Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2gmGM6Td4G1HHNtjKVLk5BAxrAevNzvAhaSH5w5yAJeY/0/323830343a363765633a3a2f33322d3332203d3e20323639363539.roa
File:                     323830343a363765633a3a2f33322d3332203d3e20323639363539.roa (raw, json)
Hash identifier:          i3A1L1Kzs/yDX92aR/uEiAu4yWaep1DAwTOKtspVckk=
Subject key identifier:   54:E9:C9:19:73:14:7B:72:FA:1C:68:75:1E:C8:6A:0C:E7:59:60:93
Certificate issuer:       /CN=9A58D0B7179B6EA51E78B42B74723648AD8910EE
Certificate serial:       1328189B1B882E96E93770EA3A5D79BE96A03931
Authority key identifier: 9A:58:D0:B7:17:9B:6E:A5:1E:78:B4:2B:74:72:36:48:AD:89:10:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A58D0B7179B6EA51E78B42B74723648AD8910EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2gmGM6Td4G1HHNtjKVLk5BAxrAevNzvAhaSH5w5yAJeY/0/323830343a363765633a3a2f33322d3332203d3e20323639363539.roa
Signing time:             Fri 18 Nov 2022 14:06:38 +0000
ROA not before:           Fri 18 Nov 2022 14:01:38 +0000
ROA not after:            Fri 17 Nov 2023 14:06:38 +0000
asID:                     269659
IP address blocks:        2804:67ec::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:28:18:9b:1b:88:2e:96:e9:37:70:ea:3a:5d:79:be:96:a0:39:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A58D0B7179B6EA51E78B42B74723648AD8910EE
        Validity
            Not Before: Nov 18 14:01:38 2022 GMT
            Not After : Nov 17 14:06:38 2023 GMT
        Subject: CN=54E9C91973147B72FA1C68751EC86A0CE7596093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e2:a4:dd:95:f6:e9:30:43:99:e9:e9:b3:b2:
                    31:23:d2:c8:8e:90:12:d0:4e:ca:f9:49:b0:9c:d0:
                    4f:0b:68:99:01:6d:cc:1d:ca:fd:67:cf:e0:e8:cd:
                    c9:4e:32:03:1d:c3:d6:e0:68:a1:2a:55:f9:f0:42:
                    56:a8:ff:2f:5b:95:d7:f3:7d:57:4e:68:93:23:c8:
                    00:0c:ce:4e:95:a6:f1:91:31:3a:04:4b:aa:6e:fa:
                    64:70:00:3f:af:05:ed:15:9e:0c:c8:c7:1e:0b:24:
                    c1:87:8f:cb:2f:39:84:c1:d5:37:f2:63:3b:0b:2a:
                    85:6e:de:75:d0:7e:5a:46:2d:d6:2f:c9:19:b9:a4:
                    ed:58:85:e4:67:30:a1:52:e3:3d:6e:d2:2f:6c:e0:
                    52:85:dc:a6:50:ce:f5:5f:b5:b7:77:19:85:a1:19:
                    4d:ec:7e:7d:5f:42:5f:64:64:f3:c7:43:8e:d2:29:
                    45:10:30:19:0a:e9:a5:1d:e1:18:25:0b:e9:9b:72:
                    23:e9:3a:5a:71:0c:f6:7b:53:86:dd:6a:01:25:f5:
                    b8:e0:df:c9:dc:d6:0b:48:93:a1:da:56:0f:f2:d0:
                    14:9b:3c:fd:74:47:c4:a8:bc:e9:69:38:93:9c:c7:
                    bf:83:c6:0e:ec:1a:85:c1:f3:41:1d:34:b0:a3:35:
                    30:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:E9:C9:19:73:14:7B:72:FA:1C:68:75:1E:C8:6A:0C:E7:59:60:93
            X509v3 Authority Key Identifier:
                keyid:9A:58:D0:B7:17:9B:6E:A5:1E:78:B4:2B:74:72:36:48:AD:89:10:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2gmGM6Td4G1HHNtjKVLk5BAxrAevNzvAhaSH5w5yAJeY/0/9A58D0B7179B6EA51E78B42B74723648AD8910EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A58D0B7179B6EA51E78B42B74723648AD8910EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2gmGM6Td4G1HHNtjKVLk5BAxrAevNzvAhaSH5w5yAJeY/0/323830343a363765633a3a2f33322d3332203d3e20323639363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:af:30:7c:93:f2:8e:fc:2b:9b:4d:3e:97:94:4c:6d:e9:d2:
         a5:0a:2e:b8:97:43:8f:94:e8:77:f9:dd:88:4b:7b:d9:19:a3:
         cf:b1:4d:53:4c:c1:37:45:0c:d7:a6:aa:18:01:0e:64:fe:21:
         5d:b4:61:c4:43:59:b2:e8:b9:9a:ad:33:98:66:a6:a9:63:fb:
         6c:60:13:52:6b:98:8b:b1:37:40:a5:49:10:f6:60:95:f2:14:
         0d:90:e8:2f:25:b4:52:e3:0c:c3:e7:00:d4:83:ef:d3:70:8a:
         ae:31:16:d0:5d:47:13:56:fe:c9:68:8e:b9:90:ab:33:f9:ae:
         8e:92:e5:00:65:dc:19:71:03:d0:02:f7:d8:ff:4a:a2:4f:0e:
         fa:e2:c5:90:7f:21:7e:c0:bd:98:7d:ba:ee:68:93:92:fb:12:
         62:ab:ef:37:24:2b:97:54:65:58:c1:6a:53:bb:3f:13:23:d0:
         0a:b2:a8:14:55:88:1e:d5:b6:00:87:e6:f1:8e:c7:92:11:71:
         65:ad:48:67:f2:9a:a1:ad:ad:52:c9:93:c4:c8:81:41:a8:2d:
         12:e7:98:37:57:11:be:a2:50:67:b4:84:83:23:9f:2b:4f:90:
         26:ed:fb:f0:e8:c4:b4:56:69:65:e0:7a:1f:0e:74:94:99:ee:
         76:05:15:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:44:23 2025 by rpki-client