Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8PnSv17tou4fKUYKJXkbBM4VeD6vCkcV2uuws2nxfJ1s/0/323830343a383535383a3a2f33342d3334203d3e20323732353733.roa
File:                     323830343a383535383a3a2f33342d3334203d3e20323732353733.roa (raw, json)
Hash identifier:          Tje5GNqdL5x+U3L1yED66sAkczMut7T5BhNCQoF+cMc=
Subject key identifier:   07:F5:71:64:B9:A4:45:F7:B2:77:F7:50:A9:46:FA:8B:1A:69:4D:F9
Certificate issuer:       /CN=609592934A0E33AC57311C220A76D5408AC0153F
Certificate serial:       34FB771B97813C0FA2839A998F16E6153A582904
Authority key identifier: 60:95:92:93:4A:0E:33:AC:57:31:1C:22:0A:76:D5:40:8A:C0:15:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/609592934A0E33AC57311C220A76D5408AC0153F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8PnSv17tou4fKUYKJXkbBM4VeD6vCkcV2uuws2nxfJ1s/0/323830343a383535383a3a2f33342d3334203d3e20323732353733.roa
Signing time:             Thu 09 Jan 2025 19:09:51 +0000
ROA not before:           Thu 09 Jan 2025 19:04:51 +0000
ROA not after:            Thu 08 Jan 2026 19:09:51 +0000
asID:                     272573
IP address blocks:        2804:8558::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:fb:77:1b:97:81:3c:0f:a2:83:9a:99:8f:16:e6:15:3a:58:29:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=609592934A0E33AC57311C220A76D5408AC0153F
        Validity
            Not Before: Jan  9 19:04:51 2025 GMT
            Not After : Jan  8 19:09:51 2026 GMT
        Subject: CN=07F57164B9A445F7B277F750A946FA8B1A694DF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6f:e9:c2:0d:ca:71:08:b1:b4:1c:4d:31:e9:
                    1b:a9:70:b2:45:81:d0:d6:2f:74:46:4d:95:e2:cc:
                    32:87:44:a3:62:1b:37:ed:b5:d5:4e:e8:39:d3:14:
                    0a:99:bf:de:e2:fd:f3:c8:a0:1c:7f:6d:3e:f4:56:
                    29:28:0c:fd:b2:30:f3:b2:6f:cf:af:34:39:70:92:
                    12:ba:84:01:2d:97:fd:2a:0f:7e:a5:e1:48:27:79:
                    d1:cd:1a:a6:49:60:22:f1:f1:24:59:8a:a2:39:69:
                    dc:9c:0a:e7:40:08:9b:89:1a:d7:37:5d:78:17:29:
                    70:47:bc:23:bf:18:d5:c9:12:fc:7c:14:56:78:91:
                    c2:e4:b0:3e:26:d4:73:ff:6c:93:b5:43:5d:42:d5:
                    4a:fb:66:ab:8f:0f:a8:75:8c:61:1c:af:2a:43:bb:
                    07:92:3e:39:ed:c1:28:5a:a8:a9:fe:32:d2:82:f5:
                    0c:39:00:da:c3:35:cf:33:d4:d8:86:16:d7:27:9f:
                    12:1c:97:ec:6c:57:1c:ef:e7:7b:41:bb:bd:69:09:
                    76:c6:d4:4a:ca:f6:c3:ce:09:44:a1:26:fc:07:70:
                    88:ec:95:7c:62:d2:7b:5d:a2:cd:dc:6c:39:55:e8:
                    e0:0e:f1:42:c7:ad:f4:f3:5a:99:95:a0:c2:69:fb:
                    ba:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F5:71:64:B9:A4:45:F7:B2:77:F7:50:A9:46:FA:8B:1A:69:4D:F9
            X509v3 Authority Key Identifier:
                keyid:60:95:92:93:4A:0E:33:AC:57:31:1C:22:0A:76:D5:40:8A:C0:15:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8PnSv17tou4fKUYKJXkbBM4VeD6vCkcV2uuws2nxfJ1s/0/609592934A0E33AC57311C220A76D5408AC0153F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/609592934A0E33AC57311C220A76D5408AC0153F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8PnSv17tou4fKUYKJXkbBM4VeD6vCkcV2uuws2nxfJ1s/0/323830343a383535383a3a2f33342d3334203d3e20323732353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8558::/34

    Signature Algorithm: sha256WithRSAEncryption
         75:b9:18:94:ee:5c:ac:9c:74:df:0c:39:ba:6a:c5:51:29:50:
         98:a8:a6:15:d0:b3:02:63:41:f8:29:08:b4:14:41:9b:c9:47:
         3c:47:63:70:ee:0b:fb:16:fe:5a:dd:1e:9a:01:56:73:1a:57:
         9d:84:d1:85:14:42:12:54:c3:b3:eb:fc:9f:e4:a7:f3:24:78:
         12:7f:25:33:bb:dd:e8:dc:a4:7e:07:cc:23:b1:d5:c0:7f:5d:
         64:5f:58:32:0a:cd:17:da:88:38:97:10:20:ee:61:85:ed:e4:
         4c:00:51:9d:47:68:4e:e6:3b:44:e6:98:3e:1f:8b:4b:5d:c2:
         7d:c4:f3:bf:64:b8:05:8b:f5:23:a8:70:1d:df:f4:20:d6:94:
         b1:56:04:5d:44:00:9c:40:99:be:bf:95:bb:24:12:1d:a5:2d:
         d6:14:93:bf:bd:ba:e4:00:51:9a:a1:db:34:25:d0:1d:ef:7f:
         5a:c4:57:c5:4c:8f:6a:eb:9f:1a:e4:59:ed:87:26:d8:61:67:
         4d:b7:8f:ed:16:2a:0b:fb:7c:7c:d6:fb:0f:42:96:fe:d9:87:
         2d:92:58:4d:a5:19:cb:70:ee:04:9e:4e:0c:5b:6a:cb:c1:18:
         79:5e:04:94:c2:3c:e2:78:4d:39:74:f1:82:b5:90:c4:5b:c9:
         23:64:8a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:45:32 2025 by rpki-client