Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/323830343a323338633a316630303a3a2f34342d3434203d3e20323634313639.roa
File:                     323830343a323338633a316630303a3a2f34342d3434203d3e20323634313639.roa (raw, json)
Hash identifier:          xOHxQi8IkJ5rG20pflMejHkRScF/P+zzbNaL2P/279s=
Subject key identifier:   E9:66:D0:95:97:37:C1:B7:64:E0:47:F0:8D:E2:11:B9:05:18:9C:5D
Certificate issuer:       /CN=108F95B401BD922625E878BB62A22549F5766415
Certificate serial:       03B517ED026B65B97BF1CE61C929FBC46B1D4A34
Authority key identifier: 10:8F:95:B4:01:BD:92:26:25:E8:78:BB:62:A2:25:49:F5:76:64:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/108F95B401BD922625E878BB62A22549F5766415.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/323830343a323338633a316630303a3a2f34342d3434203d3e20323634313639.roa
Signing time:             Fri 28 Oct 2022 20:32:32 +0000
ROA not before:           Fri 28 Oct 2022 20:27:32 +0000
ROA not after:            Fri 27 Oct 2023 20:32:32 +0000
asID:                     264169
IP address blocks:        2804:238c:1f00::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:b5:17:ed:02:6b:65:b9:7b:f1:ce:61:c9:29:fb:c4:6b:1d:4a:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=108F95B401BD922625E878BB62A22549F5766415
        Validity
            Not Before: Oct 28 20:27:32 2022 GMT
            Not After : Oct 27 20:32:32 2023 GMT
        Subject: CN=E966D0959737C1B764E047F08DE211B905189C5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:61:84:68:25:9e:2b:cd:c7:77:65:ed:2a:f1:
                    88:85:cc:18:a4:a3:b8:cb:8b:e1:32:4b:45:5c:3e:
                    a1:e6:65:27:de:db:8f:e4:c7:cf:88:0c:23:4d:e2:
                    d9:cd:27:75:07:d6:f9:6c:57:3b:ad:10:7a:27:18:
                    37:4c:92:ec:17:df:66:dd:7f:40:f6:aa:4c:02:26:
                    c0:10:02:e8:84:d4:c6:82:b7:f9:47:9a:16:34:46:
                    b5:4f:8b:7f:e1:a5:60:ab:be:9a:b4:e4:57:12:cd:
                    4b:66:36:ae:e1:8e:13:c0:c4:d5:3a:9b:38:94:77:
                    65:05:e4:7d:75:d4:c7:26:12:b0:86:12:76:b9:f0:
                    cd:48:a6:89:1e:57:da:d9:3b:37:91:90:cf:bc:4e:
                    7e:cd:c5:9a:bd:f7:25:2a:b2:c2:a3:c1:5f:2c:72:
                    85:c1:8b:f3:5b:16:1e:19:d9:9f:4d:ac:ad:c4:ad:
                    b1:95:54:fb:b9:8b:13:7b:8d:cc:47:ca:7b:ec:92:
                    2e:62:6c:01:21:8a:9f:f4:99:e9:71:bb:b6:05:3d:
                    d5:1f:92:fc:c6:7d:e5:98:85:5f:b3:d6:8e:3b:c2:
                    48:ff:0b:6e:02:19:30:ad:a9:7a:7c:7c:82:8c:52:
                    d5:f8:2a:1e:a2:b2:25:8a:9b:c4:38:e3:64:b5:da:
                    18:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:66:D0:95:97:37:C1:B7:64:E0:47:F0:8D:E2:11:B9:05:18:9C:5D
            X509v3 Authority Key Identifier:
                keyid:10:8F:95:B4:01:BD:92:26:25:E8:78:BB:62:A2:25:49:F5:76:64:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/108F95B401BD922625E878BB62A22549F5766415.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/108F95B401BD922625E878BB62A22549F5766415.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/323830343a323338633a316630303a3a2f34342d3434203d3e20323634313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:238c:1f00::/44

    Signature Algorithm: sha256WithRSAEncryption
         97:94:f4:92:65:59:a8:16:9e:9f:d2:ca:66:1a:e9:74:f3:34:
         16:ba:70:bf:27:78:d5:13:2c:cd:e7:b0:84:87:83:11:ad:ce:
         d6:20:a6:6a:e3:bd:e7:a2:f0:41:2f:ca:b4:95:f0:12:2e:8a:
         5d:82:62:87:bf:74:21:d7:10:dd:59:ab:85:04:97:08:c5:18:
         da:b6:57:30:76:31:6a:df:73:01:b3:cf:3d:31:f8:75:68:52:
         6b:86:4e:b2:63:e0:7d:3a:aa:92:7a:fe:f7:d1:93:09:1f:e7:
         b7:f6:26:98:5e:cc:be:68:ac:28:d1:a3:97:5c:6c:b9:81:3e:
         a7:e8:ab:45:1e:a5:a0:3d:e6:b8:6f:2e:65:2e:50:98:f2:a8:
         dd:72:3b:73:37:61:57:97:27:c6:c9:98:35:04:f2:bd:5d:c4:
         4d:3a:1a:c0:e8:ab:fa:99:8d:90:d3:d3:3d:f3:bb:99:24:bb:
         1c:ec:1f:33:e6:ac:e1:12:b7:9f:5d:7b:b2:4e:3c:61:d0:a3:
         8e:c4:ff:ce:8d:64:70:9c:86:72:8f:52:84:98:57:60:c2:37:
         51:f3:31:9a:91:70:f1:64:42:b5:6e:68:ca:56:02:88:c6:9a:
         35:f7:8b:36:7c:d7:32:06:eb:cc:11:43:ba:ba:33:ae:19:9c:
         8e:a6:34:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:21:41 2025 by rpki-client