Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4MA8wpoPwSFcd4tdm1p1hiXgq6X4EDsWweLiwujPvDxc/0/323830343a366438383a3a2f33322d3332203d3e20323730353339.roa
File:                     323830343a366438383a3a2f33322d3332203d3e20323730353339.roa (raw, json)
Hash identifier:          zzRt798jeTUlicI9xZzX6+yoBpyS5Bxk08JbFxejJt0=
Subject key identifier:   4C:34:F2:64:B9:A1:D8:CB:16:FC:D4:25:91:DD:53:A8:5D:AD:40:63
Certificate issuer:       /CN=1E9BC0E34E3E1C72FCCDD8859BB10F3CE828A014
Certificate serial:       7821E9C90B110DC8B4545E0B2FE32B98E6740EC9
Authority key identifier: 1E:9B:C0:E3:4E:3E:1C:72:FC:CD:D8:85:9B:B1:0F:3C:E8:28:A0:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E9BC0E34E3E1C72FCCDD8859BB10F3CE828A014.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MA8wpoPwSFcd4tdm1p1hiXgq6X4EDsWweLiwujPvDxc/0/323830343a366438383a3a2f33322d3332203d3e20323730353339.roa
Signing time:             Tue 25 Oct 2022 17:01:45 +0000
ROA not before:           Tue 25 Oct 2022 16:56:45 +0000
ROA not after:            Tue 24 Oct 2023 17:01:45 +0000
asID:                     270539
IP address blocks:        2804:6d88::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:21:e9:c9:0b:11:0d:c8:b4:54:5e:0b:2f:e3:2b:98:e6:74:0e:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E9BC0E34E3E1C72FCCDD8859BB10F3CE828A014
        Validity
            Not Before: Oct 25 16:56:45 2022 GMT
            Not After : Oct 24 17:01:45 2023 GMT
        Subject: CN=4C34F264B9A1D8CB16FCD42591DD53A85DAD4063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:71:c4:37:f7:85:f5:0a:b3:bc:f7:56:3c:35:
                    f1:43:78:3e:a8:50:77:1f:22:5a:16:e2:dd:49:14:
                    f7:f3:65:77:92:93:68:57:50:88:39:d1:61:7b:9b:
                    65:0e:3f:7e:bb:59:08:79:26:eb:b2:fd:6e:cb:b6:
                    6b:61:06:c7:38:cc:f6:04:9b:9f:0a:21:60:2e:74:
                    28:66:48:4b:db:da:1c:41:e7:86:4b:4d:c7:09:c3:
                    83:a8:1d:de:37:6b:a2:49:69:71:b8:68:2a:ec:08:
                    f4:b8:16:89:2a:94:21:a9:0a:0a:b6:7e:96:b6:4c:
                    33:fa:c7:53:72:45:96:b2:62:ae:81:80:5d:67:09:
                    2b:be:66:aa:41:8d:3a:8e:b6:ac:4a:04:d1:bf:ee:
                    16:d8:6e:e2:80:d6:93:ae:2c:04:65:42:26:37:dc:
                    57:44:3d:3a:cc:b7:30:64:bf:85:72:e3:b9:47:6c:
                    e4:94:69:e5:36:8d:9b:8d:48:fc:2f:e4:08:53:09:
                    03:1d:71:cf:4c:f4:b0:43:c0:ad:5c:b8:97:4a:84:
                    6e:45:08:6f:47:bf:68:1d:48:6b:49:d5:1b:6c:8c:
                    f7:a2:d1:24:bf:cd:d2:a3:3d:30:e4:eb:66:2f:54:
                    b4:ff:87:27:f8:4c:4e:d1:27:00:92:e3:28:c5:1c:
                    a7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:34:F2:64:B9:A1:D8:CB:16:FC:D4:25:91:DD:53:A8:5D:AD:40:63
            X509v3 Authority Key Identifier:
                keyid:1E:9B:C0:E3:4E:3E:1C:72:FC:CD:D8:85:9B:B1:0F:3C:E8:28:A0:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MA8wpoPwSFcd4tdm1p1hiXgq6X4EDsWweLiwujPvDxc/0/1E9BC0E34E3E1C72FCCDD8859BB10F3CE828A014.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E9BC0E34E3E1C72FCCDD8859BB10F3CE828A014.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MA8wpoPwSFcd4tdm1p1hiXgq6X4EDsWweLiwujPvDxc/0/323830343a366438383a3a2f33322d3332203d3e20323730353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6d88::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:24:66:ad:b1:80:72:37:71:70:75:25:3e:46:de:7c:24:e1:
         10:67:9f:d0:ce:bd:9c:a5:de:67:d6:8f:45:95:1d:90:58:75:
         48:34:0d:4a:1f:ac:3f:d1:bf:f9:7c:0d:99:da:de:86:b3:8d:
         8f:46:0f:9b:0a:9d:da:a0:f2:d4:ba:81:33:4b:18:d8:9a:72:
         b5:b3:ad:3d:62:13:a8:51:71:2a:f5:15:b1:f6:05:60:e1:ca:
         0c:c4:10:35:68:a2:ba:4c:09:59:7f:9d:b2:bd:9c:a0:2a:d3:
         8a:28:9a:d8:74:1f:5f:7a:1e:a7:3b:3c:a5:a5:bf:3e:01:af:
         91:fe:a6:29:66:22:a2:36:7a:89:7a:98:d0:2b:52:8d:79:22:
         13:fd:1e:a2:8e:3c:1d:af:f2:cb:0b:c3:d5:99:39:72:e2:31:
         cd:42:a3:aa:d7:46:fa:1d:82:7e:80:eb:92:68:02:08:5d:11:
         87:87:d0:9a:04:cb:fb:95:6a:2a:06:6a:0c:3e:12:30:c7:4c:
         ff:85:0a:82:b2:ab:48:81:2f:cd:1c:da:7a:43:be:be:15:26:
         2f:5f:db:bb:33:91:7f:cd:99:a5:6d:a8:e3:d2:87:51:05:93:
         37:ad:f6:de:e4:2e:12:c2:18:fa:5f:52:b3:2e:99:42:94:8c:
         8c:90:59:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:28:00 2025 by rpki-client