Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/323830343a3663633a3a2f34382d3438203d3e20323632363037.roa
File:                     323830343a3663633a3a2f34382d3438203d3e20323632363037.roa (raw, json)
Hash identifier:          bITYcxQOeifKuUHb2gZypXSdzvHtZsJJlR2iOcauTJs=
Subject key identifier:   68:37:6D:33:15:24:E6:94:A9:45:F7:90:6A:C5:0F:37:67:EC:63:DE
Certificate issuer:       /CN=56D9A1201889650DCAB74085B3A0433357A372C2
Certificate serial:       30825A2EB64FD7794218A6C239A0CF65C124F845
Authority key identifier: 56:D9:A1:20:18:89:65:0D:CA:B7:40:85:B3:A0:43:33:57:A3:72:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56D9A1201889650DCAB74085B3A0433357A372C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/323830343a3663633a3a2f34382d3438203d3e20323632363037.roa
Signing time:             Thu 06 Oct 2022 15:17:02 +0000
ROA not before:           Thu 06 Oct 2022 15:12:02 +0000
ROA not after:            Thu 05 Oct 2023 15:17:02 +0000
asID:                     262607
IP address blocks:        2804:6cc::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:82:5a:2e:b6:4f:d7:79:42:18:a6:c2:39:a0:cf:65:c1:24:f8:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56D9A1201889650DCAB74085B3A0433357A372C2
        Validity
            Not Before: Oct  6 15:12:02 2022 GMT
            Not After : Oct  5 15:17:02 2023 GMT
        Subject: CN=68376D331524E694A945F7906AC50F3767EC63DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3a:70:8a:5e:22:fd:00:9e:d1:0d:e5:f5:49:
                    52:f1:e4:a3:1a:c3:17:ac:ea:8e:39:8b:c2:d5:93:
                    68:f3:f4:4c:9b:e8:3f:c2:b8:29:a4:cb:0d:36:cd:
                    6a:11:c9:8f:42:25:53:ef:ac:f4:fe:0d:c2:e0:6c:
                    29:d6:70:de:60:07:11:14:de:0c:42:31:f2:19:06:
                    d3:c0:4d:9d:71:07:9d:5f:7c:73:c3:19:6c:43:80:
                    a6:cc:1f:13:80:8e:a6:ca:01:ec:44:b4:77:6d:58:
                    53:0e:b8:af:e7:24:3a:5f:91:cf:2a:de:bd:f0:2b:
                    3b:97:12:c0:d3:c8:09:31:32:51:79:70:d7:4a:68:
                    a6:6d:df:18:17:70:29:f8:53:8c:6e:0d:b9:13:36:
                    24:51:f7:71:9e:25:6d:eb:0b:c5:60:a6:da:76:38:
                    04:7f:24:4f:95:3f:df:90:82:69:09:1a:62:91:47:
                    62:1a:31:de:88:98:8c:8b:df:b2:f3:e3:14:7c:d2:
                    2f:15:d2:e7:a7:e4:82:36:23:13:53:4f:8c:7b:1d:
                    5e:18:9c:2a:30:da:65:05:40:88:0e:46:cc:ce:e5:
                    57:39:30:73:de:85:11:1d:03:35:77:9a:5b:b0:5f:
                    68:cd:b9:9d:76:83:c4:83:49:f2:4a:5c:24:28:2d:
                    fe:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:37:6D:33:15:24:E6:94:A9:45:F7:90:6A:C5:0F:37:67:EC:63:DE
            X509v3 Authority Key Identifier:
                keyid:56:D9:A1:20:18:89:65:0D:CA:B7:40:85:B3:A0:43:33:57:A3:72:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/56D9A1201889650DCAB74085B3A0433357A372C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56D9A1201889650DCAB74085B3A0433357A372C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/323830343a3663633a3a2f34382d3438203d3e20323632363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6cc::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:93:c8:51:b1:b6:21:ff:1f:b5:ae:a6:03:fc:38:82:a5:e6:
         02:c8:42:f2:5b:ef:8b:d2:d1:74:64:c7:14:a7:a3:5e:58:01:
         03:06:14:e6:27:92:2c:de:42:19:bc:9b:7d:af:4a:89:58:a4:
         45:d7:fc:d6:09:2d:9a:68:01:94:b5:66:0b:cb:3c:b6:14:9b:
         36:e0:48:70:ac:4b:1e:99:13:f4:6a:20:f6:b7:42:ba:7e:d6:
         f7:23:85:7e:cf:49:9c:5a:b0:da:a7:be:fb:9c:0b:1c:1a:22:
         05:7d:d1:36:f9:e7:25:4e:f9:85:d9:ee:2c:9f:17:2f:70:d6:
         9a:78:56:80:fe:00:a6:0e:a7:33:9c:0c:a3:b7:d0:77:9c:42:
         2c:51:90:a2:f6:ac:77:e0:fd:3f:64:79:32:b0:db:cd:7b:7f:
         88:77:e4:1b:cc:bd:93:4b:59:dd:fa:0e:73:cb:d7:0a:61:6d:
         bd:2a:53:14:38:d3:9b:bc:4a:9a:d9:7b:6b:8b:1c:c9:19:d6:
         ab:de:04:8c:5a:28:f9:d3:5c:d7:f7:85:7c:97:6d:2f:af:24:
         7b:08:84:ff:4b:9d:22:99:7d:b3:7f:73:fe:56:40:16:86:8b:
         f3:92:56:bb:40:ac:c2:fe:26:49:c4:57:d2:94:d5:44:c7:22:
         1d:07:c9:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:54 2025 by rpki-client