Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/323830343a3663633a383130303a3a2f34302d3430203d3e20323632363037.roa
File:                     323830343a3663633a383130303a3a2f34302d3430203d3e20323632363037.roa (raw, json)
Hash identifier:          FjTQ4oHIj6BbP6aEFMLJbDswM42GzzciPLz+kZCXaGk=
Subject key identifier:   8D:97:EA:B0:52:B1:24:82:82:C3:CC:A4:6E:2B:B0:C4:F6:45:B4:3E
Certificate issuer:       /CN=56D9A1201889650DCAB74085B3A0433357A372C2
Certificate serial:       39D3E49A45C278311D6225C08DA2FC1FC4D3BBF0
Authority key identifier: 56:D9:A1:20:18:89:65:0D:CA:B7:40:85:B3:A0:43:33:57:A3:72:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56D9A1201889650DCAB74085B3A0433357A372C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/323830343a3663633a383130303a3a2f34302d3430203d3e20323632363037.roa
Signing time:             Thu 06 Oct 2022 15:16:56 +0000
ROA not before:           Thu 06 Oct 2022 15:11:56 +0000
ROA not after:            Thu 05 Oct 2023 15:16:56 +0000
asID:                     262607
IP address blocks:        2804:6cc:8100::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:d3:e4:9a:45:c2:78:31:1d:62:25:c0:8d:a2:fc:1f:c4:d3:bb:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56D9A1201889650DCAB74085B3A0433357A372C2
        Validity
            Not Before: Oct  6 15:11:56 2022 GMT
            Not After : Oct  5 15:16:56 2023 GMT
        Subject: CN=8D97EAB052B1248282C3CCA46E2BB0C4F645B43E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:70:65:aa:de:73:75:20:bc:8c:8a:9c:ae:8d:
                    b5:1a:81:94:fb:ec:b2:15:f9:ef:7e:3a:8b:e8:3c:
                    f1:6c:35:88:0a:70:ee:62:38:c5:d6:18:f6:f3:2d:
                    57:d4:0c:42:98:b3:74:53:2e:6e:28:f5:07:6e:e8:
                    f9:08:a5:22:3f:2c:d2:1b:cf:ba:47:11:e3:39:f7:
                    18:78:73:70:18:4f:47:14:85:27:de:57:be:6b:61:
                    27:25:7d:44:0e:c3:d1:29:6c:64:24:40:47:32:0b:
                    f9:d5:32:7a:11:f1:62:2c:40:ae:19:ea:b2:f7:d2:
                    bf:57:13:15:9b:0e:43:d8:9a:5e:d4:98:01:62:46:
                    b0:7d:80:80:c3:c7:b1:8b:81:45:cd:54:c1:b4:5a:
                    ce:d3:a1:b2:07:1b:5e:4e:0a:30:af:98:09:07:67:
                    66:73:55:33:e3:73:ed:b5:df:fe:0b:93:2a:3a:8a:
                    d0:69:51:28:a5:bc:1a:46:46:0c:0c:e9:d6:17:5b:
                    f8:9f:a6:a6:8c:56:f1:f8:90:7a:a3:e2:7e:a1:4f:
                    be:65:c7:fd:82:e6:ec:b1:f8:dd:df:7c:1c:4c:fc:
                    79:89:0c:d2:ef:fe:fb:fa:4c:5a:63:b8:61:7b:21:
                    af:e3:f2:50:5f:8e:11:b8:ee:82:bf:85:72:e9:32:
                    c2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:97:EA:B0:52:B1:24:82:82:C3:CC:A4:6E:2B:B0:C4:F6:45:B4:3E
            X509v3 Authority Key Identifier:
                keyid:56:D9:A1:20:18:89:65:0D:CA:B7:40:85:B3:A0:43:33:57:A3:72:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/56D9A1201889650DCAB74085B3A0433357A372C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56D9A1201889650DCAB74085B3A0433357A372C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/323830343a3663633a383130303a3a2f34302d3430203d3e20323632363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6cc:8100::/40

    Signature Algorithm: sha256WithRSAEncryption
         72:81:e8:3e:86:e4:06:52:42:d1:25:1a:da:06:b9:a2:89:b9:
         0d:27:38:b4:ff:e0:ce:be:da:eb:06:77:72:2e:ca:84:21:3d:
         aa:59:82:72:f2:f9:82:e4:f8:d7:1b:4f:30:af:f7:f0:02:33:
         6b:3a:af:21:af:52:ab:8a:77:a1:94:1b:52:8c:8b:da:c6:b6:
         9c:2e:cd:63:78:48:fc:07:86:3a:f9:18:b1:5a:bb:ef:d1:21:
         76:94:8b:1e:c1:db:21:d4:8c:08:c3:7f:e7:5a:89:16:00:e2:
         23:66:9b:27:41:25:3b:57:51:ff:89:a8:51:a2:7a:88:fb:d2:
         11:55:b8:44:e6:c4:7e:0d:2f:73:21:63:80:f3:74:fe:6e:de:
         2c:80:4f:92:07:17:31:58:e7:cf:e0:99:7e:85:14:f7:38:39:
         d6:88:fc:d0:00:e4:8e:84:65:c7:a8:7a:1f:3a:ed:5e:1b:1e:
         66:60:28:60:5c:21:b9:b1:66:81:f6:f5:36:b0:dd:b8:39:17:
         6a:d7:24:6b:5d:98:c8:04:a8:51:a8:95:01:73:ca:e6:61:08:
         b7:5c:26:b4:7a:79:08:0a:be:38:13:02:ab:75:44:8e:50:6a:
         a9:9a:76:10:a8:e8:c1:5d:1d:ba:c7:26:bd:40:c9:dd:46:ab:
         42:96:8a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:05:40 2025 by rpki-client