Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bT49NANhaBtN8pntdNKGXgkSmJu1Y2LtvQMooH1o5Rv/0/323830343a3333383a3a2f33322d3333203d3e20323632373330.roa
File:                     323830343a3333383a3a2f33322d3333203d3e20323632373330.roa (raw, json)
Hash identifier:          zvf0nF+4Z23Ah0guvcmCqdnP4c30I+3k4due4f3e4U8=
Subject key identifier:   78:43:DF:E0:D8:BA:46:0F:C3:28:40:28:10:5A:D2:46:ED:92:44:0B
Certificate issuer:       /CN=E9213DD4021CE06AB92F4683859FB848C0A265FD
Certificate serial:       428FE27E07E1AA328BDF62B02BEC89A3224907A6
Authority key identifier: E9:21:3D:D4:02:1C:E0:6A:B9:2F:46:83:85:9F:B8:48:C0:A2:65:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E9213DD4021CE06AB92F4683859FB848C0A265FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bT49NANhaBtN8pntdNKGXgkSmJu1Y2LtvQMooH1o5Rv/0/323830343a3333383a3a2f33322d3333203d3e20323632373330.roa
Signing time:             Wed 14 Jun 2023 14:00:00 +0000
ROA not before:           Wed 14 Jun 2023 13:55:00 +0000
ROA not after:            Wed 12 Jun 2024 14:00:00 +0000
asID:                     262730
IP address blocks:        2804:338::/32 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:8f:e2:7e:07:e1:aa:32:8b:df:62:b0:2b:ec:89:a3:22:49:07:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9213DD4021CE06AB92F4683859FB848C0A265FD
        Validity
            Not Before: Jun 14 13:55:00 2023 GMT
            Not After : Jun 12 14:00:00 2024 GMT
        Subject: CN=7843DFE0D8BA460FC3284028105AD246ED92440B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:01:e2:26:d5:c9:75:81:20:46:a6:f9:da:72:
                    8b:51:1e:5f:3c:ac:05:c5:17:fb:1c:ed:6e:f3:a9:
                    0c:88:3e:16:6f:03:8b:f4:2c:8a:49:91:01:ec:98:
                    26:76:90:08:af:ea:c8:9c:c3:9c:8e:98:3b:28:a9:
                    7a:29:a4:34:78:29:46:e2:17:db:2e:01:36:52:b0:
                    fa:35:b1:57:d7:d5:03:b0:b4:f5:ca:dd:32:60:75:
                    fa:34:07:71:df:bb:cd:7c:3e:70:f9:bc:e3:9e:b8:
                    d5:78:32:2a:5d:ea:ec:cf:65:5f:ec:6f:a8:c3:2e:
                    e1:97:9e:45:82:6d:8b:df:f1:84:48:95:e9:58:42:
                    b8:95:29:c5:c1:55:d8:4f:8b:02:05:a5:82:22:b0:
                    ec:a6:64:68:c7:f0:43:1f:95:51:ca:d4:2e:dc:7e:
                    60:7d:7a:20:36:78:99:51:46:b8:88:ca:e2:5b:2a:
                    cc:f3:61:9f:cf:37:34:50:8b:75:cd:41:b2:d2:6a:
                    e7:9e:02:ce:df:84:c7:8a:0f:ff:0e:a0:1f:1d:c5:
                    48:54:e9:64:0b:9d:19:42:cd:ad:ee:c9:46:f1:12:
                    8e:5f:73:1a:6e:15:0a:42:8c:07:30:27:ea:1d:85:
                    7a:0e:76:37:67:8f:e0:5e:d0:f4:79:f6:d8:97:21:
                    36:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:43:DF:E0:D8:BA:46:0F:C3:28:40:28:10:5A:D2:46:ED:92:44:0B
            X509v3 Authority Key Identifier:
                keyid:E9:21:3D:D4:02:1C:E0:6A:B9:2F:46:83:85:9F:B8:48:C0:A2:65:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bT49NANhaBtN8pntdNKGXgkSmJu1Y2LtvQMooH1o5Rv/0/E9213DD4021CE06AB92F4683859FB848C0A265FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E9213DD4021CE06AB92F4683859FB848C0A265FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bT49NANhaBtN8pntdNKGXgkSmJu1Y2LtvQMooH1o5Rv/0/323830343a3333383a3a2f33322d3333203d3e20323632373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:338::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:27:9e:03:13:a6:ff:d2:8e:12:99:d3:76:69:2e:9a:91:a9:
         44:56:bc:52:e8:30:4a:e9:95:c1:3e:3e:6d:60:78:0a:fd:14:
         c9:b6:8d:e7:b8:29:2e:e7:a1:38:40:21:b0:92:46:e9:e0:8e:
         34:55:17:3a:64:dd:6e:85:d8:2f:e5:f2:9a:8e:06:a3:26:c7:
         0f:c4:58:b3:38:40:5b:34:20:82:57:04:d7:23:0d:bf:6b:58:
         da:7c:55:e3:0e:ec:ed:b8:c8:62:fc:08:30:54:49:08:78:fb:
         e6:03:23:0e:6f:b7:23:48:9f:f6:68:12:22:08:8d:f8:10:4c:
         3d:09:e9:c6:72:6d:85:01:21:a4:2c:17:87:c1:3f:38:37:ba:
         bb:cd:f4:7a:13:6c:9b:a3:0d:cf:76:36:de:02:92:24:94:da:
         cf:56:36:ab:79:e3:29:81:71:7a:75:9d:08:19:44:e6:37:99:
         be:c0:6e:b5:34:33:ea:3b:05:47:2c:0d:fe:01:5b:9c:89:74:
         5d:85:41:51:21:45:c6:13:a3:16:fb:e4:b1:dd:a1:59:54:27:
         56:e6:56:1a:54:89:89:3f:b2:37:ad:20:f4:0e:bf:6b:0a:88:
         26:a8:96:8c:48:09:a4:07:81:bd:7b:ef:fb:5d:12:ec:4e:c6:
         bd:5c:b3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:23:24 2025 by rpki-client