Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HzK6WDEqZEmQ4Qu7r8VfGkrSSiBUkm2ZcHQfoZUJ7Zb/0/323830343a343162383a3a2f33322d3336203d3e20323637343532.roa
File:                     323830343a343162383a3a2f33322d3336203d3e20323637343532.roa (raw, json)
Hash identifier:          MwYASTC3OmsjGmISDRN1DvlERhIZOy5sjWKZQ8IqTSA=
Subject key identifier:   7C:BC:74:23:F0:D2:F6:22:26:EB:B1:7A:04:4D:5B:69:70:1E:07:A2
Certificate issuer:       /CN=9E6482567E854EC419F6D3F4ACA870FAE1EEB719
Certificate serial:       195DE7E53536DE3B3DC6F2796320D0801029A67C
Authority key identifier: 9E:64:82:56:7E:85:4E:C4:19:F6:D3:F4:AC:A8:70:FA:E1:EE:B7:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9E6482567E854EC419F6D3F4ACA870FAE1EEB719.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HzK6WDEqZEmQ4Qu7r8VfGkrSSiBUkm2ZcHQfoZUJ7Zb/0/323830343a343162383a3a2f33322d3336203d3e20323637343532.roa
Signing time:             Mon 11 Jul 2022 19:28:00 +0000
ROA not before:           Mon 11 Jul 2022 19:23:00 +0000
ROA not after:            Mon 10 Jul 2023 19:28:00 +0000
asID:                     267452
IP address blocks:        2804:41b8::/32 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:5d:e7:e5:35:36:de:3b:3d:c6:f2:79:63:20:d0:80:10:29:a6:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E6482567E854EC419F6D3F4ACA870FAE1EEB719
        Validity
            Not Before: Jul 11 19:23:00 2022 GMT
            Not After : Jul 10 19:28:00 2023 GMT
        Subject: CN=3082010A0282010100B2F5F5454D9429AF360EF7D16E0A83DF7EC1CA18E76900C7B9B6C75931E28FFD88E2FCAE0742F6A19D9B212E0C99864055FFF70DED8D78980926BE0262F66EC1E220C0006360804DF842A38F502AD22E3EFF7539A69BF35C7954C3C2655468F59033814C9DEB86473E440DFB06CDE7A8A40E1580BB980CA0FA809E5E391FF4B5FE3FF118181B0D0B827778EB6D16E545AE06AA87C5682CD748CD1C181950BBA6D39E5FD5FD6EEB4535F1DC56AB0888232C00F2E2AC047481C667C085F289ABED9B00988D9BA2EE8D9C54024D81CAAB1E06EFCC68A8F4B2EF9591AE573E7D3470E8F2AFB7C4F7E98BFF8077E1854B0873A3C8D7E10EB70FD5928E3E7E1EEA5D1F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f5:f5:45:4d:94:29:af:36:0e:f7:d1:6e:0a:
                    83:df:7e:c1:ca:18:e7:69:00:c7:b9:b6:c7:59:31:
                    e2:8f:fd:88:e2:fc:ae:07:42:f6:a1:9d:9b:21:2e:
                    0c:99:86:40:55:ff:f7:0d:ed:8d:78:98:09:26:be:
                    02:62:f6:6e:c1:e2:20:c0:00:63:60:80:4d:f8:42:
                    a3:8f:50:2a:d2:2e:3e:ff:75:39:a6:9b:f3:5c:79:
                    54:c3:c2:65:54:68:f5:90:33:81:4c:9d:eb:86:47:
                    3e:44:0d:fb:06:cd:e7:a8:a4:0e:15:80:bb:98:0c:
                    a0:fa:80:9e:5e:39:1f:f4:b5:fe:3f:f1:18:18:1b:
                    0d:0b:82:77:78:eb:6d:16:e5:45:ae:06:aa:87:c5:
                    68:2c:d7:48:cd:1c:18:19:50:bb:a6:d3:9e:5f:d5:
                    fd:6e:eb:45:35:f1:dc:56:ab:08:88:23:2c:00:f2:
                    e2:ac:04:74:81:c6:67:c0:85:f2:89:ab:ed:9b:00:
                    98:8d:9b:a2:ee:8d:9c:54:02:4d:81:ca:ab:1e:06:
                    ef:cc:68:a8:f4:b2:ef:95:91:ae:57:3e:7d:34:70:
                    e8:f2:af:b7:c4:f7:e9:8b:ff:80:77:e1:85:4b:08:
                    73:a3:c8:d7:e1:0e:b7:0f:d5:92:8e:3e:7e:1e:ea:
                    5d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:BC:74:23:F0:D2:F6:22:26:EB:B1:7A:04:4D:5B:69:70:1E:07:A2
            X509v3 Authority Key Identifier:
                keyid:9E:64:82:56:7E:85:4E:C4:19:F6:D3:F4:AC:A8:70:FA:E1:EE:B7:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HzK6WDEqZEmQ4Qu7r8VfGkrSSiBUkm2ZcHQfoZUJ7Zb/0/9E6482567E854EC419F6D3F4ACA870FAE1EEB719.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9E6482567E854EC419F6D3F4ACA870FAE1EEB719.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HzK6WDEqZEmQ4Qu7r8VfGkrSSiBUkm2ZcHQfoZUJ7Zb/0/323830343a343162383a3a2f33322d3336203d3e20323637343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:18:0f:1d:fe:68:38:6c:13:a3:a9:5b:96:08:e1:e0:e2:ad:
         0d:d3:05:42:cb:69:9c:7a:13:33:d2:9a:d4:1a:ec:bd:47:04:
         38:38:3e:7e:f3:68:77:72:93:1c:27:02:2b:c7:36:b3:c3:85:
         3b:9e:16:e7:2e:2f:70:c9:e9:bc:87:9b:42:85:c2:77:36:f7:
         41:ff:8e:66:71:5a:56:fc:aa:f1:22:32:0f:e7:82:73:6e:aa:
         1e:fb:ed:04:67:e6:fd:59:fc:bf:40:0c:63:78:cc:d1:3a:98:
         08:69:d2:d6:50:4f:d8:ef:3a:dd:bc:71:d7:df:e2:f2:5d:b6:
         38:92:a1:6d:b1:71:02:e6:c0:4e:dc:89:34:64:44:81:3f:2b:
         ff:d3:b1:76:66:d5:b3:f7:c2:14:91:79:21:77:77:ba:3d:08:
         23:c7:fc:51:41:c1:97:ce:8e:2a:f5:15:45:a4:d0:e0:1a:b8:
         bc:fa:36:78:3a:e6:2a:9f:51:9e:ec:81:c8:e2:74:48:50:82:
         d5:a4:8d:f4:48:1d:af:39:1f:b3:52:f9:8e:d9:6a:d5:a6:44:
         33:5c:3a:39:2c:88:a0:70:5d:c6:98:33:ce:da:e7:c2:33:99:
         f9:02:f6:e5:3e:35:46:f8:79:da:fe:6e:3a:aa:f6:ce:0c:01:
         60:9b:3b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:44:17 2025 by rpki-client