Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/323830343a363566303a3a2f33322d3333203d3e20323639353234.roa
File:                     323830343a363566303a3a2f33322d3333203d3e20323639353234.roa (raw, json)
Hash identifier:          cVtW9UjLk41aG8ks3ForABpNbFa3gvwFx5I+aqCSlIA=
Subject key identifier:   7B:EC:C2:ED:D0:7A:A2:24:A1:4D:07:A5:A7:57:38:34:EB:CA:13:36
Certificate issuer:       /CN=5CFD4BD8357F505D6CB1A47E9C153D57129592B6
Certificate serial:       1DF1E83E7ED68A890258D9D43508012B82137CE7
Authority key identifier: 5C:FD:4B:D8:35:7F:50:5D:6C:B1:A4:7E:9C:15:3D:57:12:95:92:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFD4BD8357F505D6CB1A47E9C153D57129592B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/323830343a363566303a3a2f33322d3333203d3e20323639353234.roa
Signing time:             Fri 15 Jul 2022 20:35:07 +0000
ROA not before:           Fri 15 Jul 2022 20:30:07 +0000
ROA not after:            Fri 14 Jul 2023 20:35:07 +0000
asID:                     269524
IP address blocks:        2804:65f0::/32 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:f1:e8:3e:7e:d6:8a:89:02:58:d9:d4:35:08:01:2b:82:13:7c:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CFD4BD8357F505D6CB1A47E9C153D57129592B6
        Validity
            Not Before: Jul 15 20:30:07 2022 GMT
            Not After : Jul 14 20:35:07 2023 GMT
        Subject: CN=7BECC2EDD07AA224A14D07A5A7573834EBCA1336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:40:d3:1e:7e:d7:85:94:cd:cb:c0:df:fa:ca:
                    1f:bf:56:ab:ef:49:b2:52:8a:4d:69:2e:bc:5f:07:
                    2d:55:92:7b:12:f5:2c:b8:f9:dd:07:f2:9b:0c:ec:
                    72:27:ee:2c:35:e2:76:14:5d:4c:a2:e0:1b:08:96:
                    a9:b3:56:3c:71:7e:19:01:de:01:c1:3b:98:c8:77:
                    ab:6f:35:c6:ab:79:33:47:7f:9c:f0:85:b5:75:88:
                    1a:61:69:83:11:77:db:b7:01:5c:84:b4:9e:bd:4b:
                    bb:4b:3f:c7:a0:22:41:98:6f:47:df:05:90:c3:e5:
                    53:8e:1f:de:63:cb:01:74:7f:0f:44:c6:4b:0a:65:
                    1f:25:a8:17:f6:77:ba:b5:4d:40:81:5a:32:6b:38:
                    52:d5:3e:bc:66:3b:c1:4e:3c:bd:f1:80:3f:da:d7:
                    62:0a:8e:e3:ad:23:26:80:94:7d:61:f3:d9:d4:0d:
                    1b:4e:80:27:00:a8:4c:ed:12:c2:c4:65:b7:75:07:
                    3c:84:8f:e8:d8:61:f3:fb:d9:9a:b3:cf:62:de:9e:
                    4f:3d:45:fa:a5:ba:fa:6b:01:db:ce:6e:3d:2c:74:
                    ac:70:c7:e6:39:97:46:2e:7b:f4:17:22:08:13:cc:
                    cd:7a:bb:84:f0:5f:ec:1e:0a:0e:1d:59:7a:6e:be:
                    4c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:EC:C2:ED:D0:7A:A2:24:A1:4D:07:A5:A7:57:38:34:EB:CA:13:36
            X509v3 Authority Key Identifier:
                keyid:5C:FD:4B:D8:35:7F:50:5D:6C:B1:A4:7E:9C:15:3D:57:12:95:92:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/5CFD4BD8357F505D6CB1A47E9C153D57129592B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFD4BD8357F505D6CB1A47E9C153D57129592B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/323830343a363566303a3a2f33322d3333203d3e20323639353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:65f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:0a:83:f4:1d:cb:ff:60:64:5e:92:8f:9a:eb:60:58:e8:99:
         18:44:22:d0:77:f5:2f:77:70:ab:d0:af:b8:ad:a7:15:04:82:
         a2:76:db:7d:76:bd:fc:02:25:f5:b8:5b:f4:37:69:08:c4:1f:
         ae:49:df:b1:ad:04:fe:17:87:b4:eb:e7:6d:88:35:55:28:58:
         e6:c6:4d:2c:ea:19:41:c3:c5:87:89:ea:42:19:59:a3:db:2e:
         67:5d:e8:dd:81:e5:de:40:0f:8f:db:11:72:fd:58:58:cc:50:
         43:78:b1:02:f0:f0:a0:c3:1d:30:86:1a:e7:c8:c2:b5:a2:53:
         f0:9f:b2:0c:3c:45:14:64:67:4f:f4:07:2e:fa:0c:5d:10:7e:
         06:db:2f:05:39:de:26:d7:87:4e:47:ea:c7:37:b9:65:1e:97:
         fa:a1:02:5e:5f:e6:b5:02:1a:3b:c8:db:6f:73:da:0f:f8:c9:
         cc:fe:ab:3d:59:a8:86:15:44:5c:54:d1:ef:d0:91:6a:5e:39:
         86:47:56:53:13:cd:fb:b7:05:3b:48:01:56:7d:58:74:ff:25:
         63:c1:bc:be:55:c8:df:c3:5f:82:04:76:e6:76:18:2e:5d:3c:
         b7:55:96:44:5f:e5:4d:66:8e:cd:b9:2c:3e:71:39:a7:ac:15:
         02:85:37:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:55:32 2025 by rpki-client