Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/323830343a313132633a3a2f33322d3333203d3e20323633363633.roa
File:                     323830343a313132633a3a2f33322d3333203d3e20323633363633.roa (raw, json)
Hash identifier:          9sxlAVxs2YQiwkNVW2KVy3G6O8sx2gi/kXYB3BF6ijQ=
Subject key identifier:   63:B6:88:DB:C4:7C:D4:62:29:8F:D0:5C:70:1A:08:66:0B:08:21:7D
Certificate issuer:       /CN=9CC5CFF7E9D168495B51D83F3C355F10409474FF
Certificate serial:       528F8810CC6C0E6A43B432F33BCCB52A6DC8D9FC
Authority key identifier: 9C:C5:CF:F7:E9:D1:68:49:5B:51:D8:3F:3C:35:5F:10:40:94:74:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9CC5CFF7E9D168495B51D83F3C355F10409474FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/323830343a313132633a3a2f33322d3333203d3e20323633363633.roa
Signing time:             Fri 22 Mar 2024 14:33:12 +0000
ROA not before:           Fri 22 Mar 2024 14:28:12 +0000
ROA not after:            Fri 21 Mar 2025 14:33:12 +0000
asID:                     263663
IP address blocks:        2804:112c::/32 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:8f:88:10:cc:6c:0e:6a:43:b4:32:f3:3b:cc:b5:2a:6d:c8:d9:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CC5CFF7E9D168495B51D83F3C355F10409474FF
        Validity
            Not Before: Mar 22 14:28:12 2024 GMT
            Not After : Mar 21 14:33:12 2025 GMT
        Subject: CN=63B688DBC47CD462298FD05C701A08660B08217D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ee:85:30:64:68:5c:fd:cb:a6:26:f4:91:6d:
                    3f:2d:80:da:fe:01:c5:e9:81:a3:4c:2e:8c:4b:ca:
                    b3:62:17:f0:f2:cf:6e:cb:9c:bb:81:85:f2:b7:25:
                    20:41:44:f8:0d:3a:93:2f:e0:d1:ec:2d:83:14:5d:
                    62:e3:92:15:2d:68:66:f2:48:12:7d:c9:3b:ff:f4:
                    0c:46:42:ea:d5:d0:eb:87:fd:69:a4:ef:d6:b1:43:
                    bb:d2:b7:85:93:61:04:f9:f5:13:54:28:f4:57:a6:
                    13:8a:4e:57:23:07:05:5f:d6:dd:34:10:c6:3b:6d:
                    f1:d4:38:2f:ae:27:6d:30:a7:40:4f:87:6d:14:1c:
                    87:3a:ce:fd:00:fb:c5:4d:c5:60:4a:1c:46:0a:6a:
                    a2:75:7a:75:ce:68:03:27:7b:c4:79:df:cd:ce:ba:
                    f7:da:8c:2c:67:f7:1d:4e:5a:e5:6f:45:3d:4a:da:
                    46:c9:09:ed:6d:00:f4:9e:24:b2:1e:de:69:d9:43:
                    bf:39:00:53:83:ba:a9:79:01:4b:31:81:87:56:ae:
                    b0:49:ac:57:c6:57:b8:01:18:d6:8c:08:aa:7d:24:
                    3b:fd:85:f8:ab:e9:cd:5e:3e:2d:48:c5:57:5c:b1:
                    ff:d4:f2:66:66:c3:60:d1:ff:34:e2:b4:d7:cb:e4:
                    c8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B6:88:DB:C4:7C:D4:62:29:8F:D0:5C:70:1A:08:66:0B:08:21:7D
            X509v3 Authority Key Identifier:
                keyid:9C:C5:CF:F7:E9:D1:68:49:5B:51:D8:3F:3C:35:5F:10:40:94:74:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/9CC5CFF7E9D168495B51D83F3C355F10409474FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9CC5CFF7E9D168495B51D83F3C355F10409474FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/323830343a313132633a3a2f33322d3333203d3e20323633363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:112c::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:dc:35:ee:32:1d:5f:18:7d:6d:50:bc:68:40:45:ab:20:a9:
         96:2e:6a:7b:51:c5:8d:a6:e7:b6:38:24:81:87:ce:3f:cf:12:
         61:6d:2e:6d:c9:a9:a6:2a:f3:5f:8f:61:d9:b4:ec:9a:32:3a:
         c2:16:97:c8:a3:bf:97:b4:f9:8e:70:58:20:e4:15:31:43:8f:
         3e:7c:60:f4:c5:1a:32:0b:26:28:ed:40:6f:41:5d:71:fb:3b:
         68:41:1f:1c:40:d6:67:73:5c:26:6a:a3:61:b9:17:d6:f3:30:
         d9:b3:6b:bc:03:d1:b9:e9:b6:b8:60:5d:12:cb:20:8e:93:2e:
         c1:da:0b:bd:57:0d:6f:f3:a1:50:b4:6d:e5:39:e9:16:27:29:
         ad:21:0a:88:93:8d:69:ca:fc:14:03:10:65:d0:bb:ce:d6:0e:
         4a:0d:2d:e5:b7:8a:a9:60:b9:98:c9:88:14:70:d2:84:39:a9:
         1f:41:d1:15:1d:a3:58:a7:37:6c:de:7f:e1:1d:24:ca:34:22:
         64:c1:2c:ea:3c:76:3a:bb:5c:c4:70:4f:18:1a:df:65:6e:0d:
         26:18:f1:01:19:3f:20:2d:cb:f9:69:49:d2:58:f6:ff:d7:65:
         55:be:b8:41:f5:e1:21:f7:2d:0c:c4:10:22:66:22:d3:c9:1b:
         c6:03:5c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:14:24 2025 by rpki-client