Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/0/323830343a333932303a343830303a3a2f34302d3430203d3e20323636303133.roa
File:                     323830343a333932303a343830303a3a2f34302d3430203d3e20323636303133.roa (raw, json)
Hash identifier:          Wiw6y1GsRMtdy0JQ4HoQh0Tf91a3Zl62RWCzzB5BRyY=
Subject key identifier:   BB:2C:99:1F:0F:66:BE:5E:27:9E:81:05:76:CE:EA:56:EF:D6:A4:F1
Certificate issuer:       /CN=3E391CDC3CC1BDEEC274362D8C82DA54383DDA7B
Certificate serial:       3761C5620377A5D0100C105CC335A1C6EC858C23
Authority key identifier: 3E:39:1C:DC:3C:C1:BD:EE:C2:74:36:2D:8C:82:DA:54:38:3D:DA:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E391CDC3CC1BDEEC274362D8C82DA54383DDA7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/0/323830343a333932303a343830303a3a2f34302d3430203d3e20323636303133.roa
Signing time:             Tue 26 Jul 2022 14:46:31 +0000
ROA not before:           Tue 26 Jul 2022 14:41:31 +0000
ROA not after:            Tue 25 Jul 2023 14:46:31 +0000
asID:                     266013
IP address blocks:        2804:3920:4800::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:61:c5:62:03:77:a5:d0:10:0c:10:5c:c3:35:a1:c6:ec:85:8c:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E391CDC3CC1BDEEC274362D8C82DA54383DDA7B
        Validity
            Not Before: Jul 26 14:41:31 2022 GMT
            Not After : Jul 25 14:46:31 2023 GMT
        Subject: CN=BB2C991F0F66BE5E279E810576CEEA56EFD6A4F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b5:bd:83:e4:e9:bf:11:e4:e3:a7:dc:33:f2:
                    58:c4:35:74:d3:a4:95:64:98:47:f3:cf:b5:e5:bd:
                    b3:ca:2a:60:c1:f6:de:43:6d:20:e5:2c:f9:57:ef:
                    e2:b0:cd:1e:3b:72:18:77:6d:6e:38:bf:58:ca:61:
                    7c:c2:28:41:40:e0:4a:c5:70:05:c7:92:0b:8d:0f:
                    ff:e3:13:00:1d:d5:06:75:35:7a:5b:75:88:5e:53:
                    70:f9:9b:53:5d:3f:a6:34:10:87:97:23:d8:ef:04:
                    61:08:dd:c0:2e:c3:0d:11:6a:9f:e0:1d:8b:c8:c5:
                    62:43:4b:f8:71:86:e9:d1:bf:3f:c8:69:62:4c:30:
                    19:6c:a2:93:b3:9f:f3:96:ea:5c:88:7a:43:ca:59:
                    10:c0:3d:c7:55:2f:e2:2f:e7:1b:9f:61:d5:ea:39:
                    08:df:ef:30:c6:a8:15:3c:c4:9f:db:b9:55:b7:ca:
                    c4:8b:54:ba:c6:29:ee:3d:a7:91:8a:ed:c5:82:20:
                    e8:2d:55:25:07:be:bd:31:da:9c:24:fa:68:1b:18:
                    36:75:21:42:0c:58:01:e8:4d:fe:da:16:90:4f:da:
                    6a:37:8a:51:0e:e7:ab:1e:55:4b:43:f3:22:d0:72:
                    a8:84:1b:df:d4:11:26:e3:9b:ed:fe:df:33:5a:1d:
                    c5:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:2C:99:1F:0F:66:BE:5E:27:9E:81:05:76:CE:EA:56:EF:D6:A4:F1
            X509v3 Authority Key Identifier:
                keyid:3E:39:1C:DC:3C:C1:BD:EE:C2:74:36:2D:8C:82:DA:54:38:3D:DA:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/0/3E391CDC3CC1BDEEC274362D8C82DA54383DDA7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E391CDC3CC1BDEEC274362D8C82DA54383DDA7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/0/323830343a333932303a343830303a3a2f34302d3430203d3e20323636303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3920:4800::/40

    Signature Algorithm: sha256WithRSAEncryption
         95:34:ca:91:1f:d3:95:f1:0a:7e:43:f3:8e:7d:a7:58:15:c6:
         8d:bb:2f:66:5a:9e:10:c2:f0:3e:f9:ca:04:a4:bf:2e:44:00:
         b9:41:17:04:98:18:57:8f:89:bf:7b:b5:d1:61:ca:04:ea:68:
         44:0e:a1:e3:62:86:92:e4:53:c0:0b:f7:28:6a:4c:46:80:e0:
         9a:13:d1:14:59:61:f0:ea:46:15:4b:fb:78:83:b7:a1:d1:c3:
         97:ba:01:bc:ce:f4:67:12:65:e0:31:a5:fe:15:73:6e:32:45:
         e2:d0:e2:29:22:de:c9:bf:0a:e3:f1:d2:84:3a:b5:b4:ec:a1:
         d9:eb:51:87:64:ee:7b:47:b2:75:70:30:a2:86:f7:66:b5:9c:
         d3:50:ed:4d:cd:67:8d:fd:9d:cc:af:df:66:73:e7:d6:cb:6d:
         3b:bb:10:49:c6:88:65:b4:2d:29:74:dc:52:5d:08:29:c4:1e:
         e1:b5:d2:b7:93:3a:36:30:c0:6d:70:cb:eb:d7:43:47:e3:b8:
         1b:4d:83:d6:c9:b0:db:0b:97:52:18:78:b7:3d:50:31:12:6d:
         ca:80:1b:bd:d6:7c:ee:9d:1e:75:3d:08:bf:0f:a6:b3:34:b0:
         b5:0f:77:45:0d:95:38:37:4e:c1:01:ce:78:27:f5:7e:08:ce:
         57:35:3b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:29:59 2025 by rpki-client