Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/5/323830343a376261303a3a2f33322d3438203d3e20323731343433.roa
File:                     323830343a376261303a3a2f33322d3438203d3e20323731343433.roa (raw, json)
Hash identifier:          9WA5m6pcnUv3KFAKwtkwkkY6KqJB2GK4JDWvCyMHDbE=
Subject key identifier:   C9:21:7F:C1:DB:14:56:B5:23:89:DB:64:4F:32:EB:CB:8A:03:1E:F4
Certificate issuer:       /CN=953C20849494211C871ED33EC10446FED42AF4C7
Certificate serial:       7AA1A0E363F72655EACCD40F1423766237816251
Authority key identifier: 95:3C:20:84:94:94:21:1C:87:1E:D3:3E:C1:04:46:FE:D4:2A:F4:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/953C20849494211C871ED33EC10446FED42AF4C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/5/323830343a376261303a3a2f33322d3438203d3e20323731343433.roa
Signing time:             Fri 14 Oct 2022 01:49:25 +0000
ROA not before:           Fri 14 Oct 2022 01:44:25 +0000
ROA not after:            Fri 13 Oct 2023 01:49:25 +0000
asID:                     271443
IP address blocks:        2804:7ba0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:a1:a0:e3:63:f7:26:55:ea:cc:d4:0f:14:23:76:62:37:81:62:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=953C20849494211C871ED33EC10446FED42AF4C7
        Validity
            Not Before: Oct 14 01:44:25 2022 GMT
            Not After : Oct 13 01:49:25 2023 GMT
        Subject: CN=C9217FC1DB1456B52389DB644F32EBCB8A031EF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d1:92:0d:0a:cb:24:57:48:45:de:64:e0:d0:
                    d5:38:c0:ab:cc:78:95:ae:44:ec:bc:31:3d:f0:d9:
                    37:4d:88:f6:5c:61:55:85:f1:a7:6a:d7:8a:aa:03:
                    a7:cf:63:6c:1e:88:ab:4f:ec:e3:31:e4:84:e5:8a:
                    c7:39:4b:15:be:ff:e2:39:20:c3:49:98:ef:95:24:
                    71:97:2b:d6:d2:25:fc:b7:2f:94:04:0f:4a:77:c4:
                    56:aa:3b:9b:f0:e0:9d:11:bf:9e:2a:20:a7:e5:05:
                    c7:bb:e8:fd:74:1c:fd:8e:69:3d:ab:92:44:fa:17:
                    c6:73:52:c8:48:e9:5a:15:68:f1:a1:cd:17:ed:34:
                    e3:df:3d:97:98:f8:37:d5:81:19:c9:34:ba:dd:e0:
                    e1:8a:67:8b:75:fe:2c:1a:94:39:bb:84:8d:26:c7:
                    84:a8:b3:22:ed:e1:62:78:b8:d7:87:94:81:52:d9:
                    51:37:6b:ff:67:38:e5:f0:db:67:83:97:61:d9:b4:
                    1e:ea:aa:76:4c:a9:0a:9b:6c:5d:53:66:08:5e:b1:
                    70:17:a5:d9:f6:ee:c8:2f:fc:09:46:da:3b:99:f7:
                    5b:c1:2b:a2:1e:c1:74:9c:25:10:23:f2:38:ec:37:
                    d2:f1:e0:63:3f:e0:75:e5:ef:2e:ed:4f:2e:d0:63:
                    fb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:21:7F:C1:DB:14:56:B5:23:89:DB:64:4F:32:EB:CB:8A:03:1E:F4
            X509v3 Authority Key Identifier:
                keyid:95:3C:20:84:94:94:21:1C:87:1E:D3:3E:C1:04:46:FE:D4:2A:F4:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/5/953C20849494211C871ED33EC10446FED42AF4C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/953C20849494211C871ED33EC10446FED42AF4C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/5/323830343a376261303a3a2f33322d3438203d3e20323731343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:8b:5b:1d:31:56:c7:cb:a9:92:aa:ce:02:a6:b4:5b:fb:76:
         36:8d:d8:76:f4:29:3a:4b:a5:1a:f3:de:03:d1:82:5a:17:8d:
         f1:b6:96:04:98:a2:a4:59:81:9a:c2:2b:12:a9:c2:9a:cb:ed:
         91:b8:73:f8:2d:67:39:cc:e6:d8:66:01:1e:81:7a:f6:c0:d2:
         cb:78:cc:98:a2:4e:02:b3:f6:ed:1c:c7:8c:93:c9:8d:5d:9b:
         96:49:d8:d7:87:e9:51:52:64:08:d0:7c:ed:48:a1:3e:ea:21:
         9c:1b:c3:13:ea:8b:d4:68:d9:92:d4:0e:fb:b7:44:80:c2:62:
         f9:cb:22:72:b2:28:7e:80:da:b7:5a:ad:27:8e:6a:ba:cc:e8:
         98:2b:c6:60:a4:24:3e:bf:91:2c:52:49:59:5f:e4:ae:d9:7d:
         8c:7a:0d:d6:8b:da:13:80:b3:fd:eb:94:cc:c9:2e:d8:5c:7b:
         c1:53:24:8d:4b:58:eb:4a:10:3d:f6:c0:49:a7:56:ec:3c:53:
         83:92:01:1e:d3:83:5d:01:8a:98:01:5b:f4:cf:23:7f:19:36:
         59:95:82:32:f6:92:18:73:d3:b6:eb:e2:06:96:e7:3f:af:fe:
         16:25:f5:63:12:f7:41:b0:11:a5:a0:d8:58:d3:8d:ca:dd:68:
         68:1b:2b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:21:43 2025 by rpki-client