Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/323830343a373636383a343030303a3a2f33352d3335203d3e20323731313130.roa
File:                     323830343a373636383a343030303a3a2f33352d3335203d3e20323731313130.roa (raw, json)
Hash identifier:          reKh3/57tWGPtaOjy2k9B/bUnC90+5fdEKL0Ou8nWpA=
Subject key identifier:   A1:87:8F:59:37:10:94:CB:B9:D6:E8:39:18:F9:00:99:09:2B:2A:75
Certificate issuer:       /CN=8525A6BC54DB2BC4E1439EF172B907CDEF59A2FE
Certificate serial:       4B6AA2F4F58C727B91850A69694C09DC2D5E80D4
Authority key identifier: 85:25:A6:BC:54:DB:2B:C4:E1:43:9E:F1:72:B9:07:CD:EF:59:A2:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8525A6BC54DB2BC4E1439EF172B907CDEF59A2FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/323830343a373636383a343030303a3a2f33352d3335203d3e20323731313130.roa
Signing time:             Thu 21 Jul 2022 20:07:38 +0000
ROA not before:           Thu 21 Jul 2022 20:02:38 +0000
ROA not after:            Thu 20 Jul 2023 20:07:38 +0000
asID:                     271110
IP address blocks:        2804:7668:4000::/35 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:6a:a2:f4:f5:8c:72:7b:91:85:0a:69:69:4c:09:dc:2d:5e:80:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8525A6BC54DB2BC4E1439EF172B907CDEF59A2FE
        Validity
            Not Before: Jul 21 20:02:38 2022 GMT
            Not After : Jul 20 20:07:38 2023 GMT
        Subject: CN=A1878F59371094CBB9D6E83918F90099092B2A75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b4:5b:3a:f3:25:2a:2d:16:8b:7e:26:24:ba:
                    9b:6e:7b:d3:a7:28:0e:20:17:14:de:7d:d5:61:32:
                    90:34:21:a2:09:ec:90:34:f8:02:a8:f4:51:96:c9:
                    3c:20:9f:01:6c:8f:3e:61:d9:72:56:ad:71:f5:d8:
                    81:f3:86:e8:fd:88:40:24:8a:84:29:d9:21:7f:a8:
                    5a:f2:7d:e1:d3:6c:d2:ca:8c:69:b9:68:c6:19:7d:
                    19:a0:34:f8:25:6a:ed:fc:0b:08:61:34:15:a4:58:
                    4d:06:ae:2b:99:1c:fd:98:30:e7:82:c9:d4:f1:f1:
                    f4:88:44:b6:89:de:7a:fa:3a:ae:ce:3b:b3:f1:04:
                    b9:40:db:90:66:ea:25:dc:86:6d:3a:11:0e:a9:f6:
                    9d:57:cd:d8:95:5b:79:a1:ec:1d:b1:f3:da:87:6c:
                    e4:b3:76:07:65:bb:7f:98:7a:07:d4:b1:97:5a:07:
                    9b:71:d4:09:57:e4:39:4b:c7:7c:12:a7:9a:d7:d7:
                    e2:07:e7:40:4e:65:e3:02:e5:d3:f6:9b:43:fa:42:
                    3a:6a:d8:b4:ad:5a:94:7e:ae:11:96:d0:18:36:de:
                    82:c5:41:88:4f:e6:2d:b8:94:ad:4f:7f:20:15:36:
                    97:ee:71:b0:a2:ef:83:b9:0e:5b:05:03:33:a0:3d:
                    21:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:87:8F:59:37:10:94:CB:B9:D6:E8:39:18:F9:00:99:09:2B:2A:75
            X509v3 Authority Key Identifier:
                keyid:85:25:A6:BC:54:DB:2B:C4:E1:43:9E:F1:72:B9:07:CD:EF:59:A2:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/8525A6BC54DB2BC4E1439EF172B907CDEF59A2FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8525A6BC54DB2BC4E1439EF172B907CDEF59A2FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/323830343a373636383a343030303a3a2f33352d3335203d3e20323731313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7668:4000::/35

    Signature Algorithm: sha256WithRSAEncryption
         6f:90:29:fb:99:3d:7e:00:b2:47:40:b6:8e:ca:36:42:4d:03:
         47:6a:d8:df:6c:9f:39:c6:c8:fe:61:6c:db:d6:74:60:b2:4c:
         c2:97:df:7f:fa:e8:01:14:92:0f:6f:01:9d:dd:1d:97:6e:1f:
         e0:56:12:36:19:b5:05:92:f4:1a:a1:e8:d5:c5:00:55:f4:e3:
         6f:a9:2c:e3:ce:71:e4:33:61:ab:16:7a:6c:c5:ee:cb:a1:a5:
         f9:43:e0:e7:71:b8:f5:af:88:58:e7:a5:43:97:41:e8:10:fe:
         f4:cb:3c:5e:81:95:c4:7e:c6:e0:1f:ef:62:c5:d1:01:7e:9e:
         f2:9e:f5:1d:0c:06:fb:ef:0d:70:a2:9d:5d:c8:0a:68:9f:6c:
         61:0a:80:de:d0:41:52:05:99:7e:1d:32:2a:d2:6f:fb:89:94:
         5f:e5:1e:a1:09:82:11:85:60:2c:7f:a0:66:6b:a0:2d:fa:84:
         14:e6:87:ee:4e:98:bf:50:8a:6b:ba:e7:d0:dd:f7:6f:34:4b:
         cd:cf:89:8a:cc:c1:67:46:b1:5a:ec:d0:d6:64:f0:d5:1a:49:
         b8:55:3c:f6:fd:3d:d8:fc:d2:25:2e:ad:f2:c1:dd:d1:a9:87:
         2e:42:43:4a:f6:83:38:91:a2:02:74:91:a2:b5:73:91:cf:f9:
         b6:3f:41:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 22:18:45 2025 by rpki-client