Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/323830343a3763303a323064333a3a2f34382d3438203d3e20323632333136.roa
File:                     323830343a3763303a323064333a3a2f34382d3438203d3e20323632333136.roa (raw, json)
Hash identifier:          vR2exSBiwTZ0UO49OoIQY6oWMBFTPkM4EjwPuRCSy7M=
Subject key identifier:   9B:7C:15:5A:FF:96:01:71:D9:22:58:41:6A:84:16:19:3D:65:75:EA
Certificate issuer:       /CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
Certificate serial:       25340C1F83E7B099320AFEB007D5FCCA55632F03
Authority key identifier: CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/323830343a3763303a323064333a3a2f34382d3438203d3e20323632333136.roa
Signing time:             Thu 14 Sep 2023 13:12:10 +0000
ROA not before:           Thu 14 Sep 2023 13:07:10 +0000
ROA not after:            Thu 12 Sep 2024 13:12:10 +0000
asID:                     262316
IP address blocks:        2804:7c0:20d3::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:34:0c:1f:83:e7:b0:99:32:0a:fe:b0:07:d5:fc:ca:55:63:2f:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
        Validity
            Not Before: Sep 14 13:07:10 2023 GMT
            Not After : Sep 12 13:12:10 2024 GMT
        Subject: CN=9B7C155AFF960171D92258416A8416193D6575EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fd:79:5e:0d:df:d8:4e:54:7d:8e:69:20:c5:
                    a5:31:50:ff:8e:64:12:2c:be:4e:3d:da:d1:08:cd:
                    f2:98:58:8d:3c:6d:1e:95:47:1e:70:f0:59:8b:d2:
                    c7:61:83:ee:d2:c5:24:fe:21:88:a4:dc:15:d0:4d:
                    90:6d:ee:af:9c:3c:88:15:04:85:52:f6:02:6d:f4:
                    d6:f9:c4:35:db:a2:d5:35:be:1d:d5:d1:e7:d8:ea:
                    c0:40:9f:7b:e2:88:9f:38:29:9d:f7:f6:91:4c:b4:
                    66:c0:7d:f1:11:d7:cb:88:fe:bc:a1:c6:01:31:5b:
                    2c:fa:4c:4e:e6:d1:6c:c6:9e:79:c5:ca:a5:da:11:
                    35:87:f4:67:85:e3:3b:46:52:c0:4f:a6:88:df:89:
                    6b:43:f8:4e:89:18:82:23:64:51:56:14:19:21:39:
                    9a:55:98:c2:0b:72:03:20:76:28:f7:02:74:ed:17:
                    a0:8a:4d:2f:17:f4:c4:0a:39:03:6d:a5:05:61:3e:
                    43:30:9b:b6:bc:4f:22:88:e0:4c:bd:4a:7d:a2:02:
                    0b:8b:a1:8f:29:43:b0:6e:e9:f0:9c:78:0b:7e:d5:
                    7d:ed:69:cf:64:23:1d:88:29:12:9b:57:aa:05:94:
                    4e:c4:c4:3d:f5:46:9d:31:91:c1:42:58:38:84:6c:
                    f5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:7C:15:5A:FF:96:01:71:D9:22:58:41:6A:84:16:19:3D:65:75:EA
            X509v3 Authority Key Identifier:
                keyid:CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/323830343a3763303a323064333a3a2f34382d3438203d3e20323632333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c0:20d3::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:84:55:0e:cc:f4:ec:61:47:2a:62:41:63:6f:05:f4:b3:61:
         fa:83:29:68:d0:3a:77:e6:c3:cb:26:b2:ba:42:03:43:1d:2e:
         95:b3:06:32:0a:76:70:c0:79:33:5e:8f:78:e0:01:b1:e3:9b:
         60:aa:86:3e:41:2b:d6:b2:59:c8:03:a8:11:d3:cb:be:82:33:
         8a:97:8a:89:c4:ec:69:d5:dd:3e:4c:dc:62:d1:81:9a:0f:a5:
         80:22:31:73:e2:f7:3d:33:c7:cb:87:de:35:45:02:6f:ac:ff:
         bb:45:69:72:4c:99:ed:9e:49:6c:dc:8b:90:3c:48:83:b3:d3:
         c2:8f:68:71:fa:b9:d7:17:5e:53:3f:10:13:c2:52:78:99:c3:
         4d:84:c6:72:b3:08:f2:0b:79:cb:54:35:65:20:3f:08:2d:40:
         6a:a0:10:38:51:0a:59:31:79:98:d1:ff:1c:b0:51:30:84:08:
         1e:2c:eb:ee:38:8c:90:9f:bb:0d:e4:75:ba:f2:7d:ec:90:41:
         3e:09:3e:b0:cf:52:2b:96:3f:ef:db:be:cf:6a:92:28:44:48:
         24:24:4f:ca:82:b3:ea:00:38:b5:ec:c8:21:4f:af:10:4b:f9:
         5c:38:73:12:03:bb:fe:7d:67:b6:e9:37:ab:e9:0d:7e:9e:84:
         05:f5:77:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:13 2025 by rpki-client