Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/323830343a316236383a383030343a3a2f34382d3438203d3e203631373236.roa
File:                     323830343a316236383a383030343a3a2f34382d3438203d3e203631373236.roa (raw, json)
Hash identifier:          MKyI2t4/+ALZbqODgonokMAfhNSaRXohjUdfShUSWCM=
Subject key identifier:   14:F2:8F:21:04:95:84:03:FA:29:0A:FD:AD:13:A4:60:E3:A2:3F:15
Certificate issuer:       /CN=9F55248699262B3492BB7EF605302682D56BBE22
Certificate serial:       69BB851DD34B6A6F209F27A7DB375F4AB919BA8C
Authority key identifier: 9F:55:24:86:99:26:2B:34:92:BB:7E:F6:05:30:26:82:D5:6B:BE:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F55248699262B3492BB7EF605302682D56BBE22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/323830343a316236383a383030343a3a2f34382d3438203d3e203631373236.roa
Signing time:             Wed 26 Jul 2023 14:03:37 +0000
ROA not before:           Wed 26 Jul 2023 13:58:37 +0000
ROA not after:            Wed 24 Jul 2024 14:03:37 +0000
asID:                     61726
IP address blocks:        2804:1b68:8004::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:bb:85:1d:d3:4b:6a:6f:20:9f:27:a7:db:37:5f:4a:b9:19:ba:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F55248699262B3492BB7EF605302682D56BBE22
        Validity
            Not Before: Jul 26 13:58:37 2023 GMT
            Not After : Jul 24 14:03:37 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d5:3d:f7:a9:41:06:f7:41:45:32:18:c3:67:
                    c0:f0:88:2a:78:a1:18:48:61:dd:25:d9:c7:bd:f6:
                    73:69:02:27:d3:31:20:ce:d6:a5:49:b5:15:4c:e6:
                    7d:bd:52:fa:07:5e:39:10:08:e1:32:b2:2f:88:f4:
                    de:6e:bf:26:37:15:04:a0:fa:ce:c5:76:37:9b:ca:
                    8e:29:17:a7:74:f5:77:03:99:21:12:c0:42:76:a2:
                    64:a6:b7:05:3a:bd:d3:92:dd:19:50:e2:0c:bd:ab:
                    ab:9e:ea:38:e1:6c:1e:d8:e2:ab:f3:16:e9:bd:97:
                    78:38:96:2b:35:21:00:8d:47:dd:d0:6c:7b:0a:a2:
                    67:32:a3:7b:62:e3:22:dd:85:08:76:80:b7:9d:d2:
                    5b:63:32:da:1d:fd:f3:6c:22:13:91:e0:46:c6:c5:
                    c4:8d:cc:99:ae:a8:cf:c7:34:78:d4:91:ff:13:9d:
                    a1:f0:c6:9c:19:65:96:7e:9a:48:f2:6d:53:27:94:
                    b0:8e:d4:62:f9:a9:fe:47:7a:20:4b:c4:b3:df:a2:
                    1f:d1:8d:f0:87:1e:8d:0c:62:f5:a3:3e:89:16:c7:
                    eb:13:6f:c0:50:09:b3:07:bf:d3:ef:da:9c:a2:8c:
                    e8:ee:ad:09:a7:b5:09:8a:4e:8a:bb:c2:4a:1c:ff:
                    56:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F2:8F:21:04:95:84:03:FA:29:0A:FD:AD:13:A4:60:E3:A2:3F:15
            X509v3 Authority Key Identifier:
                keyid:9F:55:24:86:99:26:2B:34:92:BB:7E:F6:05:30:26:82:D5:6B:BE:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/9F55248699262B3492BB7EF605302682D56BBE22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F55248699262B3492BB7EF605302682D56BBE22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/323830343a316236383a383030343a3a2f34382d3438203d3e203631373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b68:8004::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:b7:22:ff:6b:1a:46:f1:4f:1b:04:1b:88:ba:09:30:be:f3:
         c9:b8:2b:d4:f3:5d:4f:25:f2:48:39:b9:4a:bc:56:ea:97:18:
         8d:a5:b0:c3:ba:ff:7f:72:d9:37:e0:08:f1:52:12:c2:79:9e:
         73:51:ac:b3:bc:41:e8:85:e2:fc:66:89:e2:86:cf:02:53:ac:
         ca:74:45:2a:73:51:7c:b6:71:19:12:4b:d5:ee:73:7e:9e:29:
         e9:db:2c:28:15:cc:4a:82:5b:35:df:fc:7e:70:30:f0:f2:ef:
         1d:1d:d2:e8:b0:7a:7e:b9:b7:28:73:45:b3:2e:f1:89:10:58:
         aa:0a:33:25:d0:de:39:9a:04:54:f8:ee:54:d8:f7:8a:af:df:
         ba:35:2a:9d:7d:83:13:c9:3c:40:85:5a:81:55:de:0c:e3:dd:
         47:4f:89:83:64:a5:e8:12:61:c7:d5:78:f9:32:0f:3d:57:31:
         8f:40:f3:24:06:da:57:49:ec:27:ed:88:d1:ee:3e:77:fc:b9:
         82:4d:40:c8:02:74:db:f9:39:51:61:09:3d:fc:bb:02:9f:ea:
         b2:b5:19:5b:15:7f:6c:bc:ec:80:a9:52:8e:ff:75:49:68:dc:
         9e:be:16:da:15:45:2f:48:b7:a0:f9:69:ed:a8:e8:bd:b1:40:
         70:ea:70:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:52:15 2025 by rpki-client