Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/323830343a343861343a3a2f33322d3335203d3e20323637313335.roa
File:                     323830343a343861343a3a2f33322d3335203d3e20323637313335.roa (raw, json)
Hash identifier:          En6+RLvoLJ+x+4xum7jDpF/1VPB5/7RGyOY7t/Y0ivY=
Subject key identifier:   91:F8:4E:7B:5E:5F:2E:44:E9:23:D9:AD:00:66:26:90:86:68:51:5E
Certificate issuer:       /CN=057E8B4D96A4CE7F95D7F4C270B997A5E00128D9
Certificate serial:       28DDD8A416713F5BC76AAF831C698890D022EC2A
Authority key identifier: 05:7E:8B:4D:96:A4:CE:7F:95:D7:F4:C2:70:B9:97:A5:E0:01:28:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/057E8B4D96A4CE7F95D7F4C270B997A5E00128D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/323830343a343861343a3a2f33322d3335203d3e20323637313335.roa
Signing time:             Thu 22 Sep 2022 12:21:16 +0000
ROA not before:           Thu 22 Sep 2022 12:16:16 +0000
ROA not after:            Thu 21 Sep 2023 12:21:16 +0000
asID:                     267135
IP address blocks:        2804:48a4::/32 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:dd:d8:a4:16:71:3f:5b:c7:6a:af:83:1c:69:88:90:d0:22:ec:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=057E8B4D96A4CE7F95D7F4C270B997A5E00128D9
        Validity
            Not Before: Sep 22 12:16:16 2022 GMT
            Not After : Sep 21 12:21:16 2023 GMT
        Subject: CN=91F84E7B5E5F2E44E923D9AD006626908668515E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:af:ab:fa:08:43:23:2b:76:03:55:6d:b5:7f:
                    35:2f:68:76:0e:6f:27:8f:8a:15:20:34:95:cd:59:
                    e1:e6:8e:24:13:e8:27:db:e1:63:f3:bd:ac:fb:02:
                    1f:bd:25:be:0e:11:43:f8:bb:6d:2f:15:3c:25:97:
                    1a:a8:c6:72:91:50:8b:2c:80:3d:99:38:d0:0d:5f:
                    b5:57:77:bb:e8:6a:24:42:63:1d:23:d7:a9:70:4e:
                    a7:0e:6c:fd:8b:61:21:61:67:f2:13:68:12:9c:24:
                    69:a0:cc:7e:3a:f4:81:aa:b2:54:6e:51:1d:e2:fa:
                    6c:6b:a9:a6:02:1a:a2:0a:8d:28:d1:57:d9:a3:a6:
                    b1:79:d4:cd:2c:6c:ab:4f:32:7d:1b:0d:23:5e:45:
                    d7:23:d6:d1:ed:7e:8c:96:6e:3f:3a:16:b5:3b:1d:
                    51:77:f5:7d:0d:f4:3d:9d:96:9c:52:46:f2:8a:7f:
                    97:32:3a:80:5b:19:d8:07:24:c5:d9:04:24:4b:7d:
                    10:6f:ad:0a:e6:62:76:da:12:d7:e4:1c:bd:11:9e:
                    a8:74:a5:b6:97:24:61:41:93:ad:53:90:5b:ad:86:
                    66:72:12:b2:7a:6a:5e:14:ea:8a:7c:5a:50:bc:ed:
                    7e:69:26:de:16:90:00:8f:88:aa:24:44:46:21:4e:
                    f2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F8:4E:7B:5E:5F:2E:44:E9:23:D9:AD:00:66:26:90:86:68:51:5E
            X509v3 Authority Key Identifier:
                keyid:05:7E:8B:4D:96:A4:CE:7F:95:D7:F4:C2:70:B9:97:A5:E0:01:28:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/057E8B4D96A4CE7F95D7F4C270B997A5E00128D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/057E8B4D96A4CE7F95D7F4C270B997A5E00128D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/323830343a343861343a3a2f33322d3335203d3e20323637313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:48a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:31:90:a2:f3:6d:5a:c5:f9:f4:6b:84:4a:7b:23:ab:16:c7:
         10:2a:2a:d0:0a:4c:2a:a2:6b:3b:44:f1:05:62:1e:73:fd:da:
         d1:36:9d:d8:7b:2a:64:f1:8d:5d:af:c9:0d:3b:0d:54:07:58:
         5e:26:97:e1:a8:c3:a9:7d:04:56:eb:ec:b4:33:86:83:e0:9b:
         5a:83:9b:00:4d:86:52:c3:8d:45:36:5d:f6:70:4a:3c:1a:4d:
         dd:ee:3a:d3:11:9a:aa:18:da:fe:ae:74:75:7c:3a:39:1d:02:
         9d:d2:85:5d:d2:27:c6:95:35:61:ac:8a:c0:40:6c:26:d9:2b:
         80:05:0e:98:d0:66:de:58:83:49:d1:10:46:81:1a:6e:ce:ac:
         70:aa:e1:b7:c9:e3:9a:f2:19:7b:20:dd:95:47:20:7e:b0:fe:
         cf:85:49:33:85:b3:44:98:24:88:7f:38:65:60:c6:09:71:02:
         1f:32:8a:f4:7d:ec:ea:f8:b7:ac:35:c7:d7:d0:3f:de:f8:8a:
         65:fe:0f:0b:69:18:95:bb:1b:fc:3d:75:41:c8:da:67:1e:a8:
         3d:61:d8:f5:21:24:d0:34:cc:f6:60:ac:da:99:8d:72:09:46:
         a1:39:6c:e9:3f:9c:46:c8:08:ec:5a:7e:27:c4:af:57:69:a5:
         69:34:61:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:32:15 2025 by rpki-client