Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/0/323830343a373439303a343030303a3a2f33342d3334203d3e20323730393839.roa
File:                     323830343a373439303a343030303a3a2f33342d3334203d3e20323730393839.roa (raw, json)
Hash identifier:          nR83KmKQ4nFRnJICetL8aNZvfdU6JHBtrR8vWWNpglk=
Subject key identifier:   A9:24:CA:30:33:24:1C:29:1A:20:42:7A:D1:C6:4A:23:8C:32:9B:B9
Certificate issuer:       /CN=110088FF23C1473933259064D9C9D2FE2D7AEB92
Certificate serial:       21A43BC8A858EB9698FC1C19741DD4953E19F7AF
Authority key identifier: 11:00:88:FF:23:C1:47:39:33:25:90:64:D9:C9:D2:FE:2D:7A:EB:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/110088FF23C1473933259064D9C9D2FE2D7AEB92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/0/323830343a373439303a343030303a3a2f33342d3334203d3e20323730393839.roa
Signing time:             Mon 30 Jan 2023 19:45:40 +0000
ROA not before:           Mon 30 Jan 2023 19:40:40 +0000
ROA not after:            Mon 29 Jan 2024 19:45:40 +0000
asID:                     270989
IP address blocks:        2804:7490:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:a4:3b:c8:a8:58:eb:96:98:fc:1c:19:74:1d:d4:95:3e:19:f7:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=110088FF23C1473933259064D9C9D2FE2D7AEB92
        Validity
            Not Before: Jan 30 19:40:40 2023 GMT
            Not After : Jan 29 19:45:40 2024 GMT
        Subject: CN=A924CA3033241C291A20427AD1C64A238C329BB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:cb:95:51:7d:8f:7d:23:38:10:3d:53:a0:a8:
                    4c:ae:f5:66:3a:33:be:17:da:de:72:89:d8:16:dd:
                    7a:6e:ac:c0:1d:6d:9b:89:12:e7:91:b8:a1:d7:8f:
                    80:00:4c:39:a2:8c:ac:59:3b:8c:6a:45:0d:78:23:
                    41:30:b0:2c:74:8e:bd:fc:4a:56:4e:d5:bd:d5:0e:
                    89:09:ad:60:e8:61:97:5b:c6:bf:36:05:af:71:73:
                    2d:e1:d8:25:33:cd:e6:fa:7e:d7:03:8b:e9:72:73:
                    ce:ba:2f:93:c5:15:fa:85:ed:d1:7a:a9:7d:df:2d:
                    42:58:3c:d2:c4:62:d8:1a:55:d3:43:44:f0:13:5b:
                    d6:69:f9:e5:22:d4:39:22:b1:51:47:3f:db:da:02:
                    b0:fd:de:99:e9:76:15:6d:43:6d:ec:31:a9:d1:d8:
                    37:3d:cb:70:72:a9:33:2b:9d:02:c3:71:8e:c1:23:
                    3f:a0:7a:0f:db:fc:f8:d0:aa:f4:af:da:84:b6:f1:
                    9d:f1:db:dd:9c:0f:b1:05:1f:26:5e:46:0f:8b:c9:
                    7b:63:7e:be:4c:7a:45:4a:dc:fd:2e:0b:99:67:df:
                    68:e4:d4:42:c3:46:a9:b9:64:61:25:22:f4:5d:20:
                    49:93:38:8a:9e:15:2d:42:02:42:a5:13:a2:7a:2b:
                    9f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:24:CA:30:33:24:1C:29:1A:20:42:7A:D1:C6:4A:23:8C:32:9B:B9
            X509v3 Authority Key Identifier:
                keyid:11:00:88:FF:23:C1:47:39:33:25:90:64:D9:C9:D2:FE:2D:7A:EB:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/0/110088FF23C1473933259064D9C9D2FE2D7AEB92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/110088FF23C1473933259064D9C9D2FE2D7AEB92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/0/323830343a373439303a343030303a3a2f33342d3334203d3e20323730393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7490:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         31:35:31:4b:fc:db:9a:22:9c:4e:12:b5:80:c7:00:93:8f:ed:
         4d:c0:9b:dd:a5:bd:c7:f7:8b:51:90:52:87:a9:d8:a2:8e:f1:
         67:9c:4d:4b:35:a2:34:d0:85:2c:f6:dc:1f:a2:9e:1c:f3:e2:
         4b:42:de:ba:61:34:4c:20:21:d0:1e:c4:27:b4:3e:ec:02:9b:
         cd:72:24:d7:8a:da:60:89:02:30:e6:28:fe:7b:34:5a:8b:c2:
         6b:9e:7f:cd:39:aa:b6:cf:15:65:60:58:8c:62:c2:58:c0:a4:
         f4:b8:10:2d:27:f3:92:b4:3c:d1:04:f2:7e:26:f9:19:e3:ab:
         8c:96:d6:ad:a0:b6:38:bc:92:4f:4f:95:ab:b0:7d:92:12:25:
         d5:88:7a:a5:ab:4a:a4:43:39:17:5b:c5:cc:dc:46:18:5a:8e:
         4a:aa:57:b0:69:e4:06:6b:bb:ae:c2:9c:ba:3e:97:48:a7:a6:
         4d:d3:7d:ba:e1:67:f8:45:ff:77:5d:e0:b9:b1:0a:3f:d0:a0:
         b1:61:5a:29:b5:1b:e3:a8:93:30:6b:f4:f2:36:67:d6:be:88:
         22:0f:18:75:7c:c4:f1:3a:9b:e6:0d:03:6d:e4:b4:a8:ef:42:
         15:8b:0b:01:c4:4e:e3:a8:7e:bc:f7:5b:4d:8e:26:c2:48:b5:
         f2:7b:39:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:41 2025 by rpki-client