Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/0/323830343a383162343a3a2f33322d3335203d3e20323732343731.roa
File:                     323830343a383162343a3a2f33322d3335203d3e20323732343731.roa (raw, json)
Hash identifier:          F+Z3xP0teECD/n6nYRXO1Pe8wBboTv1L57qyiZb4Twg=
Subject key identifier:   78:75:02:AB:C6:44:13:7C:4B:75:D5:ED:83:6F:45:BF:F8:18:F7:63
Certificate issuer:       /CN=A90F92512D878D28CA624AA3478566892BCB9E26
Certificate serial:       65B9B293BBC03BE5F9443D02525E44DD1F7C2D16
Authority key identifier: A9:0F:92:51:2D:87:8D:28:CA:62:4A:A3:47:85:66:89:2B:CB:9E:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A90F92512D878D28CA624AA3478566892BCB9E26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/0/323830343a383162343a3a2f33322d3335203d3e20323732343731.roa
Signing time:             Tue 07 Nov 2023 16:19:20 +0000
ROA not before:           Tue 07 Nov 2023 16:14:20 +0000
ROA not after:            Tue 05 Nov 2024 16:19:20 +0000
asID:                     272471
IP address blocks:        2804:81b4::/32 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:b9:b2:93:bb:c0:3b:e5:f9:44:3d:02:52:5e:44:dd:1f:7c:2d:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90F92512D878D28CA624AA3478566892BCB9E26
        Validity
            Not Before: Nov  7 16:14:20 2023 GMT
            Not After : Nov  5 16:19:20 2024 GMT
        Subject: CN=787502ABC644137C4B75D5ED836F45BFF818F763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f2:eb:c5:bc:2f:55:3b:e7:cf:47:95:ad:76:
                    f2:70:6f:f6:f5:03:34:59:83:40:d1:61:ee:56:d1:
                    cc:58:c7:ae:fb:f5:18:da:89:af:9d:fe:65:5a:49:
                    50:7a:53:9b:52:4c:eb:49:53:9a:d1:e9:1d:18:b8:
                    24:04:d5:bc:d6:dd:d1:72:cf:1b:f8:33:c7:5a:f4:
                    49:21:37:80:6c:91:59:4a:8f:46:16:c9:8a:7b:d5:
                    e2:e5:34:37:80:dc:60:78:54:d2:d8:02:e1:d7:b0:
                    3e:1c:23:e8:af:0c:97:30:a6:db:b6:70:cf:97:a2:
                    04:4c:6c:b2:1b:f7:c7:5b:2b:3d:9b:ab:47:57:35:
                    24:01:12:5b:98:06:d6:17:fb:b0:9f:5e:15:6c:ba:
                    55:d7:2b:d2:b3:41:6b:de:30:11:62:af:a3:27:91:
                    e9:da:ad:04:40:85:f3:e6:a3:22:b1:b2:49:bb:e5:
                    89:0e:7d:b4:56:fb:c4:67:93:0e:68:8b:94:34:df:
                    50:b9:40:00:8a:ba:65:6a:97:0e:2e:85:ea:5f:5b:
                    5b:f4:59:0a:39:33:37:59:d7:70:85:fa:4d:5b:6f:
                    cf:69:7f:03:d4:9f:62:86:8b:25:27:d5:82:d6:6a:
                    fc:d3:7c:6a:4c:85:f7:2c:74:bc:f6:33:74:6f:25:
                    96:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:75:02:AB:C6:44:13:7C:4B:75:D5:ED:83:6F:45:BF:F8:18:F7:63
            X509v3 Authority Key Identifier:
                keyid:A9:0F:92:51:2D:87:8D:28:CA:62:4A:A3:47:85:66:89:2B:CB:9E:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/0/A90F92512D878D28CA624AA3478566892BCB9E26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A90F92512D878D28CA624AA3478566892BCB9E26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/0/323830343a383162343a3a2f33322d3335203d3e20323732343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:81b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:32:58:20:bb:8a:9d:3c:01:53:0a:d2:37:ff:d3:71:9d:f9:
         08:1d:5f:a4:f5:db:87:8a:3a:4e:b8:fa:a5:f7:37:cf:1b:42:
         3f:e5:f3:03:37:d0:40:3f:eb:3f:6d:97:d0:ed:33:b7:65:f7:
         d6:ad:90:dd:fb:08:7b:30:0f:94:b2:83:12:ed:82:3e:d7:11:
         54:85:65:e2:94:d9:ca:83:94:50:f5:88:b6:de:3c:33:9b:d4:
         e2:97:df:3f:f0:a6:71:6c:e5:32:b4:aa:58:9a:0c:aa:84:0a:
         f1:3c:d6:e4:33:a0:7f:9d:22:b5:ef:da:87:ef:54:a7:95:29:
         a3:d6:ff:2b:51:03:43:c8:4e:37:8f:18:69:58:df:66:bb:37:
         7c:e6:8e:c5:6c:84:b0:cf:be:ba:05:7e:3b:da:c1:7d:9c:e2:
         40:64:a0:c1:8d:e2:57:ae:50:07:87:25:d0:26:99:12:2e:e8:
         3d:ad:e2:73:ce:2c:38:f9:e9:63:cd:77:88:e4:55:ac:fa:e2:
         29:73:0f:8c:23:df:7a:6b:5b:53:bb:c5:55:e8:ff:22:4e:37:
         fe:03:6e:31:58:95:19:63:d4:69:d3:e7:d3:57:34:95:6d:e9:
         11:16:8c:c4:f2:9d:79:03:d6:6e:19:8d:2e:77:f3:62:80:16:
         c8:ce:ad:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:54 2025 by rpki-client