Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/323830343a373934633a3a2f33322d313238203d3e20323731323937.roa
File:                     323830343a373934633a3a2f33322d313238203d3e20323731323937.roa (raw, json)
Hash identifier:          EXRWvPEK9DtniizhIUdHMOSRvBkZenAcjn/8wMdCjyI=
Subject key identifier:   14:74:D8:C6:53:E1:EC:3B:AF:6C:7C:DB:42:53:36:29:16:76:2A:2E
Certificate issuer:       /CN=8B9C935129900CA013B11B72F2C6AC009B33E99E
Certificate serial:       76F4CC5CD1652C045B7CB7FD69E2E25D282DB84E
Authority key identifier: 8B:9C:93:51:29:90:0C:A0:13:B1:1B:72:F2:C6:AC:00:9B:33:E9:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B9C935129900CA013B11B72F2C6AC009B33E99E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/323830343a373934633a3a2f33322d313238203d3e20323731323937.roa
Signing time:             Tue 21 Nov 2023 22:01:28 +0000
ROA not before:           Tue 21 Nov 2023 21:56:28 +0000
ROA not after:            Tue 19 Nov 2024 22:01:28 +0000
asID:                     271297
IP address blocks:        2804:794c::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:f4:cc:5c:d1:65:2c:04:5b:7c:b7:fd:69:e2:e2:5d:28:2d:b8:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B9C935129900CA013B11B72F2C6AC009B33E99E
        Validity
            Not Before: Nov 21 21:56:28 2023 GMT
            Not After : Nov 19 22:01:28 2024 GMT
        Subject: CN=1474D8C653E1EC3BAF6C7CDB4253362916762A2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:41:94:a6:eb:4c:d4:11:1f:0b:50:fc:2b:80:
                    c5:c2:9e:0c:c8:15:c8:a1:06:0a:e0:ed:c8:ca:54:
                    f3:8f:af:56:2e:5e:0f:5c:5e:22:e4:b4:ff:ae:2b:
                    71:c5:8b:9d:3b:92:69:64:f0:c5:4b:f3:1a:55:db:
                    41:7b:17:02:79:76:83:bd:b4:56:66:e4:de:5c:b2:
                    62:4b:24:9e:b4:ee:96:10:09:12:be:48:95:42:84:
                    4d:1b:32:71:6f:79:4b:fe:9d:77:84:36:de:d3:6a:
                    42:3b:a1:d8:4a:22:05:1a:a9:8a:74:c3:63:8a:9a:
                    b5:95:2a:47:d8:51:47:e5:1c:03:13:da:ee:b0:a6:
                    e3:65:7e:5a:79:ab:4b:82:73:54:22:3d:3b:1b:ec:
                    12:19:75:ff:a5:48:b4:d9:5b:3e:3a:1e:32:dd:ac:
                    84:21:b4:2c:0d:89:fa:51:50:b0:c7:16:93:e0:eb:
                    ca:be:16:37:d5:5e:10:b7:7e:b4:51:04:68:ec:e1:
                    31:d3:7e:7e:dc:eb:7c:69:c9:7c:c7:51:e8:77:06:
                    93:a6:d3:0c:e8:ba:b9:ab:22:8b:b1:6d:7b:e4:c3:
                    4e:0b:a1:80:e7:20:8e:5d:ea:54:08:00:c3:6c:88:
                    85:14:ce:e4:73:3b:0e:24:08:75:4d:6a:8c:32:8b:
                    f7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:74:D8:C6:53:E1:EC:3B:AF:6C:7C:DB:42:53:36:29:16:76:2A:2E
            X509v3 Authority Key Identifier:
                keyid:8B:9C:93:51:29:90:0C:A0:13:B1:1B:72:F2:C6:AC:00:9B:33:E9:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/8B9C935129900CA013B11B72F2C6AC009B33E99E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B9C935129900CA013B11B72F2C6AC009B33E99E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/323830343a373934633a3a2f33322d313238203d3e20323731323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:794c::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:ba:ea:da:43:72:47:94:06:ad:f7:4c:a8:70:5f:4c:85:38:
         84:d4:f4:c1:79:b4:4f:e4:34:21:6f:0d:dc:2e:d5:78:f1:da:
         6a:82:66:a3:0a:b5:16:57:1c:a2:fe:b2:6e:b9:c7:92:f7:31:
         2d:b1:b6:27:3b:cf:9e:a4:88:89:7b:54:ed:00:bc:2f:1a:7b:
         5a:c8:6d:5e:f9:c7:f5:c0:7a:69:7b:f8:c8:eb:96:95:3d:89:
         47:a5:61:2e:f4:46:30:95:e6:db:61:35:37:c3:59:dc:8a:ab:
         a1:3f:75:1e:0b:d4:83:72:e6:b1:f2:33:3c:9d:27:ec:67:49:
         80:7b:c5:ea:69:4a:da:61:ae:00:99:89:23:e5:b6:4b:13:59:
         57:ec:61:c0:c2:76:05:75:cd:c9:73:25:f9:1d:1f:bb:75:0b:
         e5:6e:b8:65:c8:5f:44:a8:1d:bc:cb:76:9b:fb:85:98:ec:04:
         25:f7:cf:92:16:68:2c:0b:42:84:c9:b8:9d:cc:8b:b3:d3:4d:
         ce:fe:88:1f:82:52:a4:7f:67:7e:fd:51:b9:7f:02:06:bb:a5:
         a0:ea:3f:a2:c0:3a:78:56:3b:fa:12:41:38:c6:f8:7b:25:58:
         d2:91:87:58:2b:d7:bc:ab:8b:eb:e8:90:d6:30:6b:4f:72:fe:
         ba:3f:ed:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:55:44 2025 by rpki-client