Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0/323830343a353138633a343030303a3a2f33342d3334203d3e20323638343539.roa
File:                     323830343a353138633a343030303a3a2f33342d3334203d3e20323638343539.roa (raw, json)
Hash identifier:          kqbs5Kiw80K8PdjDgeqdBmAIt7tzuUyJfWY5p8/oRR4=
Subject key identifier:   63:7A:0B:1D:0F:6C:69:76:BC:8B:21:CF:4A:B0:F7:73:52:B0:2A:82
Certificate issuer:       /CN=4AD23F69FEB6F0C4185CED1CD33614808371B5CA
Certificate serial:       68FE346322864C083980C200403C053470CB7418
Authority key identifier: 4A:D2:3F:69:FE:B6:F0:C4:18:5C:ED:1C:D3:36:14:80:83:71:B5:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AD23F69FEB6F0C4185CED1CD33614808371B5CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0/323830343a353138633a343030303a3a2f33342d3334203d3e20323638343539.roa
Signing time:             Wed 14 Dec 2022 19:22:42 +0000
ROA not before:           Wed 14 Dec 2022 19:17:42 +0000
ROA not after:            Wed 13 Dec 2023 19:22:42 +0000
asID:                     268459
IP address blocks:        2804:518c:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:fe:34:63:22:86:4c:08:39:80:c2:00:40:3c:05:34:70:cb:74:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AD23F69FEB6F0C4185CED1CD33614808371B5CA
        Validity
            Not Before: Dec 14 19:17:42 2022 GMT
            Not After : Dec 13 19:22:42 2023 GMT
        Subject: CN=637A0B1D0F6C6976BC8B21CF4AB0F77352B02A82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:1b:ff:c0:aa:5f:9e:89:27:25:24:86:a0:ab:
                    b8:9f:85:33:c5:a1:4f:f3:31:a8:7b:72:9c:18:b8:
                    a3:69:22:75:55:c3:f7:b7:e3:70:fd:f9:07:36:4e:
                    42:1f:23:ef:5c:67:5a:52:0d:57:3d:6b:67:ad:76:
                    8e:e2:a3:c8:c8:7f:c0:7a:d6:de:02:63:bb:0d:12:
                    e6:ca:41:42:38:17:fd:91:f9:5a:b6:3c:6a:b6:cc:
                    bc:88:26:9a:4b:d0:82:48:f7:fb:f5:d9:fb:49:80:
                    17:cd:e2:48:3c:b4:dc:68:db:46:3a:7a:00:be:56:
                    77:a2:f3:a9:ec:8a:dc:d0:d4:56:d0:1a:f2:5a:52:
                    f2:7c:15:68:62:5c:b2:f5:42:55:e1:28:60:5b:3a:
                    ef:0e:83:de:39:bd:08:2f:6a:00:2e:a9:98:c7:64:
                    8c:fa:35:a9:04:bb:57:c8:19:85:23:93:ac:c8:7d:
                    03:fa:15:02:77:2f:06:e7:ec:2e:67:06:9a:33:a6:
                    46:95:df:75:ed:01:dd:ef:2d:97:54:d0:b8:b9:75:
                    80:f3:a0:dd:6a:e7:02:47:cd:34:50:90:30:01:60:
                    88:9a:e6:b2:c2:e4:84:a5:6d:44:8b:40:f7:2c:af:
                    e5:67:29:34:84:2f:04:bf:cd:f3:25:f7:e4:0b:fe:
                    a6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:7A:0B:1D:0F:6C:69:76:BC:8B:21:CF:4A:B0:F7:73:52:B0:2A:82
            X509v3 Authority Key Identifier:
                keyid:4A:D2:3F:69:FE:B6:F0:C4:18:5C:ED:1C:D3:36:14:80:83:71:B5:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0/4AD23F69FEB6F0C4185CED1CD33614808371B5CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AD23F69FEB6F0C4185CED1CD33614808371B5CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0/323830343a353138633a343030303a3a2f33342d3334203d3e20323638343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:518c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         60:90:f4:83:d7:3f:c7:7a:41:fd:0a:53:e0:69:42:4a:6e:bd:
         35:eb:f8:b0:3f:e2:e3:b7:9e:30:cd:85:82:ad:78:23:c8:3a:
         9b:54:e6:58:20:58:94:a0:13:d5:2f:7c:ff:f4:b8:fb:20:a5:
         dd:08:f1:4a:a2:85:85:fa:39:8d:fd:de:a7:6e:5d:16:05:65:
         1c:6d:f0:68:14:6e:50:20:71:5c:ef:f9:9b:24:f0:f5:05:d0:
         9b:2a:9c:9f:f8:2e:f7:48:ac:d2:b6:99:c2:2a:4c:21:ea:98:
         ce:ad:4e:1e:80:d6:b5:e8:4a:99:49:2d:b8:48:28:aa:f8:5f:
         4b:3d:31:67:85:8d:d7:64:3e:66:54:9e:ab:56:ee:5c:48:99:
         f6:d5:e8:dc:db:2d:f5:79:50:7f:9f:de:5f:3d:0e:45:40:2d:
         01:2b:bf:da:89:34:11:16:e2:af:24:55:e3:9d:a7:e8:80:cf:
         4c:34:ed:05:21:e6:32:66:54:2a:eb:64:8a:b8:53:53:46:3d:
         67:7b:67:78:71:e2:06:15:c6:49:d8:43:53:fd:c4:27:dc:b3:
         20:5c:26:72:a5:bf:ef:b7:05:92:51:37:0a:74:cd:e8:f2:a5:
         23:cf:cf:e2:ca:d3:8c:f5:b5:ce:0b:7f:bd:4b:f5:da:32:9e:
         6d:83:58:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:23:02 2025 by rpki-client