Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/323830343a3663633a3a2f33322d3438203d3e20323632363037.roa
File:                     323830343a3663633a3a2f33322d3438203d3e20323632363037.roa (raw, json)
Hash identifier:          u4Zne0pVf+rsIgqLlTesIWMfL0dzPv7Itf9a30xeiS8=
Subject key identifier:   E7:05:2E:65:DE:37:54:D2:C5:A8:7C:37:1A:D2:BC:33:FF:90:A4:75
Certificate issuer:       /CN=B9095BB2B66362B38306199DFC51A80D9FFFA04A
Certificate serial:       464CE466A5F92EFF032C1C30078D6F3AB723CFFB
Authority key identifier: B9:09:5B:B2:B6:63:62:B3:83:06:19:9D:FC:51:A8:0D:9F:FF:A0:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9095BB2B66362B38306199DFC51A80D9FFFA04A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/323830343a3663633a3a2f33322d3438203d3e20323632363037.roa
Signing time:             Wed 18 Jan 2023 23:19:44 +0000
ROA not before:           Wed 18 Jan 2023 23:14:44 +0000
ROA not after:            Wed 17 Jan 2024 23:19:44 +0000
asID:                     262607
IP address blocks:        2804:6cc::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:4c:e4:66:a5:f9:2e:ff:03:2c:1c:30:07:8d:6f:3a:b7:23:cf:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9095BB2B66362B38306199DFC51A80D9FFFA04A
        Validity
            Not Before: Jan 18 23:14:44 2023 GMT
            Not After : Jan 17 23:19:44 2024 GMT
        Subject: CN=E7052E65DE3754D2C5A87C371AD2BC33FF90A475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:da:e0:2b:c2:3e:f8:b3:97:ac:12:bc:7b:bd:
                    51:5f:b6:d6:d6:aa:89:0c:66:dc:25:09:7f:9f:b9:
                    3a:ec:5e:9b:5f:b8:f1:78:d9:69:3e:40:8f:46:b3:
                    69:55:7a:ab:1b:8e:ab:cd:e9:87:08:f7:c1:fa:f7:
                    c9:f5:29:37:41:6c:c5:4d:5e:b9:da:ae:8f:0e:06:
                    99:07:bd:02:fa:42:21:d1:ff:6b:19:f5:54:50:8e:
                    75:04:b0:bf:82:92:f9:6c:f0:1d:68:35:ed:8f:68:
                    55:a8:b0:cd:91:19:54:d3:9a:57:52:f2:04:55:da:
                    30:02:4a:f2:27:e3:12:fb:a9:fd:ca:f2:e4:a9:d4:
                    5e:72:e3:74:25:95:3f:e0:c4:15:22:7b:4e:cc:51:
                    4b:cd:3f:0b:cd:ee:17:44:c3:90:5e:58:e0:62:71:
                    73:db:69:24:78:66:df:1e:96:68:e9:7e:4c:83:00:
                    9e:ee:30:19:11:ff:6c:32:dd:63:63:46:27:5a:f5:
                    a7:24:1e:8c:b8:e8:50:8e:7d:3f:66:69:d5:f8:d2:
                    d5:b8:0b:f3:67:92:97:b1:c3:de:12:eb:ef:8f:a5:
                    6b:26:4c:da:dd:4f:0b:62:8e:19:8b:01:6f:d6:db:
                    91:81:5d:c2:09:82:43:46:18:25:ea:e5:c5:08:6e:
                    d7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:05:2E:65:DE:37:54:D2:C5:A8:7C:37:1A:D2:BC:33:FF:90:A4:75
            X509v3 Authority Key Identifier:
                keyid:B9:09:5B:B2:B6:63:62:B3:83:06:19:9D:FC:51:A8:0D:9F:FF:A0:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/B9095BB2B66362B38306199DFC51A80D9FFFA04A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9095BB2B66362B38306199DFC51A80D9FFFA04A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/323830343a3663633a3a2f33322d3438203d3e20323632363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:1f:5f:5b:a6:70:1b:09:a0:6e:c3:ea:5f:37:fe:ce:11:12:
         73:54:b5:7b:16:c2:74:5b:42:45:74:80:9d:9a:97:9f:7f:35:
         aa:94:52:63:ee:ac:3b:dc:17:09:e5:7a:b8:9d:9a:73:1b:62:
         36:34:28:ae:d4:a0:3f:6e:04:a4:b5:a1:76:d8:4a:7e:b5:2b:
         6d:81:1b:44:67:8f:80:e2:f9:48:d8:a0:92:24:45:30:2b:ed:
         98:53:07:1a:86:9c:24:16:4a:63:32:a0:3b:67:e3:5f:33:b9:
         c3:68:94:d7:9a:cf:af:a4:fe:06:fe:fe:76:d4:8c:a9:5a:13:
         ab:d0:32:02:b1:2e:79:e3:8c:70:0f:92:95:f1:b0:a9:11:c2:
         fb:ed:1a:91:86:5e:a7:b8:cf:0a:c1:f7:c9:89:30:88:82:93:
         9c:8b:a3:d4:12:8c:fb:16:c8:7e:ae:a9:14:82:12:89:af:45:
         55:ea:2f:06:6b:05:1d:f3:bf:94:16:1f:34:d4:10:b4:5d:37:
         88:1d:1b:68:57:9a:29:d1:95:c3:72:50:9f:82:7c:b6:1b:72:
         28:56:89:7c:fe:ff:b2:4c:00:48:4c:06:b8:dc:95:15:07:ff:
         42:db:be:c5:a6:91:b5:2e:ec:ea:29:78:f7:07:8d:71:ce:3f:
         9e:7d:13:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 00:49:46 2025 by rpki-client