Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/323830343a376133633a3130303a3a2f34312d3431203d3e20323731333537.roa
File:                     323830343a376133633a3130303a3a2f34312d3431203d3e20323731333537.roa (raw, json)
Hash identifier:          9ECQajc1grXrb0F4v4aNifbK1AqR8kO1/CAud8hwm58=
Subject key identifier:   BD:D1:14:C9:C5:82:E9:DF:62:FE:A4:82:F3:99:A1:4C:25:ED:E5:63
Certificate issuer:       /CN=4B6F8394E8D5EADCA8B2BAFACD1949D7AFB07DEF
Certificate serial:       3475B7266F3548408EDBE0F46B4BE0D79FB35C6C
Authority key identifier: 4B:6F:83:94:E8:D5:EA:DC:A8:B2:BA:FA:CD:19:49:D7:AF:B0:7D:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4B6F8394E8D5EADCA8B2BAFACD1949D7AFB07DEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/323830343a376133633a3130303a3a2f34312d3431203d3e20323731333537.roa
Signing time:             Tue 13 Sep 2022 19:04:29 +0000
ROA not before:           Tue 13 Sep 2022 18:59:29 +0000
ROA not after:            Tue 12 Sep 2023 19:04:29 +0000
asID:                     271357
IP address blocks:        2804:7a3c:100::/41 maxlen: 41
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:75:b7:26:6f:35:48:40:8e:db:e0:f4:6b:4b:e0:d7:9f:b3:5c:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B6F8394E8D5EADCA8B2BAFACD1949D7AFB07DEF
        Validity
            Not Before: Sep 13 18:59:29 2022 GMT
            Not After : Sep 12 19:04:29 2023 GMT
        Subject: CN=BDD114C9C582E9DF62FEA482F399A14C25EDE563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2f:50:a4:87:48:a0:83:64:ca:7b:1c:46:47:
                    09:ed:ad:5c:d1:98:6f:17:a6:54:00:49:ff:90:be:
                    98:25:74:4b:2a:49:85:c8:90:21:2c:a4:1d:88:7c:
                    10:74:e4:08:32:20:da:43:91:bf:1c:da:5f:5b:ae:
                    9e:b6:39:ab:3c:e2:e0:65:e8:5e:9d:90:f6:c5:10:
                    04:67:17:c8:15:22:39:61:1b:ed:8e:a3:f5:07:5b:
                    a6:a4:15:2a:e5:b3:06:77:b8:4c:86:f3:6c:fa:4d:
                    d7:1d:33:c9:a4:d4:da:59:b3:ed:71:7d:05:e1:63:
                    c4:2c:3f:af:fb:24:05:6a:33:5c:00:23:f3:cf:dd:
                    6f:58:b6:bf:dd:3e:fd:f5:19:dc:36:66:3e:59:04:
                    09:ab:59:cf:74:49:ee:5b:b5:06:92:77:26:b6:2f:
                    1c:f6:f2:7a:12:3b:43:68:e3:67:50:91:ad:b8:6d:
                    3d:53:53:3e:a3:39:b8:70:6f:e5:14:79:85:8c:b9:
                    44:b9:5b:4b:10:70:bf:6c:54:c8:20:82:06:47:4b:
                    35:cc:98:dd:a9:27:b3:d7:e9:00:c8:48:a5:3d:d8:
                    be:0d:40:73:b3:b4:85:a9:1f:ed:a1:1c:ce:c8:d5:
                    42:42:99:ab:6e:ed:83:6b:67:12:61:6d:42:20:80:
                    35:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D1:14:C9:C5:82:E9:DF:62:FE:A4:82:F3:99:A1:4C:25:ED:E5:63
            X509v3 Authority Key Identifier:
                keyid:4B:6F:83:94:E8:D5:EA:DC:A8:B2:BA:FA:CD:19:49:D7:AF:B0:7D:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/4B6F8394E8D5EADCA8B2BAFACD1949D7AFB07DEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4B6F8394E8D5EADCA8B2BAFACD1949D7AFB07DEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/323830343a376133633a3130303a3a2f34312d3431203d3e20323731333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a3c:100::/41

    Signature Algorithm: sha256WithRSAEncryption
         58:f3:03:d7:de:14:b9:f0:a3:16:0a:6b:9b:ba:df:67:74:23:
         96:5d:93:f8:55:75:c4:8a:ad:b0:96:52:ee:fb:e0:f7:a2:5d:
         34:3a:bb:92:6e:e8:e6:e4:b8:ac:79:06:68:46:ee:76:9c:a9:
         01:b8:0f:26:d8:58:8c:b6:8a:bb:47:16:d1:7b:72:ca:60:8d:
         3f:52:8e:c7:63:4c:79:ba:24:c7:24:f7:a0:bc:2e:ac:f4:ba:
         af:63:60:a4:11:34:61:c5:e6:5a:d8:b0:14:a4:be:0f:3b:86:
         bc:27:23:25:aa:69:a9:49:24:81:53:9a:e0:55:98:d4:fd:5c:
         78:39:4c:69:8b:c4:c7:03:01:d6:6a:26:ff:ea:2d:2b:79:3a:
         dd:7f:a1:1f:5a:af:03:c9:a2:c0:6b:3c:29:57:ad:c1:b8:95:
         cd:d1:94:ef:b5:e8:ac:a9:2d:2f:da:d8:00:7f:ab:44:8b:1b:
         2d:d8:44:42:0d:3e:09:24:59:bd:09:4c:0a:a0:f5:ba:60:e0:
         cc:a7:4e:a4:f4:1f:3c:14:ae:d6:03:9f:4c:4b:80:61:44:ba:
         67:df:aa:63:b3:6a:f0:6f:6a:20:33:94:eb:a3:2c:b8:26:43:
         37:99:b8:c0:9c:d5:e0:af:89:b0:38:b1:f3:db:18:01:0e:be:
         6f:c4:a5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:41:02 2025 by rpki-client