Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2J94jDweR5vDJfLdEHmVwR78eEnn2Jta8gptBMLUWrGn/0/323830343a313031303a3a2f33322d3336203d3e20323633363137.roa
File:                     323830343a313031303a3a2f33322d3336203d3e20323633363137.roa (raw, json)
Hash identifier:          a1JGNZrGU6siWhGM5d9Zuf+KjGWe4W9Bvc3GjOi0EAA=
Subject key identifier:   F6:D1:17:FC:F3:87:82:B0:D3:BC:48:AE:C0:22:F0:58:D8:EA:EE:79
Certificate issuer:       /CN=696D6B326D9C12A945BCBE298260CBC9DB6DC28B
Certificate serial:       0BFBE71909FEBCCFBAB04334C894523B72D8C714
Authority key identifier: 69:6D:6B:32:6D:9C:12:A9:45:BC:BE:29:82:60:CB:C9:DB:6D:C2:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/696D6B326D9C12A945BCBE298260CBC9DB6DC28B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2J94jDweR5vDJfLdEHmVwR78eEnn2Jta8gptBMLUWrGn/0/323830343a313031303a3a2f33322d3336203d3e20323633363137.roa
Signing time:             Wed 05 Oct 2022 14:21:57 +0000
ROA not before:           Wed 05 Oct 2022 14:16:57 +0000
ROA not after:            Wed 04 Oct 2023 14:21:57 +0000
asID:                     263617
IP address blocks:        2804:1010::/32 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:fb:e7:19:09:fe:bc:cf:ba:b0:43:34:c8:94:52:3b:72:d8:c7:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=696D6B326D9C12A945BCBE298260CBC9DB6DC28B
        Validity
            Not Before: Oct  5 14:16:57 2022 GMT
            Not After : Oct  4 14:21:57 2023 GMT
        Subject: CN=F6D117FCF38782B0D3BC48AEC022F058D8EAEE79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a5:05:20:5a:93:9b:bc:b8:f1:09:f6:d7:ad:
                    70:7f:bd:b2:2f:42:3b:c5:38:5a:d0:7c:3c:d9:e2:
                    73:5e:87:15:9d:e0:8b:47:8c:b3:61:ed:2e:fe:e9:
                    4f:3c:b8:27:ee:71:fa:61:bc:a5:07:37:65:01:27:
                    33:3a:02:4d:7f:c3:0e:ba:30:02:86:59:01:e2:42:
                    16:af:da:b5:4e:54:ba:dd:51:5d:0b:5e:11:60:6e:
                    81:94:f2:b7:8e:aa:e2:d8:a7:8d:b3:ff:41:c8:5f:
                    f9:95:25:4f:29:b1:c5:8b:33:1a:73:97:b5:53:b0:
                    e6:82:11:ec:d9:5f:2f:45:3c:31:ce:da:7e:98:26:
                    54:45:c7:94:34:6b:02:9e:f6:5e:4f:67:ed:96:e3:
                    ea:d7:4e:d9:6f:87:f4:de:e6:2b:38:db:31:f5:78:
                    b4:22:f2:3e:eb:10:70:3a:60:7a:71:af:b7:fb:a0:
                    65:ca:40:0b:82:a4:53:4c:8d:15:69:78:a7:35:67:
                    57:e7:bc:b0:ff:31:7c:71:2a:1b:82:f4:ad:35:34:
                    d3:15:da:e5:6a:19:17:90:64:05:ff:8d:43:44:45:
                    d0:aa:89:3d:0d:6e:96:9b:d0:30:6e:dd:52:df:14:
                    20:1f:9e:bb:d9:00:37:9a:72:79:7c:bb:f0:a1:5e:
                    0a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:D1:17:FC:F3:87:82:B0:D3:BC:48:AE:C0:22:F0:58:D8:EA:EE:79
            X509v3 Authority Key Identifier:
                keyid:69:6D:6B:32:6D:9C:12:A9:45:BC:BE:29:82:60:CB:C9:DB:6D:C2:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2J94jDweR5vDJfLdEHmVwR78eEnn2Jta8gptBMLUWrGn/0/696D6B326D9C12A945BCBE298260CBC9DB6DC28B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/696D6B326D9C12A945BCBE298260CBC9DB6DC28B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2J94jDweR5vDJfLdEHmVwR78eEnn2Jta8gptBMLUWrGn/0/323830343a313031303a3a2f33322d3336203d3e20323633363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1010::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:09:d2:ac:32:96:97:22:6d:97:f7:5a:44:42:d0:a0:49:e4:
         e3:0f:1b:d3:77:55:b5:54:7d:16:89:cb:ee:92:5c:9c:a3:91:
         1c:00:66:61:e0:4d:cf:5c:a5:f5:61:f5:7a:de:58:19:5a:50:
         b6:5a:d1:4f:c0:74:45:9b:0b:31:9d:63:62:aa:28:e7:a5:95:
         86:40:ff:34:c7:3e:dd:6b:9a:de:d9:35:4a:11:39:62:64:57:
         de:31:0d:03:ac:dd:f7:9b:c6:13:58:2a:d0:66:23:39:fb:31:
         19:7c:6d:b3:ea:aa:08:8c:df:76:28:cf:9a:c7:75:31:92:cd:
         45:d7:8b:6d:d5:40:00:77:aa:95:fa:30:2b:d3:98:1b:0d:c8:
         fb:31:3f:56:fa:08:44:20:35:28:49:34:cd:57:67:2f:e4:03:
         52:65:d2:05:d1:51:82:89:d7:a4:0c:2b:b3:40:30:0a:8d:3e:
         73:51:f3:41:ce:1c:fb:03:71:af:40:64:50:b8:78:9b:8b:27:
         4a:ab:3f:37:78:f6:73:f4:59:ba:0e:8a:e2:a4:f9:a0:f2:b4:
         e6:a2:02:a9:6c:51:6a:49:8d:d6:aa:df:c2:00:2c:e8:5c:0c:
         97:37:13:b3:6c:7d:59:2a:7a:fd:6e:6b:c1:9f:4c:00:83:0c:
         b7:55:57:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:35:28 2025 by rpki-client