Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2HsbXxAatJJJNS7AwjwvPSbgUXJcGfRjn4MHuh5QTHPf/0/323830343a363066303a3a2f33322d3334203d3e20323639323031.roa
File:                     323830343a363066303a3a2f33322d3334203d3e20323639323031.roa (raw, json)
Hash identifier:          T8WUnwFWDksEBMQ3nOkY38po/PSZahr6jAlf1TGsmIs=
Subject key identifier:   D3:2F:E5:4B:60:BC:BD:E0:0A:B6:1F:F4:13:F2:8B:6F:44:32:D4:55
Certificate issuer:       /CN=ABEDC4B9BD20C53B27C36B9A70A9A7964D0E717A
Certificate serial:       07D240B0B6B5B2C13F6FFBF1EC4755811FFC70CD
Authority key identifier: AB:ED:C4:B9:BD:20:C5:3B:27:C3:6B:9A:70:A9:A7:96:4D:0E:71:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ABEDC4B9BD20C53B27C36B9A70A9A7964D0E717A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2HsbXxAatJJJNS7AwjwvPSbgUXJcGfRjn4MHuh5QTHPf/0/323830343a363066303a3a2f33322d3334203d3e20323639323031.roa
Signing time:             Sat 27 Aug 2022 16:00:00 +0000
ROA not before:           Sat 27 Aug 2022 15:55:00 +0000
ROA not after:            Sun 27 Aug 2023 16:00:00 +0000
asID:                     269201
IP address blocks:        2804:60f0::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:d2:40:b0:b6:b5:b2:c1:3f:6f:fb:f1:ec:47:55:81:1f:fc:70:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABEDC4B9BD20C53B27C36B9A70A9A7964D0E717A
        Validity
            Not Before: Aug 27 15:55:00 2022 GMT
            Not After : Aug 27 16:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fb:3b:ee:89:81:62:cd:ec:b7:ce:3a:cc:ce:
                    e3:bf:7c:5a:1a:ae:7a:31:37:82:5d:82:7e:57:04:
                    cf:6b:f6:71:5d:62:b1:de:39:b0:7f:4b:02:62:89:
                    c8:4a:fc:60:a6:ff:3f:ea:f3:9c:49:dd:f0:0c:ba:
                    13:0e:95:79:04:ca:ff:da:cd:15:5f:5a:71:c3:77:
                    b7:7d:ef:ae:73:0f:92:36:d4:18:8f:e3:c3:2b:bf:
                    a0:ae:f9:ec:c6:b3:7b:77:fe:29:38:89:fc:fe:56:
                    6f:be:1b:fc:04:88:88:dc:10:7c:ee:1d:c1:2a:b8:
                    22:f1:ab:af:e9:8b:9f:dc:a6:84:62:e1:38:7d:9b:
                    95:cc:c8:92:ba:9b:7b:22:a1:67:2c:c8:eb:00:51:
                    90:92:1b:20:d3:11:43:aa:76:14:31:ee:c3:4b:e8:
                    90:ae:35:fa:ec:84:9c:fe:80:74:dc:64:3e:d8:89:
                    6e:2b:c4:7e:01:f9:31:6c:16:f9:4c:bd:8f:33:84:
                    f0:40:ee:eb:6f:91:bb:76:17:11:1e:7f:96:ac:e9:
                    cb:78:e5:f5:83:24:51:af:83:89:94:64:35:44:dd:
                    e9:fb:61:ef:52:f6:a4:4c:20:1e:14:7b:91:20:75:
                    dc:0e:ee:46:9f:aa:56:b7:e9:8e:6d:57:19:e3:38:
                    de:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:2F:E5:4B:60:BC:BD:E0:0A:B6:1F:F4:13:F2:8B:6F:44:32:D4:55
            X509v3 Authority Key Identifier:
                keyid:AB:ED:C4:B9:BD:20:C5:3B:27:C3:6B:9A:70:A9:A7:96:4D:0E:71:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2HsbXxAatJJJNS7AwjwvPSbgUXJcGfRjn4MHuh5QTHPf/0/ABEDC4B9BD20C53B27C36B9A70A9A7964D0E717A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ABEDC4B9BD20C53B27C36B9A70A9A7964D0E717A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2HsbXxAatJJJNS7AwjwvPSbgUXJcGfRjn4MHuh5QTHPf/0/323830343a363066303a3a2f33322d3334203d3e20323639323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:e0:04:f7:28:31:50:f0:9b:37:82:4f:b7:b1:ea:86:02:56:
         92:07:d1:f0:dd:63:88:5f:c6:47:55:50:ab:65:e8:70:50:1f:
         76:c8:5b:e9:1d:76:42:c1:d7:7f:26:a2:af:bb:2e:e9:6c:60:
         a9:67:3b:f4:8f:49:97:87:a0:31:2d:15:3a:44:f5:b9:bb:c4:
         0f:94:5b:bf:84:c6:6f:da:28:b6:c8:f1:e4:e4:42:28:93:85:
         58:a6:04:ab:4d:68:8b:9a:08:be:43:64:81:c7:99:22:e3:07:
         53:53:e0:b4:47:2d:89:42:44:30:96:9e:9b:2f:88:ac:e9:24:
         4f:46:01:6e:19:18:ce:89:1a:fb:2b:22:06:f0:9c:23:2a:05:
         fa:18:ea:3d:a1:65:ef:1c:95:b7:87:de:1d:cd:33:d5:37:05:
         3b:d7:e6:f4:d1:68:97:33:03:ca:f1:b6:dc:6b:38:c6:92:ba:
         10:b3:28:05:e2:33:24:73:ca:36:06:47:ac:bc:cb:1a:a9:8a:
         4a:ca:5f:8d:71:f2:a6:ce:96:dc:86:ed:d8:7c:22:7e:75:1a:
         bf:5e:1f:28:4d:b6:b0:e7:94:2f:24:83:0d:4e:cf:c2:31:b5:
         18:71:1f:08:f0:76:27:75:61:6f:1e:ba:a0:22:5b:c9:6c:94:
         ec:c1:74:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:25:10 2025 by rpki-client