Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6maP6AcuBWnzb1zgtFVdTZ8zwsftqSaJ5ZGjbNcXQN74/1/323830343a376363343a3a2f33362d3336203d3e20323731353137.roa
File:                     323830343a376363343a3a2f33362d3336203d3e20323731353137.roa (raw, json)
Hash identifier:          2uHtP+XopIwgmD4B8AfYGSKjXqNcW9CeiSQs7cOowxw=
Subject key identifier:   4A:45:B7:9A:19:67:AA:56:CE:3D:26:8F:06:18:AE:C1:5F:8B:FE:DB
Certificate issuer:       /CN=9CDDBAED4E4153560623EED297A96F12A9A5D96A
Certificate serial:       7EDAB4FF92EEB424E0CFA3F808AB42654C19F8CF
Authority key identifier: 9C:DD:BA:ED:4E:41:53:56:06:23:EE:D2:97:A9:6F:12:A9:A5:D9:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9CDDBAED4E4153560623EED297A96F12A9A5D96A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6maP6AcuBWnzb1zgtFVdTZ8zwsftqSaJ5ZGjbNcXQN74/1/323830343a376363343a3a2f33362d3336203d3e20323731353137.roa
Signing time:             Sun 29 Oct 2023 04:56:36 +0000
ROA not before:           Sun 29 Oct 2023 04:51:36 +0000
ROA not after:            Sun 27 Oct 2024 04:56:36 +0000
asID:                     271517
IP address blocks:        2804:7cc4::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:da:b4:ff:92:ee:b4:24:e0:cf:a3:f8:08:ab:42:65:4c:19:f8:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CDDBAED4E4153560623EED297A96F12A9A5D96A
        Validity
            Not Before: Oct 29 04:51:36 2023 GMT
            Not After : Oct 27 04:56:36 2024 GMT
        Subject: CN=4A45B79A1967AA56CE3D268F0618AEC15F8BFEDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:82:35:a2:36:fb:28:21:2b:28:2f:85:94:9e:
                    88:6a:fc:c1:4a:a4:07:a5:b3:2e:fe:08:05:8a:6a:
                    ec:a6:75:19:91:5f:94:a2:94:f5:2a:49:16:cb:52:
                    ce:69:71:8a:79:af:47:64:bb:87:97:32:c6:8a:ff:
                    65:ef:66:74:ac:de:a3:03:1c:fb:5f:a0:6e:bd:de:
                    5c:fd:64:86:3b:65:b6:1f:91:a6:97:3b:5d:9c:d0:
                    bb:dc:8a:f7:55:22:c2:14:fd:2b:57:ee:9a:e9:c2:
                    cc:27:ca:3e:49:f8:a9:ab:06:fd:c2:e3:78:24:e0:
                    6b:65:52:db:b9:79:3d:27:0a:57:c5:d9:39:34:90:
                    96:a5:06:49:f5:9a:2b:5e:78:dd:a7:d2:0c:9b:6e:
                    bf:5f:ba:18:bd:a1:7f:9b:c2:5a:32:2f:c1:fa:10:
                    a9:01:7c:38:53:a4:f0:87:b9:19:37:fe:db:1b:cb:
                    5f:93:ab:41:8e:d7:90:b3:eb:bb:f2:23:af:7f:bf:
                    c8:bb:07:63:29:7c:ef:42:55:14:d8:c4:df:af:9e:
                    4c:c6:f8:86:f2:fb:e7:ba:d2:b9:98:88:e5:c1:f4:
                    91:13:cd:3d:d3:2f:50:23:ff:de:42:45:b5:6e:79:
                    da:0f:7b:bc:81:52:40:71:78:49:8e:76:ab:f7:80:
                    34:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:45:B7:9A:19:67:AA:56:CE:3D:26:8F:06:18:AE:C1:5F:8B:FE:DB
            X509v3 Authority Key Identifier:
                keyid:9C:DD:BA:ED:4E:41:53:56:06:23:EE:D2:97:A9:6F:12:A9:A5:D9:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6maP6AcuBWnzb1zgtFVdTZ8zwsftqSaJ5ZGjbNcXQN74/1/9CDDBAED4E4153560623EED297A96F12A9A5D96A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9CDDBAED4E4153560623EED297A96F12A9A5D96A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6maP6AcuBWnzb1zgtFVdTZ8zwsftqSaJ5ZGjbNcXQN74/1/323830343a376363343a3a2f33362d3336203d3e20323731353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7cc4::/36

    Signature Algorithm: sha256WithRSAEncryption
         c1:f9:73:d6:03:1b:57:03:1f:fc:dc:a5:12:a5:a4:e1:c7:ad:
         95:24:ed:5c:d6:f5:49:67:11:b3:f6:57:45:cc:fd:cb:24:99:
         41:03:80:88:b8:c3:b7:50:7e:60:82:0d:d6:ae:e9:db:3e:06:
         8a:9d:c1:9c:64:c6:47:26:a7:5f:c9:6f:39:59:31:89:59:67:
         40:b5:6d:0d:7a:fb:a9:97:bd:91:f0:ed:ef:4b:f7:ac:b7:1f:
         b9:27:16:37:0c:ea:82:12:5f:39:8c:f0:f5:e7:2c:29:59:fc:
         41:ee:c0:fc:45:c6:f3:ca:1c:c8:23:56:d5:1f:31:4c:b5:34:
         35:e5:79:32:d3:39:33:47:72:2b:84:10:57:6e:24:de:ad:63:
         d1:a1:59:07:19:fe:8b:b1:ee:37:59:81:5d:38:9b:40:78:db:
         f5:04:eb:2b:da:b5:35:dd:2d:e0:9e:0b:b4:09:59:80:0d:74:
         12:25:d4:3e:00:55:93:0b:7e:59:86:21:7d:71:c8:a6:5f:12:
         d0:d9:95:89:8c:82:5b:0b:66:00:00:17:e4:c3:4d:00:ad:5c:
         47:85:ea:1d:78:dd:9a:36:67:9e:58:eb:dd:36:d7:54:b9:e6:
         af:02:54:a5:52:ba:84:03:2e:9b:68:fd:e8:21:e0:2b:5b:93:
         a7:ae:36:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:39:50 2025 by rpki-client