Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/323830343a323261303a393a3a2f34382d3438203d3e20323634313132.roa
File:                     323830343a323261303a393a3a2f34382d3438203d3e20323634313132.roa (raw, json)
Hash identifier:          tdmP9Y+IaDZwcai9tgtRDVTEoqRR6NdB0U8IBjCQNtw=
Subject key identifier:   58:34:57:ED:BE:5A:A2:BF:EE:56:E1:7E:CF:6F:DC:24:C0:01:6E:16
Certificate issuer:       /CN=0639F3A84BD2153E38E0507CC3371338978DE9D0
Certificate serial:       6BC47C56F7915ADB54791F09A63B4E5F85FF5037
Authority key identifier: 06:39:F3:A8:4B:D2:15:3E:38:E0:50:7C:C3:37:13:38:97:8D:E9:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0639F3A84BD2153E38E0507CC3371338978DE9D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/323830343a323261303a393a3a2f34382d3438203d3e20323634313132.roa
Signing time:             Mon 07 Feb 2022 12:09:38 +0000
ROA not before:           Mon 07 Feb 2022 12:04:38 +0000
ROA not after:            Mon 06 Feb 2023 12:09:38 +0000
asID:                     264112
IP address blocks:        2804:22a0:9::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:c4:7c:56:f7:91:5a:db:54:79:1f:09:a6:3b:4e:5f:85:ff:50:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0639F3A84BD2153E38E0507CC3371338978DE9D0
        Validity
            Not Before: Feb  7 12:04:38 2022 GMT
            Not After : Feb  6 12:09:38 2023 GMT
        Subject: CN=583457EDBE5AA2BFEE56E17ECF6FDC24C0016E16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:05:4b:4b:14:6f:3a:9d:92:34:00:55:ba:12:
                    9e:90:45:eb:8e:15:8d:f8:34:3b:53:15:80:4d:d3:
                    c8:de:17:79:77:b1:c2:22:64:99:8e:2e:85:d5:7f:
                    f3:1a:03:bc:37:03:76:e7:7e:fa:22:9c:24:90:f3:
                    c1:dc:5c:74:c3:da:29:69:30:42:25:f4:14:58:b1:
                    03:dd:fc:67:d3:6c:bd:25:db:7b:75:43:06:ca:4e:
                    83:1f:1f:dc:85:ab:d4:63:89:cd:1b:8b:d4:89:15:
                    3e:f0:c1:f4:6b:b5:a9:c2:59:30:67:9c:11:b5:df:
                    97:1b:f9:91:7e:0b:49:57:d8:b7:eb:b2:9f:bb:0c:
                    11:8a:c2:98:c2:1f:d0:5a:f8:da:4c:9c:b0:30:7a:
                    f2:e1:4c:49:c6:66:ec:e2:ef:48:01:6c:6e:ad:75:
                    f2:80:02:fd:5a:d2:7e:d5:58:64:76:6f:49:49:20:
                    e4:df:44:0d:0d:1e:f0:33:2c:b6:65:07:37:7d:02:
                    35:1f:c4:87:24:c2:b8:84:e7:94:db:a6:39:85:53:
                    26:9b:33:42:50:5d:d2:9f:35:3d:a8:52:2e:fc:4c:
                    1d:d6:86:b0:ce:4a:61:f2:1f:d8:c6:5b:be:98:e7:
                    31:f4:27:db:b4:d4:21:31:2b:70:87:9f:4a:f2:84:
                    ed:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:34:57:ED:BE:5A:A2:BF:EE:56:E1:7E:CF:6F:DC:24:C0:01:6E:16
            X509v3 Authority Key Identifier:
                keyid:06:39:F3:A8:4B:D2:15:3E:38:E0:50:7C:C3:37:13:38:97:8D:E9:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/0639F3A84BD2153E38E0507CC3371338978DE9D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0639F3A84BD2153E38E0507CC3371338978DE9D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/323830343a323261303a393a3a2f34382d3438203d3e20323634313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:22a0:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:c3:3f:1b:13:b6:a6:f2:f9:f8:ba:5a:5b:d6:ef:f2:f1:af:
         70:37:8a:c9:9d:25:b6:da:08:7a:87:fc:9d:72:5b:94:d4:17:
         75:c2:d1:2f:38:13:04:2b:c8:97:2e:77:5d:e7:93:86:8c:4e:
         f9:e6:cb:e1:7e:6e:12:c1:a9:fd:74:6d:cb:5d:4e:b8:15:c7:
         83:8c:b4:c4:87:0b:f9:77:5a:98:a8:d0:29:e2:e6:5c:b7:db:
         96:67:c2:be:40:94:0a:32:2e:74:a1:de:a2:a0:6c:ff:55:ca:
         13:46:0f:ed:d1:d7:ea:67:cb:22:be:51:bc:12:2d:37:fa:ef:
         39:7c:ec:5f:ca:97:8c:97:3d:c0:f6:67:de:76:87:e0:ea:4e:
         1b:9c:cf:81:c4:3c:d8:3a:d5:78:73:67:73:d5:6d:85:4b:dc:
         f0:aa:b7:8e:7c:e7:d1:28:b0:11:ef:05:0c:f4:35:cb:cc:fa:
         f1:7a:a6:a9:be:28:b6:52:9d:73:0d:95:5e:1d:46:1f:65:26:
         3d:67:15:ad:5e:fd:86:21:8f:13:51:22:7d:1d:c5:2e:84:51:
         bf:29:f9:d5:73:35:34:cd:47:de:a2:31:0d:16:ee:f8:b9:74:
         62:31:ac:3c:4d:4e:9b:bf:23:83:a6:13:8a:86:71:55:2a:10:
         73:58:0b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:40:17 2025 by rpki-client