Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/0/323830343a343561383a3a2f34302d3430203d3e20323636393431.roa
File:                     323830343a343561383a3a2f34302d3430203d3e20323636393431.roa (raw, json)
Hash identifier:          5sZLOAAAF84aEm+Q8WIz7Jn4yEZU2K+nlkieKtl2gbc=
Subject key identifier:   3F:A3:16:66:26:83:73:23:43:18:4B:42:7C:A2:44:B3:B0:AA:37:64
Certificate issuer:       /CN=9F16E4ECCDA4B94CA493845289B3DA50832A911E
Certificate serial:       0CFE1C32A10F5A598C2E6DED473B5DA69CE06BA4
Authority key identifier: 9F:16:E4:EC:CD:A4:B9:4C:A4:93:84:52:89:B3:DA:50:83:2A:91:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F16E4ECCDA4B94CA493845289B3DA50832A911E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/0/323830343a343561383a3a2f34302d3430203d3e20323636393431.roa
Signing time:             Tue 25 Jan 2022 18:53:13 +0000
ROA not before:           Tue 25 Jan 2022 18:48:13 +0000
ROA not after:            Tue 24 Jan 2023 18:53:13 +0000
asID:                     266941
IP address blocks:        2804:45a8::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:fe:1c:32:a1:0f:5a:59:8c:2e:6d:ed:47:3b:5d:a6:9c:e0:6b:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F16E4ECCDA4B94CA493845289B3DA50832A911E
        Validity
            Not Before: Jan 25 18:48:13 2022 GMT
            Not After : Jan 24 18:53:13 2023 GMT
        Subject: CN=3FA316662683732343184B427CA244B3B0AA3764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a1:ff:7b:8a:8d:11:08:be:2f:4a:fe:96:95:
                    9b:c1:47:be:da:42:2b:c4:03:69:45:83:ef:5a:85:
                    c0:18:21:3c:78:d0:d5:ff:20:db:b4:43:8b:78:f2:
                    3a:cc:7a:3c:55:b3:39:6b:d0:ed:70:64:dd:7b:8a:
                    fe:03:2a:3f:e5:7d:f1:b8:d2:75:0c:ee:d6:c9:ec:
                    2e:6b:7d:d2:0d:8f:e1:be:3e:8e:d3:de:d1:a0:a3:
                    f5:e2:3e:d2:7b:d8:7b:51:77:63:79:f9:7c:7a:44:
                    91:11:77:7d:4e:6c:ee:4d:e9:55:ee:e7:3f:2b:34:
                    86:a2:cc:e4:e4:d0:b1:16:24:28:ce:d8:e9:f7:52:
                    d5:39:5f:37:90:10:a5:06:7a:4f:60:3d:85:ba:eb:
                    6e:79:01:73:8d:08:7c:d1:3c:68:40:ea:6a:e6:7f:
                    22:5b:40:b0:e3:9b:89:af:0b:d2:62:c4:c4:50:ef:
                    da:6a:3b:b7:1e:cd:e2:70:e2:e4:b0:24:3b:0a:b2:
                    9e:be:b5:2b:eb:fb:ca:52:38:19:63:5b:01:f4:aa:
                    f5:51:04:f1:b7:05:d7:98:5a:b8:9e:f9:29:54:33:
                    59:37:6e:1f:4e:05:6d:18:77:1a:4f:64:4f:ae:79:
                    f8:66:f9:e3:70:b7:32:ee:d0:68:ed:d6:90:d4:8e:
                    12:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A3:16:66:26:83:73:23:43:18:4B:42:7C:A2:44:B3:B0:AA:37:64
            X509v3 Authority Key Identifier:
                keyid:9F:16:E4:EC:CD:A4:B9:4C:A4:93:84:52:89:B3:DA:50:83:2A:91:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/0/9F16E4ECCDA4B94CA493845289B3DA50832A911E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F16E4ECCDA4B94CA493845289B3DA50832A911E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/0/323830343a343561383a3a2f34302d3430203d3e20323636393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:45a8::/40

    Signature Algorithm: sha256WithRSAEncryption
         01:c3:52:94:a7:d8:81:34:d5:d7:8c:58:98:d9:87:8b:4d:62:
         7b:22:6f:e2:64:74:0a:15:12:21:27:cf:6e:d4:9d:35:1e:89:
         ef:0f:3d:c3:7d:08:2b:15:2a:82:4a:68:d0:50:f9:d3:6c:e8:
         e3:97:2a:1f:05:60:91:d5:6c:dd:60:9c:62:b6:bd:69:78:c9:
         0c:e7:89:4f:0c:a6:ca:88:6b:6b:8d:7e:d7:6e:b3:33:49:25:
         65:a0:de:c7:e9:d9:bf:c3:31:ec:04:39:81:71:83:aa:cd:8d:
         78:e6:b8:5b:2b:f1:a1:de:52:42:77:16:b5:27:c6:82:98:72:
         81:c2:1e:88:c3:de:fb:30:91:32:7f:5c:b7:5e:45:93:c6:9f:
         a5:45:4f:3c:ad:94:a0:fe:36:0f:cd:4e:78:82:b1:41:dd:1e:
         c1:e1:6c:d3:82:8f:50:a9:45:03:17:bf:f6:e8:87:97:c2:24:
         ae:dc:66:e9:27:50:d7:28:1d:0c:fb:74:d5:52:a5:4a:c1:ea:
         d6:da:00:fb:21:44:48:ba:78:29:8c:88:b7:a3:22:7c:37:a1:
         bf:47:50:48:90:84:a4:d2:4c:53:04:f0:22:22:c9:af:9b:4c:
         76:84:03:db:53:52:f0:a3:80:05:cf:51:76:5d:d3:c2:c2:dd:
         a7:fd:a6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:45:50 2025 by rpki-client