Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/323830343a316236383a313030303a3a2f34382d3438203d3e203631373236.roa
File:                     323830343a316236383a313030303a3a2f34382d3438203d3e203631373236.roa (raw, json)
Hash identifier:          2wOQeeOi+AjrqeOMuevjjkQsIOoCR2/XTaWVRfoP8Ss=
Subject key identifier:   A5:3F:A7:7A:00:9E:43:C2:74:67:01:2B:C0:DC:C2:48:DE:6C:0C:29
Certificate issuer:       /CN=9F55248699262B3492BB7EF605302682D56BBE22
Certificate serial:       342A47410BC61782274885F10FD7402C4E72444A
Authority key identifier: 9F:55:24:86:99:26:2B:34:92:BB:7E:F6:05:30:26:82:D5:6B:BE:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F55248699262B3492BB7EF605302682D56BBE22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/323830343a316236383a313030303a3a2f34382d3438203d3e203631373236.roa
Signing time:             Wed 26 Jul 2023 14:03:24 +0000
ROA not before:           Wed 26 Jul 2023 13:58:24 +0000
ROA not after:            Wed 24 Jul 2024 14:03:24 +0000
asID:                     61726
IP address blocks:        2804:1b68:1000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:2a:47:41:0b:c6:17:82:27:48:85:f1:0f:d7:40:2c:4e:72:44:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F55248699262B3492BB7EF605302682D56BBE22
        Validity
            Not Before: Jul 26 13:58:24 2023 GMT
            Not After : Jul 24 14:03:24 2024 GMT
        Subject: CN=3082010A0282010100B26E4B3CF5A6C3A146C7F2A410B31B0422F6663BFE1F465A1DEF04F3648853528274256076D66D1BC9D6BF11013A764F22AB56500C919AD11D0BCE1E22B6C77BA97630B33F3CEA14695086337E6615B8EDF379434C78DB77059DEA6E0EDC871C4900E3FD6ABD5AD725E17D23AF0196F762C3E6D90826CC10D381A06A0430B4B0AC5B20618B614B615E1713FEF6C95AE0B63169D7692AB4FFEDE6EA1CCDCC8FECBFBD69174235A9559FDFC380539AB4E74BDEAE88A22230E4D3809A25261A9985BF2B2E9EA0EB5A1DDC57C29CFFD1EA86119A872C87AA02E97AA4C01C770B7DE445F74DD7F57059CFAF54C2936662C190A222E640579127E8B7968BBA1D8A7AD30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6e:4b:3c:f5:a6:c3:a1:46:c7:f2:a4:10:b3:
                    1b:04:22:f6:66:3b:fe:1f:46:5a:1d:ef:04:f3:64:
                    88:53:52:82:74:25:60:76:d6:6d:1b:c9:d6:bf:11:
                    01:3a:76:4f:22:ab:56:50:0c:91:9a:d1:1d:0b:ce:
                    1e:22:b6:c7:7b:a9:76:30:b3:3f:3c:ea:14:69:50:
                    86:33:7e:66:15:b8:ed:f3:79:43:4c:78:db:77:05:
                    9d:ea:6e:0e:dc:87:1c:49:00:e3:fd:6a:bd:5a:d7:
                    25:e1:7d:23:af:01:96:f7:62:c3:e6:d9:08:26:cc:
                    10:d3:81:a0:6a:04:30:b4:b0:ac:5b:20:61:8b:61:
                    4b:61:5e:17:13:fe:f6:c9:5a:e0:b6:31:69:d7:69:
                    2a:b4:ff:ed:e6:ea:1c:cd:cc:8f:ec:bf:bd:69:17:
                    42:35:a9:55:9f:df:c3:80:53:9a:b4:e7:4b:de:ae:
                    88:a2:22:30:e4:d3:80:9a:25:26:1a:99:85:bf:2b:
                    2e:9e:a0:eb:5a:1d:dc:57:c2:9c:ff:d1:ea:86:11:
                    9a:87:2c:87:aa:02:e9:7a:a4:c0:1c:77:0b:7d:e4:
                    45:f7:4d:d7:f5:70:59:cf:af:54:c2:93:66:62:c1:
                    90:a2:22:e6:40:57:91:27:e8:b7:96:8b:ba:1d:8a:
                    7a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:3F:A7:7A:00:9E:43:C2:74:67:01:2B:C0:DC:C2:48:DE:6C:0C:29
            X509v3 Authority Key Identifier:
                keyid:9F:55:24:86:99:26:2B:34:92:BB:7E:F6:05:30:26:82:D5:6B:BE:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/9F55248699262B3492BB7EF605302682D56BBE22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F55248699262B3492BB7EF605302682D56BBE22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/323830343a316236383a313030303a3a2f34382d3438203d3e203631373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b68:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         b3:46:71:34:c6:61:2c:ec:16:a4:4b:72:98:74:7e:a3:fc:50:
         bb:73:7e:cf:ca:9c:30:28:61:73:ac:5d:2e:6a:c5:54:11:ec:
         54:e6:49:2c:d3:b9:e2:e1:1d:3a:8a:04:79:9f:18:ec:06:5c:
         67:70:dc:f2:84:8a:d6:d1:bb:2e:d3:01:ad:27:f5:87:cc:42:
         ac:8b:73:e3:61:35:1d:df:fd:24:b0:d6:65:7a:c7:f3:ff:b8:
         2b:65:00:9d:c8:c3:7e:46:7c:73:fe:91:e0:1b:f5:a5:16:53:
         7e:24:67:ab:49:32:40:62:fc:7d:26:bd:43:dd:24:84:31:04:
         df:56:c0:2a:99:72:fc:25:26:a7:4b:3e:73:76:42:56:53:8a:
         66:e1:e9:7e:6f:b4:1b:d6:77:4c:97:5a:44:da:6e:77:73:65:
         8f:ff:a0:31:1e:f0:57:4f:91:a5:10:87:fd:af:38:fa:bc:9b:
         24:95:ab:9e:c4:a5:17:4d:d7:ad:1f:01:fa:4e:89:ca:96:1e:
         95:36:be:b6:3d:c5:0e:4b:58:1a:b7:ac:c5:5e:d2:5c:32:09:
         73:7a:f6:09:73:03:c9:af:72:53:64:bf:74:9d:9e:eb:cf:3b:
         20:6a:bb:e7:1a:77:86:94:1f:ae:83:f9:40:06:e7:b3:ad:b4:
         5c:55:9e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:17:29 2025 by rpki-client