Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/323830343a316236383a323030303a3a2f34342d3434203d3e203631373236.roa
File:                     323830343a316236383a323030303a3a2f34342d3434203d3e203631373236.roa (raw, json)
Hash identifier:          l1x1dvWGj+U8aJDEVWD975/Ehbn9oU9QotlARICYBaE=
Subject key identifier:   10:79:FF:01:02:6C:92:5B:63:64:BB:D6:D1:C8:4C:73:AA:60:31:01
Certificate issuer:       /CN=9F55248699262B3492BB7EF605302682D56BBE22
Certificate serial:       46DAE760F4B54B14400BCA01D8E30769A2AFC256
Authority key identifier: 9F:55:24:86:99:26:2B:34:92:BB:7E:F6:05:30:26:82:D5:6B:BE:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F55248699262B3492BB7EF605302682D56BBE22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/323830343a316236383a323030303a3a2f34342d3434203d3e203631373236.roa
Signing time:             Wed 26 Jul 2023 14:03:28 +0000
ROA not before:           Wed 26 Jul 2023 13:58:28 +0000
ROA not after:            Wed 24 Jul 2024 14:03:28 +0000
asID:                     61726
IP address blocks:        2804:1b68:2000::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:da:e7:60:f4:b5:4b:14:40:0b:ca:01:d8:e3:07:69:a2:af:c2:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F55248699262B3492BB7EF605302682D56BBE22
        Validity
            Not Before: Jul 26 13:58:28 2023 GMT
            Not After : Jul 24 14:03:28 2024 GMT
        Subject: CN=3082010A0282010100CD517420C059361B7C64855C5B0B4D351D8B69171FFD2777A3BD3AC3F27D7A61C4860E2DA9483025FAA852E245719DB6536F1745B1AB1542A39DF6DA36B73E2834F28C6A3E0969F234CEBAE85D5DEBF24D1D2318A8E6CF987ED632B12A031844794A462B899B971C3D20F77B8B687E81F4A65CD2A30FA9A8477E32E3B3B8C76547E2DE6AD49AF1DFA2C7E250D7F0BCF118D4CE9378CEE0D1E0B458F1C39C31049E3C1D3EFC698BC4BA5D96F720901709D55286F4E0B24B8EEDF0E35935B6C6309F46B80D24C7A497FA801C037EA88259FC1E57D5F2BE9DB85C8BD6E3DD3D333E55894497EC47BE959E95571BDE40B0886509ED7C4DAFBBA17C93F4D447A4FDBF0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:51:74:20:c0:59:36:1b:7c:64:85:5c:5b:0b:
                    4d:35:1d:8b:69:17:1f:fd:27:77:a3:bd:3a:c3:f2:
                    7d:7a:61:c4:86:0e:2d:a9:48:30:25:fa:a8:52:e2:
                    45:71:9d:b6:53:6f:17:45:b1:ab:15:42:a3:9d:f6:
                    da:36:b7:3e:28:34:f2:8c:6a:3e:09:69:f2:34:ce:
                    ba:e8:5d:5d:eb:f2:4d:1d:23:18:a8:e6:cf:98:7e:
                    d6:32:b1:2a:03:18:44:79:4a:46:2b:89:9b:97:1c:
                    3d:20:f7:7b:8b:68:7e:81:f4:a6:5c:d2:a3:0f:a9:
                    a8:47:7e:32:e3:b3:b8:c7:65:47:e2:de:6a:d4:9a:
                    f1:df:a2:c7:e2:50:d7:f0:bc:f1:18:d4:ce:93:78:
                    ce:e0:d1:e0:b4:58:f1:c3:9c:31:04:9e:3c:1d:3e:
                    fc:69:8b:c4:ba:5d:96:f7:20:90:17:09:d5:52:86:
                    f4:e0:b2:4b:8e:ed:f0:e3:59:35:b6:c6:30:9f:46:
                    b8:0d:24:c7:a4:97:fa:80:1c:03:7e:a8:82:59:fc:
                    1e:57:d5:f2:be:9d:b8:5c:8b:d6:e3:dd:3d:33:3e:
                    55:89:44:97:ec:47:be:95:9e:95:57:1b:de:40:b0:
                    88:65:09:ed:7c:4d:af:bb:a1:7c:93:f4:d4:47:a4:
                    fd:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:79:FF:01:02:6C:92:5B:63:64:BB:D6:D1:C8:4C:73:AA:60:31:01
            X509v3 Authority Key Identifier:
                keyid:9F:55:24:86:99:26:2B:34:92:BB:7E:F6:05:30:26:82:D5:6B:BE:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/9F55248699262B3492BB7EF605302682D56BBE22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F55248699262B3492BB7EF605302682D56BBE22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/323830343a316236383a323030303a3a2f34342d3434203d3e203631373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b68:2000::/44

    Signature Algorithm: sha256WithRSAEncryption
         73:e1:cf:c6:5f:8f:ea:a8:fa:c3:44:3e:59:25:88:d1:c1:5d:
         b7:9c:25:db:eb:0e:8a:3e:74:cf:02:83:36:64:e0:25:b3:7a:
         47:a6:36:3e:da:69:97:e5:43:22:e0:88:92:1e:58:9f:cf:29:
         46:66:13:7e:31:74:f7:af:16:6b:9e:7e:76:28:06:69:a7:6d:
         d7:71:7d:c1:10:f3:05:ce:c7:9c:10:07:8e:58:5b:4a:1a:a1:
         a9:4d:83:82:49:1c:ce:e9:e3:61:10:d3:95:ef:41:fb:b6:f3:
         0a:6e:86:1f:50:e7:c4:6f:e1:f7:26:81:b8:73:a0:0d:d8:ba:
         99:35:1a:e4:84:a3:28:2c:d0:09:e4:a1:0b:8d:21:2b:4e:b9:
         4e:bc:05:81:a7:fc:42:c5:54:22:76:4e:aa:2d:07:fe:0a:9e:
         8d:4d:77:27:df:b5:55:08:2f:f0:e0:85:94:6d:41:5b:b8:6e:
         c7:30:d3:af:6b:75:9b:ca:3c:57:1d:86:14:b8:f0:b7:5f:79:
         b5:26:d5:06:fc:77:d4:a2:2c:ac:4b:6b:f2:81:8c:fc:34:48:
         7d:61:85:38:e6:5c:77:84:30:dc:52:92:7d:20:be:f0:ca:83:
         be:f2:f7:44:b4:be:83:70:63:c5:90:08:85:6e:bf:47:70:4b:
         c8:03:82:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:46:55 2025 by rpki-client