Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/323830343a3634303a336539343a3a2f34382d3438203d3e20323632373133.roa
File:                     323830343a3634303a336539343a3a2f34382d3438203d3e20323632373133.roa (raw, json)
Hash identifier:          5uset/0UqLNwUC6srmSE6gCBtowt3q6jGEl9EO6ZiYM=
Subject key identifier:   94:46:59:2D:7C:04:6D:A2:A4:DA:09:24:DF:CC:14:32:7B:39:7D:E9
Certificate issuer:       /CN=F4C6B8C537AC063CE51075C6B816E3353E57475C
Certificate serial:       428634A85E7045703BF9B4039F6A24DFD608DC3F
Authority key identifier: F4:C6:B8:C5:37:AC:06:3C:E5:10:75:C6:B8:16:E3:35:3E:57:47:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/323830343a3634303a336539343a3a2f34382d3438203d3e20323632373133.roa
Signing time:             Tue 12 Sep 2023 05:00:10 +0000
ROA not before:           Tue 12 Sep 2023 04:55:10 +0000
ROA not after:            Tue 10 Sep 2024 05:00:10 +0000
asID:                     262713
IP address blocks:        2804:640:3e94::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:86:34:a8:5e:70:45:70:3b:f9:b4:03:9f:6a:24:df:d6:08:dc:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4C6B8C537AC063CE51075C6B816E3353E57475C
        Validity
            Not Before: Sep 12 04:55:10 2023 GMT
            Not After : Sep 10 05:00:10 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9d:cd:72:d2:28:db:87:f7:71:6d:8d:30:80:
                    95:e2:7d:88:01:e6:81:dd:bc:2b:d3:28:2a:ef:59:
                    a1:4a:ef:3f:01:28:b3:01:9a:e1:ac:9f:bb:4e:11:
                    a1:70:b4:37:b8:6e:1c:dd:d0:0e:b2:f3:6e:bd:e2:
                    cd:39:d8:15:7b:ef:9a:61:fe:3b:a8:26:79:88:41:
                    e3:44:8d:27:37:38:09:45:f1:fb:29:0a:d2:81:d4:
                    6f:b9:66:37:11:db:dc:06:cf:99:32:fa:60:26:45:
                    a7:a9:67:1c:d3:39:9c:6d:a4:79:31:55:df:13:a5:
                    d9:78:ee:3d:45:c0:57:1e:a9:7a:76:8f:2c:a1:c6:
                    b6:bb:43:2e:16:b3:46:37:80:a4:20:c2:0d:3f:6b:
                    f2:e2:50:e7:38:98:48:47:ae:9a:b0:b9:e5:67:17:
                    35:89:69:9d:a7:4f:9a:4e:1c:53:de:23:8e:3f:92:
                    9a:8e:e1:9f:f5:47:4e:06:93:7c:ef:f2:ca:34:bf:
                    a9:99:81:0c:37:47:a8:fe:79:da:ab:fd:21:b8:55:
                    55:ad:12:02:2c:d6:5b:b0:99:0c:80:37:17:5d:f8:
                    b0:58:eb:f6:8a:54:f3:86:0b:1a:08:4f:6e:be:1e:
                    c4:8a:a6:79:3d:1b:f9:93:fd:f4:e2:41:6a:07:60:
                    71:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:46:59:2D:7C:04:6D:A2:A4:DA:09:24:DF:CC:14:32:7B:39:7D:E9
            X509v3 Authority Key Identifier:
                keyid:F4:C6:B8:C5:37:AC:06:3C:E5:10:75:C6:B8:16:E3:35:3E:57:47:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/323830343a3634303a336539343a3a2f34382d3438203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:640:3e94::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:3d:26:cf:4f:c7:e9:1c:60:d0:d8:f9:14:fe:ab:9e:6d:3e:
         9c:0e:f8:13:3f:61:e0:e5:a0:94:eb:9a:3e:02:95:e7:10:66:
         a4:f6:58:62:da:ad:11:3d:2c:9e:d7:67:af:dc:03:52:82:cb:
         02:3e:6b:03:6a:8a:88:0d:99:3f:af:11:ce:30:1c:1f:af:50:
         d2:7a:c0:3f:de:44:07:29:af:ca:8a:0a:69:cf:d8:93:2f:89:
         01:d7:00:77:43:48:d9:b4:66:e8:a4:b2:d4:2e:84:ab:76:cc:
         c5:bc:be:8c:b3:cf:4d:c2:57:fa:bb:70:89:56:05:11:21:43:
         8c:17:ef:8a:1c:f8:99:88:01:07:42:fe:73:16:fb:36:63:9a:
         f8:4b:c9:46:29:91:68:d9:44:e6:82:79:44:63:31:86:84:cd:
         ee:a9:dd:b4:bb:6e:05:17:01:13:0b:f6:66:3b:dc:5f:fe:5d:
         53:04:35:fc:c2:84:c5:b3:24:f6:5d:9f:11:df:ee:2b:ee:e4:
         ee:33:0b:a1:65:bb:37:3b:a1:24:85:e7:14:27:55:5b:7c:4e:
         ac:3e:25:12:b5:81:40:cb:7f:46:01:cf:15:a1:bc:33:83:dc:
         47:28:eb:3a:18:79:2f:ba:c5:3c:58:16:ef:f5:d2:55:26:f5:
         37:8c:07:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:19:17 2025 by rpki-client