Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/323830343a333933633a383030303a3a2f3334203d3e20323636303230.roa
File:                     323830343a333933633a383030303a3a2f3334203d3e20323636303230.roa (raw, json)
Hash identifier:          AJ0lXCQfNwQ01w6jU/gVde9Se7EyWt3llaNVLnANhck=
Subject key identifier:   23:AA:B5:E0:76:75:59:6A:7F:B3:CF:E0:21:19:F3:19:DF:C0:BD:9E
Certificate issuer:       /CN=9B82367026AF19E52BC80C942DEF8DA09D76AEF3
Certificate serial:       CA029EF05E29F30BAF03CC084E101CB171C756
Authority key identifier: 9B:82:36:70:26:AF:19:E5:2B:C8:0C:94:2D:EF:8D:A0:9D:76:AE:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B82367026AF19E52BC80C942DEF8DA09D76AEF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/323830343a333933633a383030303a3a2f3334203d3e20323636303230.roa
Signing time:             Wed 17 Jan 2024 15:00:00 +0000
ROA not before:           Wed 17 Jan 2024 14:55:00 +0000
ROA not after:            Fri 17 Jan 2025 15:00:00 +0000
asID:                     266020
IP address blocks:        2804:393c:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ca:02:9e:f0:5e:29:f3:0b:af:03:cc:08:4e:10:1c:b1:71:c7:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B82367026AF19E52BC80C942DEF8DA09D76AEF3
        Validity
            Not Before: Jan 17 14:55:00 2024 GMT
            Not After : Jan 17 15:00:00 2025 GMT
        Subject: CN=3082010A0282010100ACD25A70054EFAE6E09D676AF820F6D6164CA1578893437A6234819E1DAFE6CC61A387F375515918F47843D82E620F3DA46289A60D91831A59CFD2FC083969F110203809F348645BBD48D497250C31F6E8255AC1B80343C92237C3F837C3851966E3821431A26DA2E8CFF7C06AE5C90D701F7608FA4CD81FC516B931611452530675420A937A8CBD957C1AAC68A58359B7E27F341BDB529C7B91C12745210B19E2B6491369CE636D2265FC224B54023137E9661513F27B297088D8C5AD6E99471F7ABB3471358DBEFAECF176C5CA0A6CA3DCC5BC59EB1A9CB75D600ADC1F3D17353D600BBADDEB42C8AEB4CB7842FFA1C99EBC49929B7CD5351D7024E00E7E8D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d2:5a:70:05:4e:fa:e6:e0:9d:67:6a:f8:20:
                    f6:d6:16:4c:a1:57:88:93:43:7a:62:34:81:9e:1d:
                    af:e6:cc:61:a3:87:f3:75:51:59:18:f4:78:43:d8:
                    2e:62:0f:3d:a4:62:89:a6:0d:91:83:1a:59:cf:d2:
                    fc:08:39:69:f1:10:20:38:09:f3:48:64:5b:bd:48:
                    d4:97:25:0c:31:f6:e8:25:5a:c1:b8:03:43:c9:22:
                    37:c3:f8:37:c3:85:19:66:e3:82:14:31:a2:6d:a2:
                    e8:cf:f7:c0:6a:e5:c9:0d:70:1f:76:08:fa:4c:d8:
                    1f:c5:16:b9:31:61:14:52:53:06:75:42:0a:93:7a:
                    8c:bd:95:7c:1a:ac:68:a5:83:59:b7:e2:7f:34:1b:
                    db:52:9c:7b:91:c1:27:45:21:0b:19:e2:b6:49:13:
                    69:ce:63:6d:22:65:fc:22:4b:54:02:31:37:e9:66:
                    15:13:f2:7b:29:70:88:d8:c5:ad:6e:99:47:1f:7a:
                    bb:34:71:35:8d:be:fa:ec:f1:76:c5:ca:0a:6c:a3:
                    dc:c5:bc:59:eb:1a:9c:b7:5d:60:0a:dc:1f:3d:17:
                    35:3d:60:0b:ba:dd:eb:42:c8:ae:b4:cb:78:42:ff:
                    a1:c9:9e:bc:49:92:9b:7c:d5:35:1d:70:24:e0:0e:
                    7e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:AA:B5:E0:76:75:59:6A:7F:B3:CF:E0:21:19:F3:19:DF:C0:BD:9E
            X509v3 Authority Key Identifier:
                keyid:9B:82:36:70:26:AF:19:E5:2B:C8:0C:94:2D:EF:8D:A0:9D:76:AE:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/9B82367026AF19E52BC80C942DEF8DA09D76AEF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B82367026AF19E52BC80C942DEF8DA09D76AEF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/323830343a333933633a383030303a3a2f3334203d3e20323636303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:393c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6b:ed:e2:b4:31:d9:da:9f:a8:96:f7:e8:fa:c4:8f:8c:a9:a2:
         5c:34:34:7b:da:dd:a7:e8:19:ef:0d:14:f1:84:6c:ff:e3:76:
         a9:3a:b4:97:e1:c0:ce:e9:c8:7b:d8:04:c7:51:8f:e6:bf:43:
         e5:8f:fa:0d:e1:81:4d:ab:61:a9:11:41:ac:d1:19:8c:f4:6f:
         3a:a3:76:90:da:e9:ba:70:55:f5:6a:dd:4a:f9:1e:1b:0d:24:
         41:de:fd:ba:20:e7:45:e4:ac:eb:00:e1:99:a3:15:2e:fc:61:
         78:d4:2f:23:c5:d4:a4:ba:a6:ee:1c:cd:fc:74:78:b3:6b:2c:
         03:64:45:cb:2d:e5:33:08:18:55:9d:fa:bc:36:90:2f:01:22:
         88:83:7f:a7:ae:4b:df:b7:d7:c8:01:7d:d7:b6:da:59:24:5d:
         36:60:95:fe:c1:c5:39:57:2b:8b:72:75:4a:84:03:5f:f1:7a:
         0a:f7:7c:44:4b:ff:91:ff:24:da:62:41:67:81:a1:a6:3c:a4:
         b4:d3:b9:28:30:15:21:b7:df:7f:ff:01:65:5f:66:a6:f6:5c:
         60:d9:69:b5:18:18:a9:90:21:2e:49:54:25:fc:92:02:68:9a:
         c2:10:50:91:d8:34:9d:8b:cc:fd:f8:af:01:0d:ed:ea:b0:03:
         27:d5:50:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:58:56 2025 by rpki-client