Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0/323830343a6438303a633030303a3a2f33342d3334203d3e203532363335.roa
File:                     323830343a6438303a633030303a3a2f33342d3334203d3e203532363335.roa (raw, json)
Hash identifier:          JvrwHRX5vrjNGaKc6eESMmBo/aY+L+IB3SyPjAvqN4c=
Subject key identifier:   CB:30:20:58:12:B6:11:0C:FF:44:4E:6A:79:40:65:F8:11:8F:6F:37
Certificate issuer:       /CN=63ED338701F5B4BCE8EF3D9881EE5EF1299FD237
Certificate serial:       205159D68AC779C1A31888DBF0FC72EA6D72D71A
Authority key identifier: 63:ED:33:87:01:F5:B4:BC:E8:EF:3D:98:81:EE:5E:F1:29:9F:D2:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63ED338701F5B4BCE8EF3D9881EE5EF1299FD237.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0/323830343a6438303a633030303a3a2f33342d3334203d3e203532363335.roa
Signing time:             Sat 24 Sep 2022 18:49:48 +0000
ROA not before:           Sat 24 Sep 2022 18:44:48 +0000
ROA not after:            Sat 23 Sep 2023 18:49:48 +0000
asID:                     52635
IP address blocks:        2804:d80:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:51:59:d6:8a:c7:79:c1:a3:18:88:db:f0:fc:72:ea:6d:72:d7:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63ED338701F5B4BCE8EF3D9881EE5EF1299FD237
        Validity
            Not Before: Sep 24 18:44:48 2022 GMT
            Not After : Sep 23 18:49:48 2023 GMT
        Subject: CN=CB30205812B6110CFF444E6A794065F8118F6F37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e1:79:74:b7:65:17:fb:5e:b4:c6:93:1a:ed:
                    99:cc:cb:26:db:0f:3b:73:09:2a:37:4c:05:f0:6d:
                    6d:a7:b2:a7:1d:52:13:74:7c:3e:5c:9b:7b:f2:0a:
                    ad:25:6e:3d:eb:ff:5d:5f:3c:18:c3:bc:c9:a1:b3:
                    e2:42:23:6b:5c:c8:4d:7f:78:94:23:d6:c3:06:07:
                    d4:05:26:c3:e6:ed:b8:e4:ed:cf:18:f3:a0:76:b8:
                    66:33:8d:f2:9d:11:7b:2a:98:bf:a5:a4:2e:c2:cc:
                    7f:f6:87:ee:68:36:6f:33:4f:c9:43:9f:dc:b0:b0:
                    66:8e:a8:64:64:54:21:54:f7:f0:3d:ed:d1:8c:4c:
                    14:f9:08:ac:66:93:54:8a:95:2c:32:3d:1a:ed:a8:
                    27:7f:1c:3e:cc:66:a3:56:d0:0d:37:1f:e5:ef:54:
                    eb:d1:bb:9d:41:4e:50:5e:bd:6d:80:a9:97:85:21:
                    8c:a0:93:9f:36:38:de:0d:35:10:63:d9:42:4f:af:
                    c3:2c:14:2e:8a:18:1b:9d:76:49:95:2a:d2:d7:22:
                    ad:3e:db:94:58:ab:13:f4:6e:69:87:85:18:9b:1b:
                    b4:56:75:1f:d0:55:d9:2c:17:ec:a6:97:c4:cb:16:
                    f3:ed:4f:66:37:b1:6c:99:a9:8a:62:35:de:ca:32:
                    04:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:30:20:58:12:B6:11:0C:FF:44:4E:6A:79:40:65:F8:11:8F:6F:37
            X509v3 Authority Key Identifier:
                keyid:63:ED:33:87:01:F5:B4:BC:E8:EF:3D:98:81:EE:5E:F1:29:9F:D2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0/63ED338701F5B4BCE8EF3D9881EE5EF1299FD237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63ED338701F5B4BCE8EF3D9881EE5EF1299FD237.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0/323830343a6438303a633030303a3a2f33342d3334203d3e203532363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d80:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         4a:8e:97:72:04:9c:4b:3a:4c:d0:92:ac:bb:32:58:bd:c9:2e:
         c1:d9:92:ac:c9:57:12:36:ea:c3:03:06:62:00:3e:a6:c0:a3:
         02:45:99:6f:c7:6e:34:62:0e:19:bc:51:8c:81:dc:ae:48:54:
         1e:c5:7f:ab:76:ef:7f:1b:6b:26:39:d0:f9:d7:02:fb:7f:1f:
         14:06:8c:c8:57:9d:df:80:d5:7e:98:b9:2d:a6:bd:dc:75:d9:
         aa:32:9b:44:45:f2:14:9f:40:8f:6c:9d:76:3e:c1:a9:34:54:
         f1:04:78:d3:2c:2d:9b:ce:7d:6e:64:2c:4e:dd:7f:37:dd:79:
         24:85:ab:7b:b8:ec:37:a8:71:68:46:72:3b:9c:90:a8:c2:95:
         54:02:5f:ca:24:3a:be:7d:db:6e:20:cb:9a:2b:51:0d:8f:78:
         28:7a:be:e4:49:3c:8f:a1:cc:02:20:f6:3e:22:47:22:33:c9:
         a1:04:f3:ab:f9:82:9a:bf:1e:2f:38:fd:83:f5:ed:41:d2:08:
         4e:98:af:de:30:5a:6a:d8:1f:f0:2a:23:02:45:1b:ff:42:c3:
         e7:b5:64:a0:6e:0c:75:c2:56:26:b6:48:f2:5e:18:7c:8f:21:
         27:55:ae:66:e4:69:74:bd:96:c0:d6:85:54:38:68:a8:6a:95:
         0f:92:38:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:39 2025 by rpki-client