Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6CxfG1u38ASdqAD1UDZAaz7CiJw7zA3BHHLyXwLrpvsT/0/323830343a363962383a3a2f33322d313238203d3e20323730323837.roa
File:                     323830343a363962383a3a2f33322d313238203d3e20323730323837.roa (raw, json)
Hash identifier:          bM+pT9b/ZQRymvNoSYvL9g5vlRwIzWDs+1Fgo+B2TPA=
Subject key identifier:   F4:27:37:84:4C:45:08:CF:A8:64:5C:28:C2:BC:6E:00:1A:26:47:E4
Certificate issuer:       /CN=9410944ADD6FDA071C85F73A18B972A1E2479D0E
Certificate serial:       01091795FC9784BAEE114E20BC01B3E1EF192CF4
Authority key identifier: 94:10:94:4A:DD:6F:DA:07:1C:85:F7:3A:18:B9:72:A1:E2:47:9D:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9410944ADD6FDA071C85F73A18B972A1E2479D0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6CxfG1u38ASdqAD1UDZAaz7CiJw7zA3BHHLyXwLrpvsT/0/323830343a363962383a3a2f33322d313238203d3e20323730323837.roa
Signing time:             Mon 21 Aug 2023 16:12:39 +0000
ROA not before:           Mon 21 Aug 2023 16:07:39 +0000
ROA not after:            Mon 19 Aug 2024 16:12:39 +0000
asID:                     270287
IP address blocks:        2804:69b8::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:09:17:95:fc:97:84:ba:ee:11:4e:20:bc:01:b3:e1:ef:19:2c:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9410944ADD6FDA071C85F73A18B972A1E2479D0E
        Validity
            Not Before: Aug 21 16:07:39 2023 GMT
            Not After : Aug 19 16:12:39 2024 GMT
        Subject: CN=F42737844C4508CFA8645C28C2BC6E001A2647E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:17:8c:6b:4a:33:e1:e7:e2:1d:c2:99:12:65:
                    96:92:87:a7:bc:8e:12:13:e9:e0:67:df:a3:8b:d4:
                    df:6b:94:4a:0a:81:1c:ee:91:e0:cf:94:2b:99:eb:
                    77:8f:9e:99:f3:cc:bb:28:e3:93:85:11:e0:77:d0:
                    51:9e:16:f3:dc:fa:21:10:f8:bd:da:56:c1:34:cc:
                    c1:f5:2b:85:a7:51:55:9f:86:7d:39:18:69:48:8f:
                    0c:5f:e0:40:55:37:1e:af:34:3e:ab:ca:e2:66:42:
                    43:cc:cd:a5:a7:70:3e:65:dd:15:05:24:80:c3:19:
                    c1:3c:22:f3:59:62:89:08:ff:a2:ba:08:a6:07:60:
                    59:62:c5:9b:ca:df:02:2d:0b:76:a6:3c:a3:91:1e:
                    d0:1c:44:18:46:b4:ac:ff:de:b3:d2:b4:12:64:2e:
                    d3:d0:96:9f:1c:5c:0d:4f:4c:42:53:76:54:a1:67:
                    ca:c4:92:6d:79:14:cd:25:1f:be:e4:61:df:b5:2d:
                    dc:17:28:49:de:34:06:b0:b4:45:00:92:e8:d2:98:
                    e5:d5:9a:19:38:94:51:ce:65:a7:b1:4d:f3:0d:fa:
                    c6:16:a2:21:a0:f5:3c:b9:cd:80:f5:1f:61:d3:43:
                    8e:f9:7b:b4:9f:ad:10:30:2d:d7:8a:f8:aa:17:45:
                    1d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:27:37:84:4C:45:08:CF:A8:64:5C:28:C2:BC:6E:00:1A:26:47:E4
            X509v3 Authority Key Identifier:
                keyid:94:10:94:4A:DD:6F:DA:07:1C:85:F7:3A:18:B9:72:A1:E2:47:9D:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6CxfG1u38ASdqAD1UDZAaz7CiJw7zA3BHHLyXwLrpvsT/0/9410944ADD6FDA071C85F73A18B972A1E2479D0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9410944ADD6FDA071C85F73A18B972A1E2479D0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CxfG1u38ASdqAD1UDZAaz7CiJw7zA3BHHLyXwLrpvsT/0/323830343a363962383a3a2f33322d313238203d3e20323730323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:69b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:83:4e:48:08:94:8b:3f:25:34:d7:38:4d:50:fe:a1:70:6b:
         30:b7:c4:0d:a6:be:e0:5b:a4:6e:fd:33:b3:cd:d1:c8:97:b0:
         56:b4:24:6c:87:28:e5:1a:ab:ef:0d:be:9f:f0:bc:d5:d9:46:
         ae:81:1a:72:07:af:5c:eb:4d:da:2f:28:df:94:99:10:cd:3b:
         94:70:b4:17:54:c8:57:17:ed:89:0f:c6:a0:00:fe:c1:f8:12:
         00:59:91:d2:4d:bb:95:a8:81:24:25:6d:c5:02:6e:83:82:bd:
         8e:97:91:f3:9f:d3:d2:ca:a5:14:08:89:b4:06:95:db:ec:3a:
         1a:a4:48:15:ab:d8:00:4b:54:ee:17:28:12:85:de:61:bb:d4:
         8d:bf:d9:b8:1e:75:ea:21:e3:4c:7b:a2:9d:c8:a3:d7:8b:a0:
         ff:75:1b:5a:92:b4:17:cd:44:d6:17:25:0c:9a:c9:66:83:66:
         6b:33:be:11:9f:86:f3:92:5f:5e:f8:f8:20:d1:32:a9:1b:b1:
         4c:8f:54:12:e5:4e:2b:09:4b:73:d6:a8:5f:ae:b0:eb:c8:9e:
         68:bb:ce:ca:b0:55:45:f6:4d:0f:e6:d8:5a:2a:cc:76:0f:93:
         ab:d3:33:c0:2e:4b:26:7e:75:74:74:1a:8d:36:b6:b1:0e:1e:
         30:a8:57:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:36 2025 by rpki-client