Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/323830343a316236383a343030303a3a2f33342d3334203d3e203631373236.roa
File:                     323830343a316236383a343030303a3a2f33342d3334203d3e203631373236.roa (raw, json)
Hash identifier:          zEAWzAfAg2+Go9D7nBfjDMwfeQzxkgapoMrJLS4+yxM=
Subject key identifier:   73:6D:C5:4C:4A:F7:D4:3C:51:B8:0B:96:79:39:AA:8D:3E:7C:D0:F9
Certificate issuer:       /CN=9F55248699262B3492BB7EF605302682D56BBE22
Certificate serial:       1DB0AA2B38F187FBEB8FC2286E0341B014E6D8CB
Authority key identifier: 9F:55:24:86:99:26:2B:34:92:BB:7E:F6:05:30:26:82:D5:6B:BE:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F55248699262B3492BB7EF605302682D56BBE22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/323830343a316236383a343030303a3a2f33342d3334203d3e203631373236.roa
Signing time:             Wed 26 Jul 2023 14:03:31 +0000
ROA not before:           Wed 26 Jul 2023 13:58:31 +0000
ROA not after:            Wed 24 Jul 2024 14:03:31 +0000
asID:                     61726
IP address blocks:        2804:1b68:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:b0:aa:2b:38:f1:87:fb:eb:8f:c2:28:6e:03:41:b0:14:e6:d8:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F55248699262B3492BB7EF605302682D56BBE22
        Validity
            Not Before: Jul 26 13:58:31 2023 GMT
            Not After : Jul 24 14:03:31 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7f:eb:b3:66:a8:4f:4b:27:24:e8:f1:66:d0:
                    7a:a5:69:af:4c:4c:ab:6b:21:63:d9:0f:57:89:b5:
                    d2:d0:39:04:e7:92:df:7f:5e:cf:31:56:25:ca:81:
                    9d:10:6c:5e:53:8c:ab:2b:24:19:f5:e4:e0:ca:c3:
                    ec:d7:60:ee:24:8a:ee:89:57:25:0c:80:87:71:3f:
                    43:95:c1:a4:63:1e:03:38:43:8b:85:4d:88:b0:b8:
                    57:0d:9e:c4:6b:41:e3:10:b6:1c:f1:5d:32:27:7d:
                    6b:9f:57:d7:85:21:82:68:69:01:17:f8:ee:71:34:
                    31:1b:2b:96:11:57:2d:75:50:d8:46:37:8a:71:df:
                    4b:1d:52:c5:34:87:9b:c4:cc:ef:ee:c7:d9:3d:9a:
                    24:13:8c:b6:c5:c3:eb:2e:bd:4e:c7:aa:b2:b1:d3:
                    d1:93:1d:e6:73:ac:5d:36:95:e3:0c:cb:01:98:f1:
                    ea:bf:76:75:08:63:af:08:0b:08:46:76:7e:7b:79:
                    fb:91:6a:62:29:53:a5:20:c9:81:27:00:40:48:40:
                    2f:a7:99:b1:58:d3:be:be:0d:69:4c:2e:d5:c4:9c:
                    da:91:2a:45:43:91:ae:1a:9b:ed:cb:0d:6b:8b:3a:
                    35:64:2c:b5:0d:c2:80:12:bb:10:10:4c:53:77:11:
                    ba:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:6D:C5:4C:4A:F7:D4:3C:51:B8:0B:96:79:39:AA:8D:3E:7C:D0:F9
            X509v3 Authority Key Identifier:
                keyid:9F:55:24:86:99:26:2B:34:92:BB:7E:F6:05:30:26:82:D5:6B:BE:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/9F55248699262B3492BB7EF605302682D56BBE22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F55248699262B3492BB7EF605302682D56BBE22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/323830343a316236383a343030303a3a2f33342d3334203d3e203631373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b68:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         66:11:db:86:fd:35:9e:eb:55:b3:8c:aa:70:d6:5b:0e:b7:da:
         65:ff:87:f6:bb:1f:7f:cc:33:ec:45:66:35:70:75:42:58:ae:
         b3:3a:30:e1:5b:16:24:62:6f:c9:51:25:a1:b4:1e:34:ba:c4:
         1b:26:05:09:79:e9:7c:80:85:2c:3a:4c:9a:9e:53:ae:c1:89:
         79:dc:d3:49:b3:41:42:c4:42:5f:d3:58:9f:b5:ab:8b:96:c1:
         7b:5d:e8:77:94:cf:81:77:8e:bd:1c:61:fe:38:8f:29:74:77:
         52:c0:15:05:51:90:d5:88:b4:74:65:bd:af:ad:9d:3b:6f:62:
         c8:bc:53:f6:65:00:47:25:80:bf:14:8d:32:84:49:cf:51:94:
         7c:c8:84:05:3f:0e:22:85:bc:4f:8b:6a:f8:ec:f3:46:7f:bc:
         38:84:4f:95:6e:bf:d1:0e:15:02:73:3f:83:c8:78:6e:2f:01:
         90:e9:8c:fc:fb:a1:86:0a:1c:ff:8d:86:67:9a:88:bb:63:5e:
         ba:59:33:1d:80:73:9f:e3:d2:36:ee:ee:fa:ee:e3:5d:f4:7d:
         b4:8c:7d:cc:36:23:9a:61:43:7b:0b:ca:4d:7e:32:da:f6:32:
         a5:10:3b:45:2a:cc:b6:cb:cb:d7:aa:53:1c:f9:2c:49:45:b5:
         7a:66:72:9e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 13 14:42:50 2025 by rpki-client