Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/323830343a383638343a653030303a3a2f33362d3336203d3e20323732363439.roa
File:                     323830343a383638343a653030303a3a2f33362d3336203d3e20323732363439.roa (raw, json)
Hash identifier:          sBcyLAFMtbF/mvGaSJxPdp0HJB2pEcGCPn9caBSoIw8=
Subject key identifier:   37:E8:21:7E:2C:13:94:28:44:C0:64:45:92:73:16:D1:D2:67:B4:7E
Certificate issuer:       /CN=70427113C728F653176866A2E47D9746EA86B842
Certificate serial:       78CE5B862B2BBCE3076B2F230082478592D709CE
Authority key identifier: 70:42:71:13:C7:28:F6:53:17:68:66:A2:E4:7D:97:46:EA:86:B8:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70427113C728F653176866A2E47D9746EA86B842.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/323830343a383638343a653030303a3a2f33362d3336203d3e20323732363439.roa
Signing time:             Tue 21 Nov 2023 15:11:22 +0000
ROA not before:           Tue 21 Nov 2023 15:06:22 +0000
ROA not after:            Tue 19 Nov 2024 15:11:22 +0000
asID:                     272649
IP address blocks:        2804:8684:e000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:ce:5b:86:2b:2b:bc:e3:07:6b:2f:23:00:82:47:85:92:d7:09:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70427113C728F653176866A2E47D9746EA86B842
        Validity
            Not Before: Nov 21 15:06:22 2023 GMT
            Not After : Nov 19 15:11:22 2024 GMT
        Subject: CN=37E8217E2C13942844C06445927316D1D267B47E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a0:1a:1b:36:81:6e:d8:a0:fd:84:c2:01:ad:
                    c8:3e:b5:3b:57:73:c0:66:be:a7:b3:13:ec:5f:64:
                    71:31:d6:52:4f:58:1d:eb:50:a5:4d:29:0b:25:41:
                    a3:9f:27:8a:46:82:ee:ca:02:48:8e:1b:18:8c:ff:
                    5d:15:b2:a2:a2:90:08:4e:fc:cf:98:5f:c5:03:cb:
                    07:88:7a:00:b1:7c:33:39:58:d2:47:80:1b:f5:fb:
                    d5:b7:80:52:14:96:1e:3c:13:66:f1:66:22:25:07:
                    da:83:cb:61:58:ea:34:61:aa:89:9b:c8:70:8b:cb:
                    e8:7f:a2:c4:fa:3f:12:1b:02:27:71:8e:cb:57:48:
                    93:57:5e:a6:99:c1:80:91:e9:04:86:1d:d9:5a:7e:
                    ed:12:00:a4:e3:b6:e5:e0:1c:e4:31:b2:94:e1:ca:
                    26:20:1c:5b:5d:d6:12:59:c7:ad:56:5f:b0:f0:42:
                    f0:c7:3d:5f:18:39:4a:da:ca:ee:09:54:87:d0:6b:
                    f0:6c:6e:12:70:ea:2a:f1:9e:3b:4a:7d:86:09:72:
                    cc:ae:05:6a:9c:75:c7:c0:aa:bc:89:81:5f:a6:94:
                    bf:17:f6:92:bc:ab:5f:fd:96:86:a6:25:5d:43:bd:
                    c3:4a:90:07:22:03:10:fb:1f:83:ba:43:84:25:af:
                    b0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:E8:21:7E:2C:13:94:28:44:C0:64:45:92:73:16:D1:D2:67:B4:7E
            X509v3 Authority Key Identifier:
                keyid:70:42:71:13:C7:28:F6:53:17:68:66:A2:E4:7D:97:46:EA:86:B8:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/70427113C728F653176866A2E47D9746EA86B842.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70427113C728F653176866A2E47D9746EA86B842.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/323830343a383638343a653030303a3a2f33362d3336203d3e20323732363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8684:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         21:f5:80:4e:f7:0a:0d:16:4e:19:fa:95:cb:f7:46:08:fc:78:
         8b:d5:21:2d:f1:64:c0:8e:04:27:75:4f:94:fa:96:fd:c7:8b:
         65:c7:85:97:8d:46:29:4c:d1:e4:dd:95:ea:0f:6e:d9:01:8c:
         00:b9:24:89:80:c3:95:b0:38:66:87:7f:99:f4:2d:a1:12:ef:
         bf:72:c1:07:87:a6:08:13:67:e4:9b:ba:7c:00:a3:35:5b:7b:
         2b:49:b3:a3:7b:40:52:a9:21:28:84:26:f9:98:ff:9a:f7:3f:
         b6:b7:cf:28:7b:4c:70:11:d3:0f:6f:ef:0e:30:d3:61:10:2f:
         b8:99:2b:b7:94:13:10:51:52:da:91:6b:0a:c8:85:4c:5b:d8:
         65:8d:f8:84:a8:e5:be:aa:7b:c7:55:90:5d:29:f0:d3:3a:38:
         7c:a7:d0:d6:b0:15:bc:f3:0f:27:ec:8f:ad:0f:4d:e2:97:b4:
         a0:35:47:40:e7:6a:4e:a1:ad:69:0b:24:14:0f:c1:db:43:4b:
         40:bf:68:b9:20:d7:72:9f:17:be:12:3e:86:b3:87:d5:05:f1:
         98:90:ad:c1:16:12:0b:25:d5:50:11:2b:8c:31:a4:9b:9b:ac:
         50:81:74:63:0f:f0:8d:d6:3e:1b:5c:81:fe:f0:d9:19:cd:cd:
         4b:9b:83:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:13:10 2025 by rpki-client