Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/An6jZxdmRkZFkT6ke6gfu58UgAXBE4bg6UVJJ2hC8dx4/0/323830343a343565343a3a2f33322d3438203d3e20323632353637.roa
File:                     323830343a343565343a3a2f33322d3438203d3e20323632353637.roa (raw, json)
Hash identifier:          u0rQRwUovyu8Y0Ze8ZzZHyV+fPLzT6CpPPM9F6QsEE4=
Subject key identifier:   5E:3F:ED:CD:B1:B5:35:47:76:3F:F4:DD:1A:53:D9:EB:AF:86:F0:1B
Certificate issuer:       /CN=B8D0D3DA6A51FDE98C7B4CFB0B6A16FCBA8BAA4B
Certificate serial:       2D78F1F8806182D7AD43476FA0B3A57A7D67ACF6
Authority key identifier: B8:D0:D3:DA:6A:51:FD:E9:8C:7B:4C:FB:0B:6A:16:FC:BA:8B:AA:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8D0D3DA6A51FDE98C7B4CFB0B6A16FCBA8BAA4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/An6jZxdmRkZFkT6ke6gfu58UgAXBE4bg6UVJJ2hC8dx4/0/323830343a343565343a3a2f33322d3438203d3e20323632353637.roa
Signing time:             Fri 07 Oct 2022 00:42:05 +0000
ROA not before:           Fri 07 Oct 2022 00:37:05 +0000
ROA not after:            Fri 06 Oct 2023 00:42:05 +0000
asID:                     262567
IP address blocks:        2804:45e4::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:78:f1:f8:80:61:82:d7:ad:43:47:6f:a0:b3:a5:7a:7d:67:ac:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8D0D3DA6A51FDE98C7B4CFB0B6A16FCBA8BAA4B
        Validity
            Not Before: Oct  7 00:37:05 2022 GMT
            Not After : Oct  6 00:42:05 2023 GMT
        Subject: CN=5E3FEDCDB1B53547763FF4DD1A53D9EBAF86F01B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:ed:0c:8f:08:92:3d:21:63:40:29:fb:69:d9:
                    40:cf:3a:83:df:11:24:3c:bd:46:e8:c0:02:b4:26:
                    38:86:da:08:53:f3:9f:dd:ee:a8:7e:24:c4:2a:0b:
                    51:68:f9:5e:a7:4c:7e:e9:f2:61:96:af:6a:af:b6:
                    e3:2f:9f:c3:3a:45:fc:37:94:2d:91:94:d1:57:73:
                    ab:8a:ac:27:c8:e4:f3:f4:e9:19:6e:93:f7:3e:cd:
                    5d:dc:5e:31:ce:19:08:cf:64:60:65:3e:0b:9a:58:
                    df:78:93:10:66:31:f0:c5:19:0b:35:d7:49:c9:2e:
                    7d:10:47:8c:ee:ac:96:0c:64:63:a2:97:6f:92:1d:
                    f7:e7:9d:1a:0c:ee:94:d8:d4:cb:1b:13:86:5c:5f:
                    56:53:73:7e:14:63:bc:8a:58:d1:86:5e:02:d5:cd:
                    70:4e:7d:f0:ae:19:59:a7:b6:7e:f1:9a:1a:74:3a:
                    0d:0e:a5:9d:76:00:2f:30:95:4b:e1:a5:cd:70:de:
                    c4:34:52:31:4d:df:f8:5b:f7:f2:9d:66:b0:64:7d:
                    ad:54:3d:ae:de:82:38:ce:7f:92:21:50:01:5a:6f:
                    42:e2:9a:dc:95:5d:da:33:d7:c9:e4:1b:65:64:1b:
                    a4:0a:18:a1:fb:fb:38:66:48:95:43:fc:24:d5:80:
                    40:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:3F:ED:CD:B1:B5:35:47:76:3F:F4:DD:1A:53:D9:EB:AF:86:F0:1B
            X509v3 Authority Key Identifier:
                keyid:B8:D0:D3:DA:6A:51:FD:E9:8C:7B:4C:FB:0B:6A:16:FC:BA:8B:AA:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/An6jZxdmRkZFkT6ke6gfu58UgAXBE4bg6UVJJ2hC8dx4/0/B8D0D3DA6A51FDE98C7B4CFB0B6A16FCBA8BAA4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8D0D3DA6A51FDE98C7B4CFB0B6A16FCBA8BAA4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/An6jZxdmRkZFkT6ke6gfu58UgAXBE4bg6UVJJ2hC8dx4/0/323830343a343565343a3a2f33322d3438203d3e20323632353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:45e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         c7:b8:3b:9b:43:74:13:59:a7:53:0d:9c:6f:c0:11:96:fa:05:
         37:ef:15:33:b0:6a:fd:b8:ee:ed:dc:13:bd:4d:97:a3:fe:f7:
         5e:0d:9d:8f:7d:26:fc:0b:23:e5:ca:11:f1:01:60:8f:b5:9f:
         db:3c:d4:1b:d7:66:02:09:1f:52:3e:49:c4:aa:5b:36:b2:9b:
         8a:93:5a:17:6c:e8:f0:03:8f:7e:d2:51:96:ff:1a:0f:9f:8b:
         4b:cb:0b:2e:a5:e9:55:6b:78:45:fd:50:b1:11:b0:99:ff:96:
         06:bc:42:d9:cb:53:0a:63:6d:33:ed:1d:9f:67:47:5d:4a:82:
         39:71:7e:4f:25:c2:86:c8:29:8f:fa:2a:59:af:4c:18:99:03:
         9d:6d:01:2b:70:7b:5e:cd:bc:68:e2:45:3a:c4:e8:c9:16:87:
         33:9b:36:60:f2:86:b3:b9:14:e7:6d:82:01:b8:06:d5:76:3a:
         b5:3b:23:15:39:de:fb:e7:ad:dd:70:49:3b:6c:57:97:fe:3e:
         ed:c3:c2:5e:db:f4:db:15:40:12:05:6e:7c:1a:7d:ca:ba:d5:
         4a:b7:0f:93:98:0d:e5:04:12:66:a8:0c:a4:84:3c:b9:7b:62:
         ce:45:e6:54:91:16:71:76:59:b0:c1:88:28:a1:55:e3:c3:4a:
         28:ce:35:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 16:33:24 2025 by rpki-client