Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/0/323830343a333463303a366530303a3a2f34302d3430203d3e20323635343737.roa
File:                     323830343a333463303a366530303a3a2f34302d3430203d3e20323635343737.roa (raw, json)
Hash identifier:          2vJIFkJDeZ/kGtVcyUvQe7/7EGZnfWhRsvc7hw63rdE=
Subject key identifier:   AE:9A:2E:D8:B1:0B:32:E7:A8:5B:96:F0:4A:00:88:D2:B0:16:EA:E9
Certificate issuer:       /CN=CC9E03E325DB50E5129BE1E9A5D2E0A19844EF84
Certificate serial:       35F95F532BD883DAF7D6635BA0CE943A2E116F31
Authority key identifier: CC:9E:03:E3:25:DB:50:E5:12:9B:E1:E9:A5:D2:E0:A1:98:44:EF:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC9E03E325DB50E5129BE1E9A5D2E0A19844EF84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/0/323830343a333463303a366530303a3a2f34302d3430203d3e20323635343737.roa
Signing time:             Tue 16 Jan 2024 18:45:15 +0000
ROA not before:           Tue 16 Jan 2024 18:40:15 +0000
ROA not after:            Tue 14 Jan 2025 18:45:15 +0000
asID:                     265477
IP address blocks:        2804:34c0:6e00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:f9:5f:53:2b:d8:83:da:f7:d6:63:5b:a0:ce:94:3a:2e:11:6f:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC9E03E325DB50E5129BE1E9A5D2E0A19844EF84
        Validity
            Not Before: Jan 16 18:40:15 2024 GMT
            Not After : Jan 14 18:45:15 2025 GMT
        Subject: CN=AE9A2ED8B10B32E7A85B96F04A0088D2B016EAE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:39:4f:50:69:6c:b1:ac:a1:cc:4c:78:22:18:
                    01:e5:cb:55:3b:fb:74:b0:f1:28:40:a1:5d:03:cb:
                    13:75:21:5f:bc:50:1b:9e:1f:8a:da:ea:6a:7a:d5:
                    bc:dc:03:7b:68:61:ee:75:c9:61:91:a1:28:29:26:
                    ac:be:05:6f:cf:72:8c:e2:7d:f6:73:33:92:df:16:
                    74:c2:76:95:d9:18:1d:27:5e:75:26:d6:9f:32:65:
                    cc:2f:f2:01:8c:35:72:36:19:78:9e:ac:79:ea:c3:
                    25:85:dd:dc:69:50:a5:ef:7f:10:36:70:56:8b:c6:
                    b9:e9:55:9e:b0:09:ed:d0:70:f2:2a:a5:db:06:f0:
                    a4:f1:e3:8f:ba:58:7e:8c:98:fd:09:38:eb:a7:84:
                    9c:7f:ff:e5:08:ff:a7:b7:aa:ca:d5:46:ac:99:08:
                    34:ba:8a:b4:fe:9b:ac:c2:59:5d:f1:13:e5:36:08:
                    ec:bb:13:6e:31:8f:80:68:55:30:dc:5b:d4:99:4c:
                    8e:b4:d2:5c:7d:8f:53:74:cf:f2:f5:21:e2:03:39:
                    4a:f6:a8:ef:6e:c8:69:b3:ef:4f:2c:a3:27:30:4e:
                    bf:7f:6b:db:bc:ee:08:8b:d5:a7:47:1b:a4:cf:cf:
                    ad:aa:37:0e:f4:f7:5c:96:85:63:f3:1b:4c:4f:5b:
                    d3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:9A:2E:D8:B1:0B:32:E7:A8:5B:96:F0:4A:00:88:D2:B0:16:EA:E9
            X509v3 Authority Key Identifier:
                keyid:CC:9E:03:E3:25:DB:50:E5:12:9B:E1:E9:A5:D2:E0:A1:98:44:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/0/CC9E03E325DB50E5129BE1E9A5D2E0A19844EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC9E03E325DB50E5129BE1E9A5D2E0A19844EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/0/323830343a333463303a366530303a3a2f34302d3430203d3e20323635343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34c0:6e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a0:d7:c2:11:23:b1:e1:c6:dd:7a:8d:a4:59:2c:a6:0a:ad:bc:
         a4:25:4d:94:eb:a7:b1:8f:6f:e3:44:53:c4:d6:4f:81:f7:6b:
         de:2e:fd:d6:4c:68:9b:71:26:c0:56:ef:65:bc:f8:69:c6:3a:
         ae:c5:56:90:1f:6c:b5:3b:c7:36:1c:36:c2:51:bb:91:90:e8:
         a0:da:1c:3e:76:b1:af:c1:de:c8:ad:c2:8a:be:a1:07:1f:5d:
         90:23:05:9f:35:b7:6b:a9:38:34:33:88:f5:00:26:e5:82:aa:
         95:28:f8:e3:ac:f1:fb:67:90:ce:eb:23:47:18:d4:d3:83:4d:
         77:01:47:4c:c4:14:bb:c4:01:0b:45:19:a6:72:39:19:33:25:
         36:01:05:41:29:1c:3b:b7:80:8c:fc:41:6a:5c:6e:86:61:36:
         85:ad:d3:50:ae:75:73:33:d6:af:81:c4:49:a8:10:5f:6d:4a:
         82:14:55:55:83:08:b7:8b:b6:61:d4:a1:22:1a:b0:12:c6:00:
         8c:d2:d2:59:6f:ce:d4:bc:11:55:7c:3a:88:41:ea:85:26:5e:
         ff:8e:f1:c5:bc:6e:ba:dc:b5:5a:16:26:f8:2c:df:f9:50:5c:
         13:ab:93:b1:10:f0:14:8d:58:c8:f3:34:59:74:7b:78:3d:59:
         6f:e5:cc:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:44 2025 by rpki-client