Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/323830343a6439303a3a2f33322d3334203d3e20323033.roa
File:                     323830343a6439303a3a2f33322d3334203d3e20323033.roa (raw, json)
Hash identifier:          MH2FfyudFGot77faiOv0DNdyYTl5Bn8Na+6jwyw4/Tc=
Subject key identifier:   18:80:08:DE:8E:C9:D2:32:D7:A7:3D:76:28:64:DC:6D:B9:72:45:C6
Certificate issuer:       /CN=2444B4EFFAB2FF62A2518F28FA3AF906FF80C277
Certificate serial:       5B057ECA782F61C9A5ACAA48938945AA17CEACA6
Authority key identifier: 24:44:B4:EF:FA:B2:FF:62:A2:51:8F:28:FA:3A:F9:06:FF:80:C2:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2444B4EFFAB2FF62A2518F28FA3AF906FF80C277.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/323830343a6439303a3a2f33322d3334203d3e20323033.roa
Signing time:             Mon 19 Dec 2022 18:54:38 +0000
ROA not before:           Mon 19 Dec 2022 18:49:38 +0000
ROA not after:            Mon 18 Dec 2023 18:54:38 +0000
asID:                     203
IP address blocks:        2804:d90::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:05:7e:ca:78:2f:61:c9:a5:ac:aa:48:93:89:45:aa:17:ce:ac:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2444B4EFFAB2FF62A2518F28FA3AF906FF80C277
        Validity
            Not Before: Dec 19 18:49:38 2022 GMT
            Not After : Dec 18 18:54:38 2023 GMT
        Subject: CN=188008DE8EC9D232D7A73D762864DC6DB97245C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0f:75:ab:d3:68:01:44:ae:32:b2:31:66:72:
                    0e:54:d0:49:53:ba:fb:55:39:bd:eb:d3:5c:a7:ab:
                    13:63:e3:cd:df:4a:d7:ab:47:97:9c:98:a5:c0:e2:
                    fa:17:92:6a:c8:0e:7c:e5:66:71:38:bc:81:bc:98:
                    ba:81:9a:81:ac:37:da:f2:76:34:89:2c:36:a8:c4:
                    eb:3c:b5:dd:a9:e5:7d:25:64:a0:d2:8d:8b:75:f2:
                    49:cc:39:cc:7b:f5:36:7c:18:37:b0:5d:e1:e6:f8:
                    e0:82:2b:28:30:e0:3f:cf:56:32:15:fd:ef:01:98:
                    ab:cc:fd:fa:5e:39:b4:47:bd:2c:4f:cc:b8:4a:67:
                    97:dd:82:c2:c1:35:91:2d:43:02:a0:3d:e6:e5:ee:
                    53:62:95:ba:7e:03:16:e4:65:eb:32:6d:32:04:24:
                    91:23:f1:4d:14:08:39:c2:df:1f:03:7a:70:15:48:
                    47:67:c7:95:89:ad:14:bd:12:cd:94:2d:6b:66:03:
                    ab:45:5a:80:6c:14:0c:61:79:1a:02:98:ec:7b:c3:
                    24:6b:77:61:17:70:3e:3a:23:4f:2a:68:27:ef:b8:
                    b7:03:1a:c1:9a:29:fa:e0:83:78:f9:30:5b:80:13:
                    c2:e7:cf:72:13:56:c0:80:43:af:0d:c3:ee:d9:d2:
                    7c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:80:08:DE:8E:C9:D2:32:D7:A7:3D:76:28:64:DC:6D:B9:72:45:C6
            X509v3 Authority Key Identifier:
                keyid:24:44:B4:EF:FA:B2:FF:62:A2:51:8F:28:FA:3A:F9:06:FF:80:C2:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/2444B4EFFAB2FF62A2518F28FA3AF906FF80C277.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2444B4EFFAB2FF62A2518F28FA3AF906FF80C277.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/323830343a6439303a3a2f33322d3334203d3e20323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d90::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:29:43:53:95:34:df:21:11:d7:af:bb:1e:5d:82:df:ce:e0:
         74:bc:fc:2a:2e:54:d8:a7:da:c2:2c:61:41:1e:f0:ef:b4:40:
         85:b8:1a:dd:41:1c:d3:60:93:bf:7d:51:d0:ed:52:a7:98:d9:
         12:ce:43:11:4b:74:e4:b2:f7:2d:25:05:49:98:75:c6:f8:13:
         3a:2b:df:62:8a:48:df:1a:3b:ae:e9:9d:56:bc:02:e0:ef:d5:
         ec:de:79:bb:d2:f4:b1:16:26:ed:c6:35:d2:7d:bf:7d:10:97:
         7c:35:b4:51:f8:b8:27:53:09:11:fa:0d:d4:62:6a:bb:a8:55:
         61:10:a2:59:48:ad:62:b4:88:e6:b6:09:cd:4d:38:65:da:09:
         fe:ad:f0:f3:41:58:32:09:b0:aa:4a:7c:d9:6d:8b:4b:d7:58:
         0f:7e:50:d6:ea:f0:42:49:08:5d:4f:d3:e4:40:d5:b8:08:95:
         6d:1a:d0:81:57:0e:02:dd:c4:ab:5a:c4:36:b6:a8:bd:00:6a:
         d9:19:40:05:26:ad:05:4c:3f:3b:22:eb:7d:b0:3b:31:b0:63:
         53:b3:a6:4c:73:11:f4:9f:6e:68:bf:ee:c4:bf:78:eb:47:1a:
         b6:67:9e:0a:60:ca:b7:bc:02:85:e8:42:19:59:6e:2a:e5:e2:
         2c:33:d1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:44 2025 by rpki-client