Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/0/323830343a323736633a3630303a3a2f34302d3430203d3e20323633393030.roa
File:                     323830343a323736633a3630303a3a2f34302d3430203d3e20323633393030.roa (raw, json)
Hash identifier:          Hfy18FxEAlUFVGnpJuPJkLArLppxMOd4soz0/0Btd8M=
Subject key identifier:   B1:B3:58:4F:2E:DA:ED:E3:9D:42:55:6C:05:56:9A:D2:AF:6B:6D:3B
Certificate issuer:       /CN=5D18FA4A88E7A19A02E06CD348D6BDF263B88E3B
Certificate serial:       53A7E69C76E23B6B91346B027AA551B40ED08022
Authority key identifier: 5D:18:FA:4A:88:E7:A1:9A:02:E0:6C:D3:48:D6:BD:F2:63:B8:8E:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D18FA4A88E7A19A02E06CD348D6BDF263B88E3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/0/323830343a323736633a3630303a3a2f34302d3430203d3e20323633393030.roa
Signing time:             Fri 18 Aug 2023 13:27:55 +0000
ROA not before:           Fri 18 Aug 2023 13:22:55 +0000
ROA not after:            Fri 16 Aug 2024 13:27:55 +0000
asID:                     263900
IP address blocks:        2804:276c:600::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:a7:e6:9c:76:e2:3b:6b:91:34:6b:02:7a:a5:51:b4:0e:d0:80:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D18FA4A88E7A19A02E06CD348D6BDF263B88E3B
        Validity
            Not Before: Aug 18 13:22:55 2023 GMT
            Not After : Aug 16 13:27:55 2024 GMT
        Subject: CN=B1B3584F2EDAEDE39D42556C05569AD2AF6B6D3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:aa:77:75:76:1c:1f:1e:60:4f:a1:7a:a8:70:
                    bc:f6:50:05:c6:9b:01:a1:67:20:97:78:0b:40:ce:
                    ef:41:db:ef:a0:8e:a0:46:78:0a:85:8c:5a:fb:9f:
                    07:5b:89:1e:7d:b5:96:9a:c7:f5:5e:ef:b4:c8:5b:
                    98:f8:42:b0:af:55:bb:67:c3:0c:8a:9f:3f:95:75:
                    38:95:a2:df:58:4c:1f:34:52:0d:80:96:79:ac:18:
                    c6:97:84:ed:23:fb:2a:c5:88:4d:90:50:6a:32:bf:
                    a5:ea:6b:4c:9a:79:5e:54:ae:75:5c:e9:ba:f4:93:
                    16:6d:1c:e4:bb:0b:3e:04:93:92:3a:29:85:9a:a7:
                    ea:82:e1:5d:72:26:b9:8f:54:25:64:96:0b:03:37:
                    c2:e8:04:b2:09:76:19:1a:b5:70:2b:7a:ca:87:a6:
                    91:5b:7f:d7:5f:28:51:d1:92:a8:06:24:7e:59:77:
                    e0:87:b3:85:11:d2:40:5d:55:3a:d4:b8:35:b1:e3:
                    70:ae:00:9c:ac:e3:f9:fb:e0:de:52:7a:cb:07:37:
                    81:33:6f:19:0b:3b:44:88:12:01:f3:cf:ea:f0:a3:
                    b6:05:6f:e8:7b:a0:5a:77:92:53:38:b6:89:31:a1:
                    46:72:23:fa:9e:5e:b3:0a:39:6f:20:8d:ee:d7:bf:
                    77:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:B3:58:4F:2E:DA:ED:E3:9D:42:55:6C:05:56:9A:D2:AF:6B:6D:3B
            X509v3 Authority Key Identifier:
                keyid:5D:18:FA:4A:88:E7:A1:9A:02:E0:6C:D3:48:D6:BD:F2:63:B8:8E:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/0/5D18FA4A88E7A19A02E06CD348D6BDF263B88E3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D18FA4A88E7A19A02E06CD348D6BDF263B88E3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/0/323830343a323736633a3630303a3a2f34302d3430203d3e20323633393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:276c:600::/40

    Signature Algorithm: sha256WithRSAEncryption
         52:af:f6:89:61:f6:39:51:86:63:5c:26:57:96:db:34:56:b4:
         46:3a:83:97:ec:61:ee:31:f8:8c:04:76:f4:e9:65:03:99:8f:
         2e:88:d6:51:d4:fd:92:45:50:c5:62:75:a8:23:94:f4:6b:92:
         21:83:cb:9d:8c:83:06:44:56:c5:18:ad:53:6d:cd:ed:ab:fa:
         4c:b5:37:30:cb:a7:cf:9f:aa:35:9a:63:af:d5:ec:a2:46:b0:
         38:df:f6:ed:b5:2d:4a:82:17:fd:2d:8f:3d:64:1a:02:15:82:
         3a:8d:26:8d:eb:69:21:1b:8a:0e:1b:d8:fb:b0:1b:b8:da:88:
         fb:13:42:f8:62:42:da:44:43:af:be:05:e1:4a:5e:d1:29:b7:
         54:4c:fc:95:88:2f:66:5b:29:9e:0d:4e:26:17:5e:fc:69:34:
         20:e4:1f:58:cd:6f:a8:b8:95:b1:b7:36:92:8b:56:32:9a:9c:
         91:a2:7b:c6:f9:7c:86:b7:f2:93:f7:4d:ff:3c:e0:2b:e1:6c:
         f5:08:d4:5a:fb:ac:50:2b:b3:b6:71:e6:fe:1c:a8:62:4d:da:
         41:30:ec:9d:78:eb:11:a8:da:62:de:c1:76:cc:2e:4c:5e:d5:
         ff:01:99:ad:19:b3:db:bf:b5:d3:81:a1:83:4f:84:fd:cd:a6:
         a7:56:ba:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:53:16 2025 by rpki-client