Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/323830343a353561303a3a2f33322d3438203d3e20323637393436.roa
File:                     323830343a353561303a3a2f33322d3438203d3e20323637393436.roa (raw, json)
Hash identifier:          xcbrSh1UdnpkdoVA/wA9vgkm+EwTlsZt1DOaJsTbv4A=
Subject key identifier:   0F:2E:BE:23:86:92:C7:7E:CA:0A:27:6D:37:88:41:B6:6C:2F:C7:F4
Certificate issuer:       /CN=AFE278875684A95688481FDA0240406D1EA7F004
Certificate serial:       01074F509EA653BAF1BB670E011938D112BC3F70
Authority key identifier: AF:E2:78:87:56:84:A9:56:88:48:1F:DA:02:40:40:6D:1E:A7:F0:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFE278875684A95688481FDA0240406D1EA7F004.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/323830343a353561303a3a2f33322d3438203d3e20323637393436.roa
Signing time:             Wed 29 Mar 2023 15:53:40 +0000
ROA not before:           Wed 29 Mar 2023 15:48:40 +0000
ROA not after:            Wed 27 Mar 2024 15:53:40 +0000
asID:                     267946
IP address blocks:        2804:55a0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:07:4f:50:9e:a6:53:ba:f1:bb:67:0e:01:19:38:d1:12:bc:3f:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFE278875684A95688481FDA0240406D1EA7F004
        Validity
            Not Before: Mar 29 15:48:40 2023 GMT
            Not After : Mar 27 15:53:40 2024 GMT
        Subject: CN=0F2EBE238692C77ECA0A276D378841B66C2FC7F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:da:b5:ae:af:b6:d9:39:cd:ff:ce:aa:31:4f:
                    2e:e4:3a:54:e9:0a:57:37:1c:8b:ea:1a:cc:5b:0e:
                    c9:1e:f6:6b:eb:55:af:6f:b4:57:30:a3:2e:19:3a:
                    15:d2:2a:99:a5:26:e2:c1:ba:52:78:08:3d:98:e0:
                    d2:5b:39:a1:03:a9:7e:2d:2a:52:d6:ec:e7:4f:5b:
                    70:77:f7:9d:7f:22:bb:d8:78:45:7c:d2:cf:49:d5:
                    2b:b4:78:17:e9:08:32:76:b0:a1:82:06:d0:6d:be:
                    c0:18:bf:66:94:7b:93:ed:b1:c2:fc:0c:12:85:07:
                    03:82:80:47:1f:8c:15:50:30:45:eb:cd:df:e2:18:
                    a4:98:d4:24:ca:b5:23:60:44:a5:6f:44:d3:00:7d:
                    bb:02:06:4a:af:a7:f7:75:8a:a4:9f:be:74:13:e1:
                    ee:cb:75:09:bc:d9:47:96:e8:50:46:53:1f:c3:22:
                    20:73:37:84:6a:74:db:75:38:b2:22:51:f2:ab:3d:
                    cd:77:79:21:b6:60:b9:88:6c:32:fd:5f:c8:66:ed:
                    4e:6d:74:34:41:eb:41:b2:69:6a:f9:44:d9:ac:83:
                    6f:54:9c:c0:cf:e3:9c:e5:28:0a:8d:3e:29:ed:c2:
                    18:de:99:7f:9b:83:a9:35:65:eb:78:4d:66:c5:e0:
                    f0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:2E:BE:23:86:92:C7:7E:CA:0A:27:6D:37:88:41:B6:6C:2F:C7:F4
            X509v3 Authority Key Identifier:
                keyid:AF:E2:78:87:56:84:A9:56:88:48:1F:DA:02:40:40:6D:1E:A7:F0:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/AFE278875684A95688481FDA0240406D1EA7F004.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFE278875684A95688481FDA0240406D1EA7F004.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/323830343a353561303a3a2f33322d3438203d3e20323637393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:55a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:45:f6:3c:64:d4:dd:c1:7d:43:31:ca:c3:03:b4:c0:39:a5:
         1e:43:a8:92:eb:e5:d2:1a:0f:9b:39:1e:15:cb:b8:92:b3:7d:
         f0:e3:03:31:b2:13:03:32:02:f8:4a:b5:57:bf:8d:1d:c5:25:
         25:35:bf:b3:47:c2:3d:c8:3d:b8:ae:04:df:cf:38:3d:dc:92:
         4e:4c:2c:05:0e:1f:86:23:cb:bd:e8:d0:45:fa:50:b0:64:b2:
         58:16:e0:04:25:7e:ef:fd:85:b2:11:33:6a:24:64:32:2e:f6:
         c9:9b:84:64:7f:89:3c:e6:b6:b0:d6:19:cd:11:84:e6:38:32:
         ca:7f:81:14:8a:e9:47:19:35:eb:a3:b8:e8:fa:4d:9f:7f:b8:
         38:de:4e:fb:b6:ed:2d:90:85:07:30:a9:7b:77:28:68:62:07:
         b9:7e:b5:9d:3c:f7:fd:5b:0e:dc:3e:62:0b:45:f1:2a:b9:1e:
         32:26:73:c2:ff:ef:e1:d3:01:bc:cd:b0:49:e0:1d:1c:0b:02:
         22:71:27:da:27:8c:26:fd:37:8f:fa:21:5e:f4:5d:d8:ee:09:
         09:9f:5d:79:6d:02:ae:77:7f:ef:d8:e6:24:a6:50:10:e1:4b:
         26:05:78:63:7c:6f:fa:6d:c8:14:cc:39:12:9b:b4:50:14:8e:
         4b:0b:a2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:00:59 2025 by rpki-client