Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HiWRkoJF5PmDHmVJGSp7n7aocrEtQc3PZFuVYb5VRBMx/0/323830343a343537383a633030303a3a2f33342d3334203d3e20323636393238.roa
File:                     323830343a343537383a633030303a3a2f33342d3334203d3e20323636393238.roa (raw, json)
Hash identifier:          aPs/aY+zrdPRL+GYAxk494KvZc3NKRmBq75LN2+wgmk=
Subject key identifier:   F8:DB:3D:C6:DE:6E:DD:99:00:45:2F:A9:E5:99:5B:02:1F:2F:46:90
Certificate issuer:       /CN=E31CBE505B4171E33F780DC5B4AEEA43E21745A6
Certificate serial:       20025223D6055689A32F342A969F6761A5D9001E
Authority key identifier: E3:1C:BE:50:5B:41:71:E3:3F:78:0D:C5:B4:AE:EA:43:E2:17:45:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E31CBE505B4171E33F780DC5B4AEEA43E21745A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HiWRkoJF5PmDHmVJGSp7n7aocrEtQc3PZFuVYb5VRBMx/0/323830343a343537383a633030303a3a2f33342d3334203d3e20323636393238.roa
Signing time:             Mon 10 Jul 2023 19:14:28 +0000
ROA not before:           Mon 10 Jul 2023 19:09:28 +0000
ROA not after:            Mon 08 Jul 2024 19:14:28 +0000
asID:                     266928
IP address blocks:        2804:4578:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:02:52:23:d6:05:56:89:a3:2f:34:2a:96:9f:67:61:a5:d9:00:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E31CBE505B4171E33F780DC5B4AEEA43E21745A6
        Validity
            Not Before: Jul 10 19:09:28 2023 GMT
            Not After : Jul  8 19:14:28 2024 GMT
        Subject: CN=F8DB3DC6DE6EDD9900452FA9E5995B021F2F4690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a1:78:b9:7a:71:e6:cb:ed:6a:c1:68:6d:aa:
                    e2:b9:dd:c4:28:90:9d:7b:b3:76:a5:d3:c4:50:b7:
                    79:fb:68:ea:95:5f:71:54:b5:ba:66:41:3f:91:cf:
                    c0:d7:a0:55:9c:63:3b:cd:e6:a4:43:9c:c4:29:6c:
                    96:f7:99:74:d8:73:49:6c:2e:91:2b:88:23:98:43:
                    6a:05:d8:87:d4:bb:a4:36:57:83:36:97:1e:37:b2:
                    66:78:5b:27:b2:2a:56:0f:08:9c:16:95:62:82:d8:
                    08:8e:74:9b:e8:7b:04:c2:e1:00:1f:9f:05:db:5d:
                    84:f0:2f:b0:21:21:42:3a:c3:2b:b7:e7:fa:be:a0:
                    b8:a8:b2:e3:c5:f3:3f:c3:fa:3e:d0:e5:82:e5:69:
                    bf:82:b1:06:d0:92:ea:12:74:e9:f0:5e:22:45:49:
                    3b:6b:f6:cf:7b:1e:c0:f2:ec:34:49:84:fd:b8:5b:
                    66:2b:45:5f:48:18:3f:02:4f:52:eb:16:a7:fc:58:
                    e6:28:d8:7f:86:42:6f:0a:99:1c:c6:32:68:32:95:
                    b1:e7:dc:d6:a2:ff:01:c6:b1:1f:1b:f5:2e:3a:e0:
                    56:52:4a:8e:ac:54:ea:33:c5:5e:83:1f:d6:30:ed:
                    be:2f:63:2c:0f:2f:59:bd:d8:4d:fb:c8:6c:1e:30:
                    49:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:DB:3D:C6:DE:6E:DD:99:00:45:2F:A9:E5:99:5B:02:1F:2F:46:90
            X509v3 Authority Key Identifier:
                keyid:E3:1C:BE:50:5B:41:71:E3:3F:78:0D:C5:B4:AE:EA:43:E2:17:45:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HiWRkoJF5PmDHmVJGSp7n7aocrEtQc3PZFuVYb5VRBMx/0/E31CBE505B4171E33F780DC5B4AEEA43E21745A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E31CBE505B4171E33F780DC5B4AEEA43E21745A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HiWRkoJF5PmDHmVJGSp7n7aocrEtQc3PZFuVYb5VRBMx/0/323830343a343537383a633030303a3a2f33342d3334203d3e20323636393238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4578:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         98:7c:1a:59:f0:c0:46:05:41:2f:31:87:63:1f:22:a6:c5:cf:
         96:ac:09:6a:86:96:6b:99:d1:3d:55:8d:73:e7:53:46:46:59:
         78:ea:c3:5f:40:ef:80:61:ef:fc:fd:6e:9a:b9:c0:66:bb:9f:
         de:75:42:b4:48:ac:aa:4a:47:55:a0:9d:11:da:35:10:a3:a1:
         1d:72:71:39:f7:da:79:37:1a:76:ec:be:52:1b:f6:a9:ed:2d:
         b5:45:0f:94:38:82:ad:86:4b:25:ee:3f:46:3e:02:45:2b:02:
         36:16:4d:bc:88:81:18:d6:8f:f3:2c:e4:c9:d2:ce:24:85:f3:
         62:1d:4e:eb:86:83:85:41:55:b3:2e:d7:07:14:b4:a4:24:73:
         08:de:22:aa:cc:d5:2d:af:42:29:5d:73:cd:8c:ba:50:5a:a8:
         96:be:5e:c6:93:4c:2e:69:a5:2d:e4:04:fa:43:59:bf:0f:1b:
         63:41:90:53:30:52:50:b2:86:3f:b1:57:9a:20:d6:bf:eb:9a:
         6d:2c:79:55:6f:da:ef:a3:2f:a9:d0:27:40:36:0a:e2:4f:87:
         25:94:c8:4b:be:00:6b:ba:2e:d7:3c:4b:fb:f0:d7:53:46:3c:
         7e:63:0c:a3:61:41:d7:f1:fd:30:39:bb:bc:4e:ad:2e:49:f3:
         fb:85:e5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:13:27 2025 by rpki-client