Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/323830343a3265383a3230303a3a2f34302d3430203d3e20323632383437.roa
File:                     323830343a3265383a3230303a3a2f34302d3430203d3e20323632383437.roa (raw, json)
Hash identifier:          i8W+uWiDAO5KCHBi8ksNe6HZvIie3MYJLNaeiB31O24=
Subject key identifier:   CF:45:4C:D4:69:19:36:DD:DA:0B:E2:7B:41:37:0C:99:D8:70:9C:9D
Certificate issuer:       /CN=6BCF9F2C8F7BCF23D32B0C784120C9DA5C93A0D4
Certificate serial:       1261D7E4F6A3FE34E21D7BCE8F9BF69FBAADF047
Authority key identifier: 6B:CF:9F:2C:8F:7B:CF:23:D3:2B:0C:78:41:20:C9:DA:5C:93:A0:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BCF9F2C8F7BCF23D32B0C784120C9DA5C93A0D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/323830343a3265383a3230303a3a2f34302d3430203d3e20323632383437.roa
Signing time:             Fri 17 Jun 2022 13:37:44 +0000
ROA not before:           Fri 17 Jun 2022 13:32:44 +0000
ROA not after:            Fri 16 Jun 2023 13:37:44 +0000
asID:                     262847
IP address blocks:        2804:2e8:200::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:61:d7:e4:f6:a3:fe:34:e2:1d:7b:ce:8f:9b:f6:9f:ba:ad:f0:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BCF9F2C8F7BCF23D32B0C784120C9DA5C93A0D4
        Validity
            Not Before: Jun 17 13:32:44 2022 GMT
            Not After : Jun 16 13:37:44 2023 GMT
        Subject: CN=CF454CD4691936DDDA0BE27B41370C99D8709C9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:06:91:5b:f5:ab:4d:0a:72:b9:f4:9c:23:78:
                    2c:3a:ef:73:4f:82:25:2f:70:7a:0f:68:9f:24:52:
                    08:6d:97:2b:50:90:57:28:ac:d0:fe:19:40:a7:b4:
                    e2:92:6f:17:f2:38:23:d1:55:c0:5f:72:91:ca:b8:
                    92:36:1b:01:af:dc:36:ce:f9:bd:eb:72:0c:df:e3:
                    15:65:82:d1:fc:bd:7a:ea:fd:43:88:63:26:5f:56:
                    86:b4:2c:9d:35:9f:e3:97:89:c6:0a:c2:a0:bc:a8:
                    d9:a2:09:83:c3:95:22:31:6e:29:df:9e:a0:e5:d1:
                    be:18:b6:bb:1d:d6:94:11:01:c2:8e:e4:3d:94:3d:
                    d3:5e:46:64:41:40:7b:33:f2:93:6e:36:4f:0b:6d:
                    a0:48:6d:e1:f0:5c:70:57:ec:70:8d:1a:7a:5e:77:
                    fa:ae:e3:31:63:7a:ee:5a:3b:ae:4f:f6:2c:4e:d1:
                    50:d6:af:b6:63:a1:a2:a8:04:91:0a:06:a3:3b:c2:
                    22:02:ce:07:1c:90:fb:58:4d:8e:06:be:83:5a:a0:
                    50:06:e6:59:0d:61:42:96:bc:56:eb:6d:00:75:9d:
                    22:8c:cc:de:fc:6a:22:d8:41:1c:30:f1:f6:ff:c6:
                    1b:be:ba:f0:db:59:67:f1:91:a0:75:8f:00:83:8b:
                    66:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:45:4C:D4:69:19:36:DD:DA:0B:E2:7B:41:37:0C:99:D8:70:9C:9D
            X509v3 Authority Key Identifier:
                keyid:6B:CF:9F:2C:8F:7B:CF:23:D3:2B:0C:78:41:20:C9:DA:5C:93:A0:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/6BCF9F2C8F7BCF23D32B0C784120C9DA5C93A0D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BCF9F2C8F7BCF23D32B0C784120C9DA5C93A0D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/323830343a3265383a3230303a3a2f34302d3430203d3e20323632383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e8:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         9d:de:4b:d8:14:e0:74:fc:16:fe:30:fd:7d:df:0c:8b:85:a5:
         f6:b4:ca:0d:24:56:4f:ae:0a:22:41:2a:6e:c7:b5:c1:be:37:
         b3:5c:12:c1:e3:96:70:c4:05:ba:a8:cc:8a:a6:12:cc:9e:bc:
         71:ac:31:50:e7:a3:dc:c6:05:c2:72:af:21:72:ed:dd:f3:d1:
         47:07:69:47:4d:be:13:ae:be:61:d9:d9:30:d5:4b:6b:9c:e8:
         3a:2b:3f:9f:de:81:4b:de:7e:03:90:d6:e8:a5:94:6b:a6:9b:
         17:93:0b:8a:b6:cb:c5:60:d8:60:a2:8b:1f:d0:f1:a8:33:1f:
         ce:49:5b:b6:a5:b7:37:9a:17:78:54:98:f9:e9:b5:5c:d2:13:
         cf:31:7d:03:e4:9a:5f:37:69:3a:5e:bf:7a:4f:14:b1:44:b2:
         0b:38:f2:a6:15:86:99:cc:f5:ab:55:b6:b2:c1:ca:91:4b:46:
         e6:3a:1a:b8:fd:40:39:c4:c5:92:d3:ab:c6:0d:3c:44:66:b5:
         27:f6:6c:7f:b9:a2:c5:6c:65:06:4b:ef:6f:d5:59:68:a5:2a:
         70:1f:8a:fe:d6:44:73:0c:9b:90:f6:51:c0:f7:a8:1a:6a:26:
         d9:f0:25:22:c7:b1:6a:1e:5d:ec:38:dd:fc:56:8d:b8:4b:b0:
         be:c6:de:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:17:50 2025 by rpki-client