Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/323830343a316236383a363a3a2f34382d3438203d3e203631373236.roa
File:                     323830343a316236383a363a3a2f34382d3438203d3e203631373236.roa (raw, json)
Hash identifier:          Jc2zrFiEEtr+KlcP1OJtF/iGU00lNf9BGKWggfIKbqg=
Subject key identifier:   34:3B:6B:6F:FA:C9:F5:23:2B:E5:BA:C9:B5:D2:00:DA:2C:D9:88:E3
Certificate issuer:       /CN=9F55248699262B3492BB7EF605302682D56BBE22
Certificate serial:       5CD002C4F373F017C7041F9182D8F28709F37FFC
Authority key identifier: 9F:55:24:86:99:26:2B:34:92:BB:7E:F6:05:30:26:82:D5:6B:BE:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F55248699262B3492BB7EF605302682D56BBE22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/323830343a316236383a363a3a2f34382d3438203d3e203631373236.roa
Signing time:             Wed 26 Jul 2023 14:03:19 +0000
ROA not before:           Wed 26 Jul 2023 13:58:19 +0000
ROA not after:            Wed 24 Jul 2024 14:03:19 +0000
asID:                     61726
IP address blocks:        2804:1b68:6::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:d0:02:c4:f3:73:f0:17:c7:04:1f:91:82:d8:f2:87:09:f3:7f:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F55248699262B3492BB7EF605302682D56BBE22
        Validity
            Not Before: Jul 26 13:58:19 2023 GMT
            Not After : Jul 24 14:03:19 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c9:56:90:e9:b4:4e:69:a1:7f:77:a6:fc:a9:
                    db:0a:8d:b3:fd:06:d1:62:38:b8:5b:cc:55:81:a5:
                    a6:a1:6d:79:55:49:45:24:cb:2c:d9:b4:b4:7a:9e:
                    57:57:f2:ff:62:fd:8a:8e:bb:cc:e2:27:70:d1:4f:
                    e9:24:15:38:47:4a:dc:8d:5e:69:9f:d1:3a:a6:9d:
                    ea:e2:ce:a3:82:45:74:7b:b3:58:3a:69:ca:a1:9f:
                    62:b4:60:97:50:17:80:99:ef:85:41:ce:1b:5f:b4:
                    2f:26:1b:64:8a:93:71:02:73:ec:55:f9:99:76:6b:
                    e2:3f:ca:c1:14:4b:98:3e:e0:18:12:5a:9f:b4:75:
                    1b:6b:de:e8:6a:6a:ee:6b:e1:75:ea:67:d6:3d:b7:
                    53:15:3d:b2:51:92:34:14:06:ed:c5:1e:9d:7c:98:
                    85:dd:cd:53:61:bc:f7:22:4a:5a:65:3e:0d:51:53:
                    33:83:12:65:08:6b:9e:87:66:0f:d2:21:44:06:a8:
                    f2:4e:44:1d:35:f7:ef:f4:3b:99:93:71:63:6c:c6:
                    12:9e:4e:9b:b9:3b:00:8e:41:78:c8:80:41:95:5a:
                    d8:b6:32:a8:68:fb:37:a9:16:31:d1:0a:85:47:a5:
                    39:5d:99:9a:6f:54:9b:cd:e6:c3:1f:1d:eb:75:aa:
                    03:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:3B:6B:6F:FA:C9:F5:23:2B:E5:BA:C9:B5:D2:00:DA:2C:D9:88:E3
            X509v3 Authority Key Identifier:
                keyid:9F:55:24:86:99:26:2B:34:92:BB:7E:F6:05:30:26:82:D5:6B:BE:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/9F55248699262B3492BB7EF605302682D56BBE22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F55248699262B3492BB7EF605302682D56BBE22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/323830343a316236383a363a3a2f34382d3438203d3e203631373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b68:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:3a:fb:32:ce:65:d0:99:b9:0c:4d:c0:20:29:af:86:2b:e0:
         1a:09:4f:9d:bb:86:36:17:67:b0:78:d6:c8:1a:35:9d:21:dd:
         3a:0a:ec:b1:5a:20:9a:18:db:08:2f:8f:8a:53:bf:17:05:35:
         2f:ec:9d:d3:22:5f:81:54:95:92:77:0d:2a:c2:c8:3f:c3:b2:
         7c:3a:ca:38:c7:ef:fc:fa:48:61:5c:c6:09:fd:37:15:cd:25:
         25:30:18:19:f2:2e:70:00:94:30:44:8a:f0:60:19:25:f6:c0:
         30:66:83:1b:d7:e9:6f:19:9b:70:93:e9:27:aa:e6:40:84:c0:
         53:2c:93:3a:cc:43:6f:b1:55:53:35:ee:8b:7b:c5:af:f4:24:
         4c:27:cb:52:41:db:6f:d4:c7:32:bb:ca:da:85:66:94:80:58:
         15:47:db:cc:87:86:2a:38:2b:16:9e:30:9e:ee:e5:d8:33:48:
         ff:cc:5c:e4:49:53:39:c7:42:9f:5f:37:64:da:65:06:e7:e1:
         99:43:8b:0a:3c:c5:af:6b:ef:9c:92:57:54:5c:06:6b:ce:04:
         92:d7:6d:f2:75:3f:f7:9f:70:37:df:e0:d8:f3:30:32:af:0a:
         fa:ec:f0:5a:94:04:84:fa:d3:b8:cc:66:2f:83:06:40:14:eb:
         4a:9b:dc:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:18:26 2025 by rpki-client