Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/0/323830343a323736633a3430303a3a2f34302d3430203d3e20323633393030.roa
File:                     323830343a323736633a3430303a3a2f34302d3430203d3e20323633393030.roa (raw, json)
Hash identifier:          0gzJuhn/dT8wauU3TBuuU41GfCVYaffjVlAGntJ8spE=
Subject key identifier:   07:FF:47:37:96:4A:E4:CF:AE:3D:DC:0B:9B:04:AE:DA:26:CE:92:52
Certificate issuer:       /CN=5D18FA4A88E7A19A02E06CD348D6BDF263B88E3B
Certificate serial:       7DF9DA99421A66FD8A58A0124AE877550DE5AD5F
Authority key identifier: 5D:18:FA:4A:88:E7:A1:9A:02:E0:6C:D3:48:D6:BD:F2:63:B8:8E:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D18FA4A88E7A19A02E06CD348D6BDF263B88E3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/0/323830343a323736633a3430303a3a2f34302d3430203d3e20323633393030.roa
Signing time:             Fri 18 Aug 2023 13:27:50 +0000
ROA not before:           Fri 18 Aug 2023 13:22:50 +0000
ROA not after:            Fri 16 Aug 2024 13:27:50 +0000
asID:                     263900
IP address blocks:        2804:276c:400::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:f9:da:99:42:1a:66:fd:8a:58:a0:12:4a:e8:77:55:0d:e5:ad:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D18FA4A88E7A19A02E06CD348D6BDF263B88E3B
        Validity
            Not Before: Aug 18 13:22:50 2023 GMT
            Not After : Aug 16 13:27:50 2024 GMT
        Subject: CN=07FF4737964AE4CFAE3DDC0B9B04AEDA26CE9252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7e:34:10:5e:19:0c:dd:18:89:9b:9b:7e:ed:
                    08:99:0e:4d:a2:96:4b:97:63:06:45:e7:79:e9:9c:
                    c1:c8:73:90:45:b7:88:e9:99:22:a8:41:20:7b:48:
                    4f:3c:ee:65:73:35:46:e1:ec:49:b6:6b:de:31:32:
                    e6:bf:23:ce:dc:e6:63:8f:7d:88:a9:cf:83:45:26:
                    a7:04:62:bf:6f:ee:36:e9:95:1d:75:a8:8f:cd:7e:
                    35:c7:dc:68:a6:07:1a:ba:40:45:02:4a:cc:12:33:
                    b9:df:78:ca:9f:cb:f1:ca:fa:33:f6:01:e4:15:7d:
                    39:ec:55:be:c7:cc:5d:82:1e:f8:6d:d2:15:0b:fc:
                    98:ac:da:64:d9:99:de:d6:72:73:7f:ae:b8:d8:ac:
                    d1:8a:3f:be:ba:d0:c0:a7:95:b7:68:75:47:b8:d5:
                    17:97:6f:66:d3:08:90:ff:50:99:4b:21:21:02:83:
                    ee:8b:d4:96:89:a0:3a:81:66:17:77:3e:51:91:8c:
                    ab:82:0d:0d:f0:7f:4a:52:c8:a0:8d:41:99:f4:3c:
                    f9:3c:bf:2e:e8:87:f8:ff:ca:92:c4:35:0c:e2:9b:
                    a9:0f:e6:b9:a5:fe:ff:56:5c:0d:05:8c:31:f2:f9:
                    57:e1:90:0f:97:db:95:b0:97:a9:2a:6a:82:bb:ea:
                    0b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:FF:47:37:96:4A:E4:CF:AE:3D:DC:0B:9B:04:AE:DA:26:CE:92:52
            X509v3 Authority Key Identifier:
                keyid:5D:18:FA:4A:88:E7:A1:9A:02:E0:6C:D3:48:D6:BD:F2:63:B8:8E:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/0/5D18FA4A88E7A19A02E06CD348D6BDF263B88E3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D18FA4A88E7A19A02E06CD348D6BDF263B88E3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/0/323830343a323736633a3430303a3a2f34302d3430203d3e20323633393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:276c:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         34:ef:9e:0e:c9:18:7d:17:e3:35:14:be:92:35:01:78:36:3e:
         4d:7b:14:88:7e:d5:e8:25:aa:02:49:1f:56:eb:59:f9:6b:b7:
         58:42:b9:6e:75:45:98:0a:f7:48:b2:4c:b7:58:91:db:a5:be:
         2c:02:63:57:0e:a4:6c:f8:8e:92:18:b9:23:a2:58:f8:f0:85:
         e3:4e:98:a3:2f:8f:65:20:33:f2:fd:1a:be:f6:67:bc:c3:dc:
         69:06:a2:b4:a5:69:c9:ea:a0:35:2c:a5:b8:61:a9:b3:01:11:
         fe:b0:7a:2a:02:21:59:61:33:34:b0:54:b2:69:92:bc:b2:e1:
         cc:e3:42:3a:c7:c5:3c:3e:51:e8:af:81:ad:a7:d0:05:50:86:
         25:67:60:a0:37:d7:03:23:38:4b:f1:04:12:58:24:20:b0:04:
         6e:e8:88:48:c9:bc:87:47:20:65:7c:07:09:4d:37:91:ca:6b:
         ff:43:89:2b:a1:16:66:b0:98:23:4f:84:2e:bd:e6:fa:2d:f2:
         62:af:21:80:0a:17:28:2a:d1:d0:5a:90:a1:59:0d:85:de:91:
         dd:88:54:fd:6a:a1:b0:a0:6a:e2:ea:dc:8c:9e:77:c0:a2:5b:
         53:a4:d9:af:3d:40:d6:df:14:54:ae:57:42:26:07:ae:c2:db:
         09:e1:f0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:25:55 2025 by rpki-client