50:90:2e:b2:2e:02:
                    76:64:64:b9:ee:63:49:d1:3a:e4:0f:46:d2:ca:98:
                    71:a4:fd:2f:8c:3e:85:a4:fc:ca:11:26:70:e5:65:
                    6b:61:19:4d:30:dc:db:69:31:30:71:c5:87:f7:f8:
                    91:ae:1f:f3:97:f7:e7:1b:71:8f:d3:73:ea:4f:d7:
                    70:98:5d:26:16:f4:95:88:9a:fd:25:1e:c8:86:59:
                    47:ee:c1:56:8b:97:3d:0e:c5:85:1e:8d:6d:8d:4b:
                    c8:20:2c:d4:8b:57:9c:ad:aa:e5:64:3b:b2:8e:87:
                    3a:25:45:8a:69:e7:e5:2d:55:9d:e3:22:78:a0:e8:
                    70:a9:1d:50:de:4d:c6:6a:b7:7f:8d:27:ea:76:66:
                    0e:72:15:0c:ad:a1:00:07:1a:72:6b:4a:3b:4d:e5:
                    71:30:7e:6a:91:2c:20:d8:a8:91:9a:1a:31:27:0a:
                    d9:b4:c6:9d:ab:b4:e3:c4:46:95:f2:67:ad:d1:34:
                    5f:f2:61:df:3d:91:81:82:85:b6:15:f9:a1:02:8b:
                    a3:18:64:eb:0b:37:51:cb:f5:80:93:5c:9f:50:06:
                    95:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:73:95:D4:50:41:8B:01:76:AE:E6:A9:C0:77:8C:67:AC:DA:A7:57
            X509v3 Authority Key Identifier:
                keyid:CD:71:34:4C:46:FD:5D:9E:F1:EA:61:A2:ED:F9:76:98:51:E1:6B:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/CD71344C46FD5D9EF1EA61A2EDF9769851E16BE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD71344C46FD5D9EF1EA61A2EDF9769851E16BE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/323830343a6264383a363030303a3a2f34302d3430203d3e203532383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:bd8:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         ee:0f:e2:2c:0b:dd:e3:cb:c6:e9:31:c0:ea:6f:26:54:dd:e1:
         c9:80:18:d9:c2:40:77:33:ab:18:90:ec:74:dd:46:2c:1c:0f:
         38:82:4f:5e:0a:23:cd:7a:61:0f:23:44:e2:63:01:62:96:d4:
         a4:e0:10:65:60:a8:e5:a3:6d:81:b2:0f:0f:a4:2d:e3:00:7d:
         25:9b:a4:27:60:d7:1b:43:00:ac:cf:fe:68:84:01:e7:e7:7d:
         3f:fe:90:4f:05:65:8e:68:75:76:c0:55:64:30:ec:d7:8a:2f:
         2b:29:cb:67:23:ca:52:5a:b2:6a:15:86:37:af:cc:fa:93:8f:
         5a:b2:42:b4:04:ad:31:eb:dd:47:50:9f:78:59:81:26:8e:ba:
         31:59:e7:c7:6b:7b:14:61:05:19:9c:78:f5:bc:a1:2c:55:31:
         6b:99:d2:6d:79:3e:40:40:de:2e:65:c7:24:be:3a:52:6c:91:
         49:34:4d:f2:29:c3:3a:c7:af:a9:99:81:3d:a3:ad:c6:be:0c:
         6d:23:09:1f:97:b6:a4:1a:68:93:9a:d8:43:cb:88:3b:fa:ca:
         10:66:21:07:1b:3d:c3:db:4a:9e:16:5f:ca:fd:ac:dd:b7:c9:
         45:88:b4:d4:3a:37:1a:c3:81:ce:b7:23:b5:95:fe:43:1b:94:
         33:ab:c2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:57:33 2025 by rpki-client