Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/323830343a31343a3a2f33322d3438203d3e203238333630.roa
File:                     323830343a31343a3a2f33322d3438203d3e203238333630.roa (raw, json)
Hash identifier:          Obso0x7fNb+aBRniXW/Fx05UvmKO+EzkmaRNSc1nCHA=
Subject key identifier:   70:BB:A5:B6:5D:91:D4:57:DA:3F:C7:68:E1:33:94:9C:45:F8:F1:63
Certificate issuer:       /CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
Certificate serial:       3B458C2D298F8F8036E13AB62ACD00F0C697725D
Authority key identifier: 16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/323830343a31343a3a2f33322d3438203d3e203238333630.roa
Signing time:             Fri 18 Nov 2022 13:29:58 +0000
ROA not before:           Fri 18 Nov 2022 13:24:58 +0000
ROA not after:            Fri 17 Nov 2023 13:29:58 +0000
asID:                     28360
IP address blocks:        2804:14::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:45:8c:2d:29:8f:8f:80:36:e1:3a:b6:2a:cd:00:f0:c6:97:72:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
        Validity
            Not Before: Nov 18 13:24:58 2022 GMT
            Not After : Nov 17 13:29:58 2023 GMT
        Subject: CN=70BBA5B65D91D457DA3FC768E133949C45F8F163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:53:be:e6:1d:31:2b:49:ce:9e:d3:ff:c1:5a:
                    01:46:10:e3:79:f2:39:c8:bc:74:86:e9:45:dd:d4:
                    4d:49:ec:4e:d4:a6:4c:27:fc:3c:2a:d0:ee:f6:d5:
                    94:02:08:05:fd:9d:2d:a7:d9:12:8f:f7:65:b2:d2:
                    a9:b7:65:29:cd:7f:55:4a:e7:be:4c:db:63:68:de:
                    04:91:f7:99:5a:d5:d5:ec:5b:cc:9e:fc:8b:08:84:
                    cf:36:5d:23:49:e9:69:34:c8:80:3c:0c:97:82:64:
                    39:46:23:0b:f0:f1:44:2c:b4:7e:a5:74:98:6b:00:
                    97:cd:61:ff:d8:83:6f:f9:32:ad:81:98:1e:5a:cd:
                    7f:90:4e:65:7c:45:8a:c3:e1:a3:bc:d1:39:6f:1d:
                    97:c4:4d:c0:30:d7:ed:8d:47:15:8f:44:c0:96:2f:
                    ba:3d:bc:3e:21:7b:3e:a8:41:93:22:28:d7:a7:0c:
                    6d:fb:b2:c8:1a:f2:47:f6:ee:e1:63:be:8b:f6:1f:
                    1e:81:3f:79:d0:c6:7d:7f:5a:c9:bd:09:0e:fe:83:
                    b8:d3:14:4b:24:95:68:c1:ae:f5:d4:3a:b8:35:f7:
                    de:e5:8f:c4:b6:2e:8e:38:01:95:90:4f:cc:0d:3a:
                    80:5a:6d:0a:cb:36:b1:dc:be:62:00:e6:72:9a:92:
                    30:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:BB:A5:B6:5D:91:D4:57:DA:3F:C7:68:E1:33:94:9C:45:F8:F1:63
            X509v3 Authority Key Identifier:
                keyid:16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/323830343a31343a3a2f33322d3438203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:6e:23:a2:9e:08:74:4e:28:88:6c:7d:d5:f5:da:e7:ea:ba:
         dc:41:02:fb:82:70:19:eb:41:b9:4c:42:49:3c:1c:f2:95:6d:
         3a:32:a6:65:c5:ef:1c:ab:44:56:98:7b:8b:70:41:23:87:cb:
         e2:a3:cb:26:74:fd:0a:70:f3:5a:5a:8b:c2:eb:f1:af:7d:ac:
         ee:10:49:74:a9:fc:cd:4e:e8:aa:74:2f:73:2d:44:59:13:c7:
         bb:0a:d3:d9:ff:20:0c:33:b5:b7:f5:5e:f5:1d:33:e7:69:e3:
         c7:c8:5e:29:c6:b1:f2:47:43:82:9a:99:cb:ea:f4:9f:e3:6d:
         ec:64:ef:09:d8:8c:40:31:12:9f:7d:17:6a:7a:09:21:b5:be:
         82:47:e7:94:e3:a4:a8:41:9c:98:ad:6a:87:5a:b2:8d:89:6a:
         fe:1c:39:2d:eb:77:df:ee:e5:a6:71:20:a2:c8:b4:3b:07:94:
         52:6b:c3:02:f7:c5:27:74:19:c2:fa:69:6c:a9:a5:79:23:9b:
         ef:11:bb:c8:12:92:bc:e7:99:60:e6:ab:b4:2b:9a:10:37:96:
         32:ac:21:cf:76:52:f1:ac:0c:4e:c8:7d:24:23:72:b2:72:c1:
         a2:61:00:6b:9f:e1:2e:51:73:cb:da:f3:ad:c3:11:ce:5f:f5:
         74:2f:94:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:50:33 2025 by rpki-client