Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/0/323830343a333932303a343230303a3a2f34302d3430203d3e20323636303133.roa
File:                     323830343a333932303a343230303a3a2f34302d3430203d3e20323636303133.roa (raw, json)
Hash identifier:          N3vLBc6jIgdmGNjIeHBgHfhjwdSYeZ2Xw7Yuzk7cs8Y=
Subject key identifier:   F0:3D:8A:AF:34:6F:57:AC:BF:D0:DB:52:07:47:C3:FD:19:F8:22:A5
Certificate issuer:       /CN=3E391CDC3CC1BDEEC274362D8C82DA54383DDA7B
Certificate serial:       23FE8CB0E55E199BE15ACE1BFFED724AA15B592B
Authority key identifier: 3E:39:1C:DC:3C:C1:BD:EE:C2:74:36:2D:8C:82:DA:54:38:3D:DA:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E391CDC3CC1BDEEC274362D8C82DA54383DDA7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/0/323830343a333932303a343230303a3a2f34302d3430203d3e20323636303133.roa
Signing time:             Tue 27 Jun 2023 15:30:29 +0000
ROA not before:           Tue 27 Jun 2023 15:25:29 +0000
ROA not after:            Tue 25 Jun 2024 15:30:29 +0000
asID:                     266013
IP address blocks:        2804:3920:4200::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:fe:8c:b0:e5:5e:19:9b:e1:5a:ce:1b:ff:ed:72:4a:a1:5b:59:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E391CDC3CC1BDEEC274362D8C82DA54383DDA7B
        Validity
            Not Before: Jun 27 15:25:29 2023 GMT
            Not After : Jun 25 15:30:29 2024 GMT
        Subject: CN=F03D8AAF346F57ACBFD0DB520747C3FD19F822A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f2:0b:50:e1:43:85:ed:f2:77:2b:82:62:ac:
                    5b:7e:12:ff:2b:3f:e6:14:f4:f9:ad:b5:9c:a3:2d:
                    7d:c1:df:94:03:29:4d:a9:e8:c3:a4:cf:5e:f8:8c:
                    fa:ad:b8:55:bd:28:c4:1b:6c:d8:f5:fa:5a:35:ff:
                    5d:0d:9b:71:ec:28:15:1a:e9:0b:2f:85:65:a4:be:
                    4e:e0:e3:9e:dd:ce:34:a5:42:04:85:85:fd:32:2b:
                    3d:dd:fc:38:01:a5:90:9e:b2:a8:c3:fe:e8:64:dd:
                    46:de:7e:34:07:30:ef:de:0b:47:91:11:5c:c5:6e:
                    00:c7:7a:ce:ac:67:11:51:3e:64:cf:df:d3:9a:93:
                    56:9a:3e:1b:72:48:71:e8:a8:93:30:64:66:9d:9f:
                    d0:b3:bf:9a:f3:89:8e:18:5d:75:a6:7b:0c:c7:3b:
                    df:1c:3d:2e:b2:fd:1c:42:30:ce:cf:5a:e9:1e:e1:
                    60:6e:d6:50:59:02:59:c9:5a:07:94:55:6b:29:82:
                    fe:13:f6:16:35:1e:69:ff:ba:18:46:1b:70:76:78:
                    db:d0:a4:12:dc:3b:22:ea:f4:23:e3:9a:d2:ee:b9:
                    cd:bc:68:20:93:7c:38:ab:61:17:a4:73:b2:81:04:
                    e0:55:3f:3d:3f:f8:8a:e4:0f:b5:80:2a:ff:6b:ad:
                    bf:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:3D:8A:AF:34:6F:57:AC:BF:D0:DB:52:07:47:C3:FD:19:F8:22:A5
            X509v3 Authority Key Identifier:
                keyid:3E:39:1C:DC:3C:C1:BD:EE:C2:74:36:2D:8C:82:DA:54:38:3D:DA:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/0/3E391CDC3CC1BDEEC274362D8C82DA54383DDA7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E391CDC3CC1BDEEC274362D8C82DA54383DDA7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/0/323830343a333932303a343230303a3a2f34302d3430203d3e20323636303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3920:4200::/40

    Signature Algorithm: sha256WithRSAEncryption
         32:a8:bd:a5:98:0a:53:cc:0b:f7:2d:f8:68:4f:ce:65:b3:df:
         70:a9:64:1b:9c:d6:45:57:1c:bd:cb:db:19:5c:66:24:e1:1e:
         32:6f:0d:73:2d:5c:76:5e:ff:a0:e3:aa:7d:a0:46:ab:ec:ea:
         90:33:d9:34:30:fa:79:6f:e6:51:35:80:da:15:f7:ba:b2:90:
         22:cd:cc:d0:aa:f0:bf:b3:b1:3d:e6:79:d0:09:9f:33:34:ef:
         75:f1:b4:2f:ac:87:67:f2:ea:3a:3b:66:52:ed:eb:b0:1b:a9:
         b8:7c:ef:14:cd:f8:c1:0f:f0:dc:de:a7:2b:48:25:f8:1a:2b:
         08:b4:ca:d4:e2:0a:74:2c:44:1b:c0:60:67:bb:0d:51:95:a0:
         69:a9:3c:1d:7f:30:6c:4e:fa:f9:a0:dd:25:f2:b8:49:9a:1e:
         cd:36:e2:ff:6d:e4:fc:96:7b:08:1a:08:1e:f3:42:28:29:49:
         51:ca:f9:6f:5d:eb:f4:64:55:ed:87:a4:90:18:78:94:da:85:
         83:42:62:7f:2a:71:ac:11:31:0b:ea:f3:55:4f:14:21:2f:3e:
         37:38:28:a8:9e:19:5d:a4:79:62:a7:51:e2:8f:c4:99:67:9c:
         6a:43:0b:24:47:f4:7f:20:99:92:cf:76:5e:9d:50:27:ab:ac:
         6c:37:cd:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:05:00 2025 by rpki-client