Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/0/323830343a333932303a343030303a3a2f34302d3430203d3e20323636303133.roa
File:                     323830343a333932303a343030303a3a2f34302d3430203d3e20323636303133.roa (raw, json)
Hash identifier:          ULGg3ysqPcuavyOYny+14kyP3siDevNM898NnAENEHc=
Subject key identifier:   75:88:93:33:D5:76:29:B5:93:20:1C:61:E7:33:AF:06:72:41:37:35
Certificate issuer:       /CN=3E391CDC3CC1BDEEC274362D8C82DA54383DDA7B
Certificate serial:       6ED283F5D7383D93E85B974F68C15F9EDD22852B
Authority key identifier: 3E:39:1C:DC:3C:C1:BD:EE:C2:74:36:2D:8C:82:DA:54:38:3D:DA:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E391CDC3CC1BDEEC274362D8C82DA54383DDA7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/0/323830343a333932303a343030303a3a2f34302d3430203d3e20323636303133.roa
Signing time:             Tue 26 Jul 2022 14:46:17 +0000
ROA not before:           Tue 26 Jul 2022 14:41:17 +0000
ROA not after:            Tue 25 Jul 2023 14:46:17 +0000
asID:                     266013
IP address blocks:        2804:3920:4000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:d2:83:f5:d7:38:3d:93:e8:5b:97:4f:68:c1:5f:9e:dd:22:85:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E391CDC3CC1BDEEC274362D8C82DA54383DDA7B
        Validity
            Not Before: Jul 26 14:41:17 2022 GMT
            Not After : Jul 25 14:46:17 2023 GMT
        Subject: CN=75889333D57629B593201C61E733AF0672413735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0c:17:83:56:26:78:01:76:42:8e:36:7b:d5:
                    37:2f:3c:8a:dd:e6:52:d8:91:8b:1d:59:43:8d:ce:
                    9b:77:32:05:ab:23:d7:5e:93:64:76:ee:3e:b9:4c:
                    ce:a7:11:10:da:33:0d:ca:c2:09:cf:f3:28:38:66:
                    a0:1a:6e:fa:58:8a:fa:72:99:f9:ce:3f:61:42:2f:
                    a8:3f:f0:d8:cb:9e:b1:3d:e4:a0:e2:7b:e6:a0:72:
                    19:f1:41:89:a4:29:3b:bb:c9:54:65:17:c7:e1:02:
                    a3:c0:c2:e0:0c:ca:f2:c6:fd:1d:aa:f0:03:ac:70:
                    d8:dd:0d:c1:bf:d1:ae:17:ff:71:8f:84:b8:23:db:
                    be:25:7b:54:86:d0:75:e9:b3:d9:5d:db:a5:62:ed:
                    b1:ce:6b:da:bd:e8:26:52:b8:a3:1b:9e:94:db:5d:
                    46:fb:ab:bb:5b:80:14:50:17:9b:60:ad:9c:a4:30:
                    73:b4:ba:28:80:c5:16:29:97:a9:d2:b8:8c:3b:b7:
                    60:b5:1f:cc:c1:92:cf:97:49:a1:93:53:33:66:c1:
                    82:9d:e5:2c:d5:8e:16:97:79:17:11:81:fc:09:75:
                    75:fa:a0:aa:0e:02:cc:69:74:87:56:ec:db:12:5b:
                    ea:fb:4b:67:ae:96:15:3d:02:f1:22:53:eb:aa:db:
                    4b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:88:93:33:D5:76:29:B5:93:20:1C:61:E7:33:AF:06:72:41:37:35
            X509v3 Authority Key Identifier:
                keyid:3E:39:1C:DC:3C:C1:BD:EE:C2:74:36:2D:8C:82:DA:54:38:3D:DA:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/0/3E391CDC3CC1BDEEC274362D8C82DA54383DDA7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E391CDC3CC1BDEEC274362D8C82DA54383DDA7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/0/323830343a333932303a343030303a3a2f34302d3430203d3e20323636303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3920:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         80:1d:20:e6:89:05:42:0e:d7:61:06:b3:bc:19:72:32:5a:bb:
         a7:ca:cd:22:45:05:cf:68:6d:4f:96:a0:a9:48:13:c6:43:1c:
         71:b4:1d:a2:1d:e2:44:32:93:d6:ff:45:d0:5c:fb:05:9a:b4:
         ae:4c:b9:b4:b0:bd:bf:f6:7e:70:a6:52:e6:5c:6c:58:90:64:
         8e:90:ce:62:d0:8c:95:1d:9a:90:3f:d8:96:32:f1:bb:a8:2f:
         22:15:b4:46:ab:8e:63:91:d9:97:2a:e0:f7:fe:cf:b2:5c:60:
         f4:4d:45:b3:98:c9:ba:c2:82:41:21:fa:0c:cf:0a:dc:8c:ce:
         0c:85:d3:74:16:cd:58:37:3c:65:de:d6:b8:97:f6:e8:19:8a:
         7e:00:ca:64:db:ac:2f:5b:26:83:0e:f9:fc:48:44:c3:0e:36:
         24:84:e9:2e:d9:13:af:4b:55:99:48:52:57:ab:b0:d3:99:a3:
         ab:69:29:bc:fe:71:5b:b5:78:ca:6b:88:ea:f7:8d:b1:92:56:
         e5:34:ec:72:ee:6f:9a:5e:72:0e:e9:6d:07:5a:04:37:e2:85:
         51:b4:6e:85:83:28:c9:df:cd:fd:53:a1:69:95:68:ad:4b:c4:
         bd:6e:8a:36:1d:75:c8:6c:68:81:a2:53:46:cb:66:af:a8:25:
         31:f6:1e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:45:12 2025 by rpki-client