Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4qAnaXBwkYxLhuRLQ88sekxjuFH2nwmVwpe3uZdADj1y/0/323830343a336336633a3a2f33322d3335203d3e20323636323130.roa
File:                     323830343a336336633a3a2f33322d3335203d3e20323636323130.roa (raw, json)
Hash identifier:          JjdS6dUCjGXiqSXIXGk4SBADru3a1I0osHGBkR92Ac8=
Subject key identifier:   C9:6A:2C:C1:23:C8:B2:65:A2:51:F0:CD:AC:35:71:31:14:77:9E:DE
Certificate issuer:       /CN=F240E58D90E047C34933B303E800B88C0E9E9273
Certificate serial:       444AF179561AB0BB092394F551D3FE97D6B966C0
Authority key identifier: F2:40:E5:8D:90:E0:47:C3:49:33:B3:03:E8:00:B8:8C:0E:9E:92:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F240E58D90E047C34933B303E800B88C0E9E9273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4qAnaXBwkYxLhuRLQ88sekxjuFH2nwmVwpe3uZdADj1y/0/323830343a336336633a3a2f33322d3335203d3e20323636323130.roa
Signing time:             Tue 10 Oct 2023 21:00:02 +0000
ROA not before:           Tue 10 Oct 2023 20:55:02 +0000
ROA not after:            Tue 08 Oct 2024 21:00:02 +0000
asID:                     266210
IP address blocks:        2804:3c6c::/32 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:4a:f1:79:56:1a:b0:bb:09:23:94:f5:51:d3:fe:97:d6:b9:66:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F240E58D90E047C34933B303E800B88C0E9E9273
        Validity
            Not Before: Oct 10 20:55:02 2023 GMT
            Not After : Oct  8 21:00:02 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:09:61:39:e2:a1:8a:a2:dd:1f:42:91:3d:fd:
                    a9:d3:5b:ed:b0:f6:bf:48:de:02:83:1e:3a:12:b3:
                    bf:34:7a:cf:40:0f:65:b0:d9:7c:14:e9:66:8c:23:
                    1a:da:1c:19:fc:d7:1a:ec:a4:3b:15:fc:97:52:0e:
                    d5:a6:c1:17:ed:5e:7b:ba:d5:36:40:e4:21:64:5d:
                    61:27:23:52:eb:61:00:bc:29:40:ad:f7:75:76:ff:
                    3c:05:cc:7e:41:4e:dd:ac:8c:c7:5a:9f:39:1e:90:
                    7f:dc:cf:e3:15:c5:7e:2e:0e:11:47:14:cf:86:0e:
                    c8:04:7b:5c:ed:dd:b2:41:93:2e:10:e6:52:c9:9d:
                    b4:88:a2:5c:70:bd:95:59:0e:9d:8c:b1:c5:2a:2b:
                    ee:84:ea:ad:51:db:53:fb:75:5e:04:58:2e:a9:c4:
                    f2:85:5b:2a:e7:50:16:5c:12:ce:b5:ef:34:ea:ae:
                    86:b7:04:da:24:3c:c7:77:bb:f6:5c:f1:4d:4b:ef:
                    74:5d:92:92:df:5a:7a:3c:3d:66:14:e3:64:9e:07:
                    4b:8a:64:cc:3e:1e:e2:0f:5d:8c:30:c4:cc:9b:31:
                    15:2a:ec:86:c6:53:1b:2c:05:20:f7:1e:c2:df:4d:
                    a7:54:9f:a3:3b:81:7b:54:25:fc:27:cf:55:22:0b:
                    e9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:6A:2C:C1:23:C8:B2:65:A2:51:F0:CD:AC:35:71:31:14:77:9E:DE
            X509v3 Authority Key Identifier:
                keyid:F2:40:E5:8D:90:E0:47:C3:49:33:B3:03:E8:00:B8:8C:0E:9E:92:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4qAnaXBwkYxLhuRLQ88sekxjuFH2nwmVwpe3uZdADj1y/0/F240E58D90E047C34933B303E800B88C0E9E9273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F240E58D90E047C34933B303E800B88C0E9E9273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4qAnaXBwkYxLhuRLQ88sekxjuFH2nwmVwpe3uZdADj1y/0/323830343a336336633a3a2f33322d3335203d3e20323636323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c6c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b3:ee:08:49:c9:f5:3a:44:5e:61:2c:30:35:14:a4:64:1b:17:
         ed:46:09:7c:ae:68:54:7b:15:81:cc:5b:60:47:ea:bf:a3:1a:
         77:98:19:1e:2d:7e:5d:f4:f1:b0:1d:f7:87:40:c3:ff:5d:8b:
         04:09:35:01:31:b6:5e:9a:4a:72:55:ca:b5:85:72:0a:16:d7:
         28:3b:5d:49:b2:5f:08:1f:14:40:70:0d:fc:fd:59:09:8d:40:
         bb:5f:ae:01:43:58:00:c4:b1:86:2e:e9:34:db:f8:a0:f8:7f:
         65:57:bd:4c:0e:5d:1f:68:59:ed:21:4a:42:aa:52:96:43:9b:
         d1:22:ef:78:c4:d6:a5:1e:5a:01:85:fa:ad:43:bc:b5:4d:13:
         2b:25:27:8f:72:46:af:65:40:50:1a:3a:f6:c1:05:44:64:58:
         03:79:dc:1a:4e:ab:be:6b:48:c0:00:3f:0d:35:71:77:e3:dd:
         e0:d6:ac:a7:2e:b8:c0:a5:9f:9b:63:e6:d0:e4:43:5f:de:15:
         cc:72:80:f4:09:a1:2a:b1:96:91:be:83:9c:33:66:74:fd:40:
         60:03:39:a4:92:21:bc:9e:1b:16:d4:a8:1b:6b:07:26:5b:cb:
         6f:bb:2c:71:26:f7:86:8d:a8:4b:2a:2b:df:5e:39:64:c7:28:
         2f:df:c4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:59 2025 by rpki-client