Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2oEdApCbTbyM1chUdtXCcz2T4AyKccK1ZaKyAp3ZGo7f/0/323830343a383333343a3a2f33322d3438203d3e20323732313833.roa
File:                     323830343a383333343a3a2f33322d3438203d3e20323732313833.roa (raw, json)
Hash identifier:          eP/Rbo+oT/U6u0y+VrbGkhCDZbYB7AN7l0lW4mlyWDo=
Subject key identifier:   8E:01:32:16:5D:E4:48:4F:BD:8D:6E:5E:33:67:C7:BD:77:93:D0:D0
Certificate issuer:       /CN=201F7DFA0790A8C0B5AEF3391DD6A0B88BF82401
Certificate serial:       17A8011C46A062C61267567A77081C67282E3EA7
Authority key identifier: 20:1F:7D:FA:07:90:A8:C0:B5:AE:F3:39:1D:D6:A0:B8:8B:F8:24:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/201F7DFA0790A8C0B5AEF3391DD6A0B88BF82401.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oEdApCbTbyM1chUdtXCcz2T4AyKccK1ZaKyAp3ZGo7f/0/323830343a383333343a3a2f33322d3438203d3e20323732313833.roa
Signing time:             Sun 23 Oct 2022 20:33:23 +0000
ROA not before:           Sun 23 Oct 2022 20:28:23 +0000
ROA not after:            Sun 22 Oct 2023 20:33:23 +0000
asID:                     272183
IP address blocks:        2804:8334::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:a8:01:1c:46:a0:62:c6:12:67:56:7a:77:08:1c:67:28:2e:3e:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=201F7DFA0790A8C0B5AEF3391DD6A0B88BF82401
        Validity
            Not Before: Oct 23 20:28:23 2022 GMT
            Not After : Oct 22 20:33:23 2023 GMT
        Subject: CN=8E0132165DE4484FBD8D6E5E3367C7BD7793D0D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b8:90:d6:5b:c0:ad:22:58:1e:f7:11:87:d4:
                    d9:03:a5:1b:fc:1e:34:7f:b5:6c:82:21:08:8c:cf:
                    ea:fa:8c:b0:8a:9b:d8:5c:45:41:80:48:80:9d:44:
                    18:16:eb:c6:16:0c:8a:b4:97:9b:9b:79:c2:d0:ca:
                    a5:1b:b4:15:7a:66:7c:47:5b:b8:a3:b8:4e:af:14:
                    79:38:92:d3:11:19:17:15:33:ad:b4:6c:22:aa:c5:
                    1b:2c:a2:22:19:b6:4a:df:78:b8:68:c8:5c:98:fa:
                    7f:36:57:17:9e:ca:5a:00:cb:e1:a0:7c:04:8a:c6:
                    df:65:25:a7:5e:a3:7f:f7:e4:57:99:66:30:5b:34:
                    3f:27:50:71:5c:6f:e4:9c:ae:cd:8d:05:24:21:7d:
                    b8:70:ba:15:20:3a:cf:01:a7:07:f9:57:6b:09:92:
                    ea:69:44:21:09:4c:85:68:2b:b5:72:b1:17:9a:4b:
                    61:bf:76:6e:3e:2f:94:32:b8:6a:43:f6:e4:05:3e:
                    50:8c:64:7c:f3:d9:51:07:77:93:8d:6d:09:4b:52:
                    a4:de:d3:3a:5b:c0:a4:6b:fd:ae:9d:8c:49:a4:7e:
                    b6:1a:f1:47:20:3d:ee:ff:78:f2:96:12:26:88:c1:
                    5c:4b:23:00:e4:26:42:4c:ed:33:15:7a:ea:c7:fc:
                    e6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:01:32:16:5D:E4:48:4F:BD:8D:6E:5E:33:67:C7:BD:77:93:D0:D0
            X509v3 Authority Key Identifier:
                keyid:20:1F:7D:FA:07:90:A8:C0:B5:AE:F3:39:1D:D6:A0:B8:8B:F8:24:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oEdApCbTbyM1chUdtXCcz2T4AyKccK1ZaKyAp3ZGo7f/0/201F7DFA0790A8C0B5AEF3391DD6A0B88BF82401.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/201F7DFA0790A8C0B5AEF3391DD6A0B88BF82401.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oEdApCbTbyM1chUdtXCcz2T4AyKccK1ZaKyAp3ZGo7f/0/323830343a383333343a3a2f33322d3438203d3e20323732313833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8334::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:d9:c9:79:20:03:c7:cb:7f:65:41:cf:fc:b8:f2:00:16:f2:
         c5:5e:37:4d:94:dd:f0:88:be:1c:85:07:0c:b9:02:1f:91:3f:
         16:be:13:8f:d4:f3:0e:07:5f:d5:c7:56:0e:37:44:8b:2f:06:
         d8:2b:f8:7b:ed:f5:43:0a:45:5e:d6:e3:59:90:74:a1:4e:ba:
         e7:4a:d6:c2:0c:fa:04:c5:fb:7b:7e:74:15:8f:47:61:80:e1:
         79:71:58:72:fc:f3:2c:91:8a:07:82:9f:a3:e3:49:0e:7f:fb:
         31:37:05:e0:3f:0e:a4:69:9b:5b:91:2e:68:52:63:7f:e6:47:
         2f:64:f5:34:9b:8a:91:c0:24:48:6e:46:de:26:d7:e4:67:4a:
         5e:3b:e2:7a:16:90:15:5e:dd:3f:66:0f:0c:39:ec:8f:db:ad:
         53:0d:09:cb:49:67:bb:ac:c8:b9:bb:3a:22:0c:56:35:8e:cd:
         6b:19:fd:e7:89:45:7b:86:a9:9d:08:1e:36:e4:48:7f:19:32:
         3f:ac:71:9b:a2:03:9b:b2:28:ad:37:5a:ae:66:20:c8:63:49:
         f0:0b:57:57:f7:77:c2:d7:82:06:a3:89:ac:6d:a5:a8:c1:b6:
         0a:97:14:2d:49:4e:86:ad:e5:5b:89:da:19:ef:fb:1a:0d:bf:
         fe:33:81:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:37:58 2025 by rpki-client