Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0/323830343a6438303a383030303a3a2f33342d3334203d3e203532363335.roa
File:                     323830343a6438303a383030303a3a2f33342d3334203d3e203532363335.roa (raw, json)
Hash identifier:          OPBsXa+gS0ghi7yQ1hoJBCE5UdQWikchxTZ39JQyRH4=
Subject key identifier:   39:91:C5:A9:B1:98:DC:51:61:3A:3F:EE:C1:DA:70:5D:81:CD:CA:25
Certificate issuer:       /CN=63ED338701F5B4BCE8EF3D9881EE5EF1299FD237
Certificate serial:       1FC1F672C3B3BCB97264F220010B49D5337066AA
Authority key identifier: 63:ED:33:87:01:F5:B4:BC:E8:EF:3D:98:81:EE:5E:F1:29:9F:D2:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63ED338701F5B4BCE8EF3D9881EE5EF1299FD237.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0/323830343a6438303a383030303a3a2f33342d3334203d3e203532363335.roa
Signing time:             Sat 24 Sep 2022 18:49:32 +0000
ROA not before:           Sat 24 Sep 2022 18:44:32 +0000
ROA not after:            Sat 23 Sep 2023 18:49:32 +0000
asID:                     52635
IP address blocks:        2804:d80:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:c1:f6:72:c3:b3:bc:b9:72:64:f2:20:01:0b:49:d5:33:70:66:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63ED338701F5B4BCE8EF3D9881EE5EF1299FD237
        Validity
            Not Before: Sep 24 18:44:32 2022 GMT
            Not After : Sep 23 18:49:32 2023 GMT
        Subject: CN=3991C5A9B198DC51613A3FEEC1DA705D81CDCA25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:29:ff:6a:56:e6:c0:7a:b4:72:31:4c:f6:9a:
                    73:57:77:34:6a:ef:f3:4a:ff:1c:1d:09:49:c9:8a:
                    07:5c:84:64:3a:1e:00:5e:e1:43:79:48:6a:3c:7d:
                    da:eb:c3:e8:13:6d:f4:c5:01:26:df:e2:2f:7a:0e:
                    65:06:74:e0:da:22:ff:a7:53:7d:18:83:8c:1e:3f:
                    4d:8e:63:ea:b8:05:27:95:33:5f:36:a8:b8:6b:92:
                    c5:8c:59:f2:12:ee:a5:c9:e1:80:bb:f1:57:d1:6e:
                    b6:b9:22:78:8e:1a:8e:96:18:12:cc:60:16:dd:87:
                    f8:ad:4c:9c:43:96:b3:9a:3a:c6:f8:a3:b3:6f:de:
                    eb:5e:13:a8:c2:b3:46:cf:91:d7:41:be:96:f8:60:
                    5d:9d:49:cc:b4:f8:7e:53:47:45:d0:75:c0:af:a5:
                    24:d6:1d:98:3b:23:d6:44:c6:3a:55:3d:a3:e1:0b:
                    c5:16:e2:21:4e:1c:54:e9:3f:33:bb:f3:15:b0:9e:
                    95:e4:32:31:12:fb:85:1d:a9:4b:a1:8e:c0:53:a1:
                    e0:2b:a2:50:bb:d8:44:88:fc:0c:b5:15:ef:37:69:
                    31:b3:03:a7:bc:97:b6:d3:be:2e:33:ba:6f:a6:45:
                    df:a7:91:3a:48:d8:90:76:5b:ac:d1:8f:a4:b8:f7:
                    a3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:91:C5:A9:B1:98:DC:51:61:3A:3F:EE:C1:DA:70:5D:81:CD:CA:25
            X509v3 Authority Key Identifier:
                keyid:63:ED:33:87:01:F5:B4:BC:E8:EF:3D:98:81:EE:5E:F1:29:9F:D2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0/63ED338701F5B4BCE8EF3D9881EE5EF1299FD237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63ED338701F5B4BCE8EF3D9881EE5EF1299FD237.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0/323830343a6438303a383030303a3a2f33342d3334203d3e203532363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d80:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         29:19:20:12:29:2b:38:a5:71:00:c4:dd:8f:bb:5a:f2:72:d1:
         a9:54:8a:1d:a2:96:08:6c:50:05:f4:53:06:1d:95:b8:e4:22:
         6e:63:c5:00:f8:24:c5:38:ef:01:0a:7f:4b:9c:12:de:78:0d:
         ff:9c:7e:0e:db:41:6c:87:3b:00:4b:6e:0f:00:d2:cf:d5:0e:
         03:e1:00:0e:ab:0d:c2:4b:9f:4d:63:b7:ed:dd:01:81:d6:5a:
         d8:29:7c:5c:b4:58:69:69:43:90:20:3a:5c:99:09:f2:6b:27:
         d8:52:ef:b8:cc:97:c0:6c:ee:13:86:e8:f4:b6:cc:d5:01:dc:
         6f:93:01:e4:85:38:fb:12:5e:d6:ed:1c:2b:7a:59:2b:27:a1:
         d7:92:26:3b:f0:f0:64:ac:15:af:98:c9:14:60:20:53:1c:d5:
         41:bf:88:13:a4:2f:b4:2e:b5:fc:93:4b:4d:f0:68:e2:38:50:
         60:15:dc:d1:d1:3d:1f:72:d8:46:5f:f4:3d:24:fb:82:a0:63:
         89:06:f5:f1:eb:d8:b6:be:96:af:8c:60:01:c8:51:df:76:01:
         6b:28:1a:0f:ba:64:ea:e5:78:fb:11:96:8d:d3:f6:0e:4a:a3:
         1b:49:b9:b2:05:13:f1:05:20:b5:4e:82:b5:fd:a0:7c:ce:a3:
         48:4d:dc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:34 2025 by rpki-client