Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3woUakbjNDcudtZ7oMxF3CWmb4HfimZLBWBPzffDWN2P/0/323830343a313364303a393938303a3a2f34322d3432203d3e20323633323937.roa
File:                     323830343a313364303a393938303a3a2f34322d3432203d3e20323633323937.roa (raw, json)
Hash identifier:          n8xo3Yki1Lo+SjEI2ukllHPjwUbQS4RnBdaKkV4I6FE=
Subject key identifier:   AA:F3:FB:04:AC:D7:DC:CD:39:AC:C7:28:CA:A0:2E:6B:BC:61:FB:39
Certificate issuer:       /CN=7A09C5FAC16CC8DD19A26F03BA7F863A3003602F
Certificate serial:       333AE3C4807BCA08E08F6224E02520CC923C3AF7
Authority key identifier: 7A:09:C5:FA:C1:6C:C8:DD:19:A2:6F:03:BA:7F:86:3A:30:03:60:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A09C5FAC16CC8DD19A26F03BA7F863A3003602F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3woUakbjNDcudtZ7oMxF3CWmb4HfimZLBWBPzffDWN2P/0/323830343a313364303a393938303a3a2f34322d3432203d3e20323633323937.roa
Signing time:             Tue 09 Aug 2022 21:07:06 +0000
ROA not before:           Tue 09 Aug 2022 21:02:06 +0000
ROA not after:            Tue 08 Aug 2023 21:07:06 +0000
asID:                     263297
IP address blocks:        2804:13d0:9980::/42 maxlen: 42
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:3a:e3:c4:80:7b:ca:08:e0:8f:62:24:e0:25:20:cc:92:3c:3a:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A09C5FAC16CC8DD19A26F03BA7F863A3003602F
        Validity
            Not Before: Aug  9 21:02:06 2022 GMT
            Not After : Aug  8 21:07:06 2023 GMT
        Subject: CN=AAF3FB04ACD7DCCD39ACC728CAA02E6BBC61FB39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a7:e4:70:b5:b5:31:f7:00:70:f5:3b:e9:3e:
                    7d:a3:2c:2d:96:27:8a:ce:a9:e6:fc:be:24:f1:13:
                    cb:98:9e:1b:e5:fb:54:c7:ca:77:aa:02:09:02:61:
                    38:e9:ed:7f:72:e6:ac:f0:78:19:b7:7d:33:9e:f5:
                    49:a8:a0:5c:52:7e:3a:a2:14:06:6e:56:d7:dc:a0:
                    0d:1b:29:fb:4b:5e:9d:ab:15:db:84:cf:b2:75:c5:
                    69:70:5f:b4:57:4c:77:cb:aa:1f:8f:58:83:21:26:
                    96:fc:cc:22:eb:8b:3f:cf:5c:18:25:04:79:d4:69:
                    5c:e7:1f:bd:62:00:ab:53:62:a6:f8:bb:44:3e:f0:
                    99:35:5d:e0:a8:70:a1:3e:86:f4:3b:c3:c4:1f:f0:
                    89:fb:c5:0e:02:c3:a1:f1:9c:73:67:b1:14:bf:c6:
                    62:e1:e3:ad:3a:59:44:df:84:fb:40:3c:f6:da:1c:
                    75:09:0f:52:18:2a:cd:1b:66:52:89:a9:c3:89:94:
                    4c:34:9c:24:6a:c2:2a:3a:bb:9c:91:ad:fe:1a:86:
                    0c:81:1b:08:0c:e9:2e:2e:bf:76:20:aa:56:a6:f8:
                    79:f8:17:68:df:1b:33:4c:8a:dc:cb:38:f0:c3:91:
                    f1:47:b2:f4:90:ec:fa:f7:0f:61:57:3e:ce:b3:c3:
                    29:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F3:FB:04:AC:D7:DC:CD:39:AC:C7:28:CA:A0:2E:6B:BC:61:FB:39
            X509v3 Authority Key Identifier:
                keyid:7A:09:C5:FA:C1:6C:C8:DD:19:A2:6F:03:BA:7F:86:3A:30:03:60:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3woUakbjNDcudtZ7oMxF3CWmb4HfimZLBWBPzffDWN2P/0/7A09C5FAC16CC8DD19A26F03BA7F863A3003602F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A09C5FAC16CC8DD19A26F03BA7F863A3003602F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3woUakbjNDcudtZ7oMxF3CWmb4HfimZLBWBPzffDWN2P/0/323830343a313364303a393938303a3a2f34322d3432203d3e20323633323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:13d0:9980::/42

    Signature Algorithm: sha256WithRSAEncryption
         94:c1:c0:36:34:26:64:64:d0:9a:80:45:f3:44:eb:e3:50:a0:
         8d:a8:2f:ac:f9:06:51:86:5e:f9:33:66:c5:92:62:f2:0f:48:
         dd:6a:54:87:dd:dd:e6:b9:9f:96:7d:78:05:27:1e:a1:16:86:
         df:1b:f1:5f:b0:77:18:0e:26:24:46:00:24:66:3b:f6:3e:35:
         1b:cf:0e:1d:6a:20:77:fa:61:d4:3a:11:c2:19:29:e8:09:64:
         af:9c:26:8e:45:fb:cb:ad:7b:09:ad:b4:8c:2a:7c:45:2c:18:
         65:f6:49:01:f5:bd:2c:fc:87:ec:63:26:cb:50:8f:46:8c:8c:
         d7:40:aa:7b:8d:21:5b:f4:15:85:f8:54:1b:59:15:ff:50:e8:
         71:84:c2:8c:c7:b2:46:c5:f6:3d:aa:ec:c9:f8:4a:d0:8a:ac:
         98:13:28:d0:22:80:bf:ad:a3:20:22:ac:3b:6d:c9:0d:fe:30:
         92:8c:9d:72:9d:ac:5f:9c:e0:0b:69:17:98:40:d0:ba:c0:16:
         9d:99:d9:e5:ac:00:28:3b:49:c4:01:eb:00:d3:37:29:e9:10:
         6c:76:79:1d:e2:8b:0a:e9:8c:2e:e3:8b:dd:5b:4d:04:47:3b:
         31:01:0a:ea:24:b4:f9:d3:a8:01:bc:db:21:9a:31:43:42:75:
         68:1b:08:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:42:54 2025 by rpki-client