Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/1/323830343a3837633a383a3a2f36342d3634203d3e203238323032.roa
File:                     323830343a3837633a383a3a2f36342d3634203d3e203238323032.roa (raw, json)
Hash identifier:          mNUa6vWTJBc+dcuHwbRDsqePCezWzY6KiUOauyOxyE8=
Subject key identifier:   40:0E:54:EB:99:81:9A:94:CD:20:66:B7:27:E2:73:1E:00:C5:8A:28
Certificate issuer:       /CN=E62FC100819A1A7B48F9F79818EFB69B6B9A1FE8
Certificate serial:       425A78F6716BD90A39D810CDF554BD577D2A5986
Authority key identifier: E6:2F:C1:00:81:9A:1A:7B:48:F9:F7:98:18:EF:B6:9B:6B:9A:1F:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E62FC100819A1A7B48F9F79818EFB69B6B9A1FE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/1/323830343a3837633a383a3a2f36342d3634203d3e203238323032.roa
Signing time:             Thu 22 Jun 2023 11:20:01 +0000
ROA not before:           Thu 22 Jun 2023 11:15:01 +0000
ROA not after:            Thu 20 Jun 2024 11:20:01 +0000
asID:                     28202
IP address blocks:        2804:87c:8::/64 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:5a:78:f6:71:6b:d9:0a:39:d8:10:cd:f5:54:bd:57:7d:2a:59:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62FC100819A1A7B48F9F79818EFB69B6B9A1FE8
        Validity
            Not Before: Jun 22 11:15:01 2023 GMT
            Not After : Jun 20 11:20:01 2024 GMT
        Subject: CN=400E54EB99819A94CD2066B727E2731E00C58A28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:83:98:d2:59:6b:a1:a8:18:8d:ab:63:85:c5:
                    4d:ee:09:43:32:97:03:69:0d:5d:b4:92:31:ed:33:
                    b4:76:e7:29:79:ea:8d:43:d0:de:11:ad:91:14:28:
                    6c:86:1c:d5:fe:fb:a6:8c:f0:be:61:6d:4d:c0:df:
                    a4:7e:55:74:7b:75:8c:e2:d0:e7:6f:55:74:92:28:
                    27:2c:d0:c4:e0:9f:b7:1d:61:0c:e7:f7:84:55:91:
                    ad:ad:5a:bd:1e:52:72:2a:e0:1b:08:35:0a:9a:85:
                    d4:4e:8a:45:f5:94:83:b9:b8:1f:2e:b3:6a:61:56:
                    b2:f5:12:49:ca:bc:ea:e8:1a:1a:6f:f6:28:64:fa:
                    d7:99:ca:29:f1:ca:35:5f:78:da:d8:30:d6:e4:da:
                    0d:aa:b3:68:f7:a4:7f:13:79:19:41:e3:87:8a:2d:
                    be:1c:ac:b5:d7:ee:6b:ba:33:f4:cc:b3:f3:b2:91:
                    c7:b0:4c:6e:22:02:42:c9:35:d5:0e:13:81:aa:e1:
                    55:51:7c:eb:a8:3e:d1:99:53:d6:a1:ce:24:de:30:
                    23:56:71:fd:ed:fa:8c:f2:75:75:8d:9b:6b:67:30:
                    1b:50:34:fd:ef:b8:cd:39:b2:55:3f:bc:ac:68:d0:
                    57:ce:3a:64:e1:72:36:e6:f0:80:79:2a:52:05:91:
                    e3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:0E:54:EB:99:81:9A:94:CD:20:66:B7:27:E2:73:1E:00:C5:8A:28
            X509v3 Authority Key Identifier:
                keyid:E6:2F:C1:00:81:9A:1A:7B:48:F9:F7:98:18:EF:B6:9B:6B:9A:1F:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/1/E62FC100819A1A7B48F9F79818EFB69B6B9A1FE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E62FC100819A1A7B48F9F79818EFB69B6B9A1FE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/1/323830343a3837633a383a3a2f36342d3634203d3e203238323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:87c:8::/64

    Signature Algorithm: sha256WithRSAEncryption
         7c:46:b4:5f:81:58:39:92:6d:e9:15:03:7d:ae:ec:9d:9f:29:
         32:26:66:9a:13:74:04:27:51:2a:7c:0e:94:6f:6c:9a:e3:5d:
         5e:71:90:bc:fe:2d:13:57:6f:b7:4d:a4:22:c7:70:2d:00:60:
         bb:41:e5:db:be:55:d4:c0:0e:de:00:e0:8e:b2:7e:62:05:7f:
         2b:a4:a2:4d:8f:72:76:48:07:9f:32:f1:e4:ad:ef:18:96:96:
         e4:f8:a3:d5:0e:7b:82:9c:61:0e:e0:7e:9f:27:2f:d1:82:56:
         84:72:59:5a:1e:83:e2:fb:72:60:94:9b:c8:4c:6d:0a:93:cc:
         73:69:b4:ea:8f:8e:bd:b7:ac:a8:5e:05:6f:c8:9f:7e:d6:3e:
         a1:a0:6b:aa:61:97:4a:97:30:d1:7c:e1:64:60:98:e4:b3:5a:
         74:ca:0e:05:9b:2d:c7:eb:e2:f4:2d:12:57:b7:4a:94:30:08:
         b6:bd:f9:d3:26:c8:7a:f1:9c:42:90:bd:f8:fa:9e:07:b7:a4:
         8c:87:2b:7b:51:ff:cf:13:35:36:2a:91:7a:c4:9d:2f:77:10:
         52:84:09:a4:c7:1d:98:8d:c9:83:ec:aa:f6:4f:77:4c:f7:0d:
         48:4d:24:5b:3b:7d:af:ac:e0:59:ef:b6:3f:ae:34:82:ab:10:
         58:ab:db:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:40 2025 by rpki-client