Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/323830343a316236383a3a2f33342d3334203d3e203631373236.roa
File:                     323830343a316236383a3a2f33342d3334203d3e203631373236.roa (raw, json)
Hash identifier:          cCqKTgNmz+KNpPtlbfqzYf9Avoixo91ezuteiKYskY8=
Subject key identifier:   0A:9A:6E:DB:06:DD:1A:E5:D4:AD:FE:A8:7F:7D:F7:10:BF:88:BD:14
Certificate issuer:       /CN=9F55248699262B3492BB7EF605302682D56BBE22
Certificate serial:       659E86CD774C2407F955F67DE6D4C00FAF4D9336
Authority key identifier: 9F:55:24:86:99:26:2B:34:92:BB:7E:F6:05:30:26:82:D5:6B:BE:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F55248699262B3492BB7EF605302682D56BBE22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/323830343a316236383a3a2f33342d3334203d3e203631373236.roa
Signing time:             Wed 26 Jul 2023 14:03:16 +0000
ROA not before:           Wed 26 Jul 2023 13:58:16 +0000
ROA not after:            Wed 24 Jul 2024 14:03:16 +0000
asID:                     61726
IP address blocks:        2804:1b68::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:9e:86:cd:77:4c:24:07:f9:55:f6:7d:e6:d4:c0:0f:af:4d:93:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F55248699262B3492BB7EF605302682D56BBE22
        Validity
            Not Before: Jul 26 13:58:16 2023 GMT
            Not After : Jul 24 14:03:16 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6b:d1:dd:ad:d5:50:5d:a4:29:54:5c:fd:73:
                    2f:3a:ed:31:e0:42:66:8c:a5:a0:13:52:29:8c:fa:
                    54:61:dd:54:82:a9:ee:e9:b3:c2:10:6c:03:d0:42:
                    60:52:9d:e1:a2:12:fa:7a:af:83:ad:3c:a3:4f:ef:
                    26:4f:d5:2d:50:77:a2:f2:df:d4:cc:ef:df:1b:23:
                    fb:0b:99:0c:28:91:68:34:5a:0b:32:70:d2:d5:1a:
                    2b:26:69:cb:79:63:fd:02:40:cf:1b:3b:20:fa:c6:
                    aa:9e:d1:17:fc:df:34:eb:1e:14:db:d1:86:e0:75:
                    1b:a3:bd:91:ef:01:b1:68:59:74:bf:e5:27:54:69:
                    3e:b9:4f:86:f8:b1:40:5c:1e:98:9b:95:a4:e2:3c:
                    15:20:06:1c:b2:53:10:fb:d7:da:15:2f:86:38:d2:
                    48:b3:f5:73:c0:d7:39:dc:95:28:16:70:5a:41:0c:
                    2d:e9:26:13:50:c0:c9:87:aa:46:7a:50:84:2b:5b:
                    fe:b6:09:9f:07:1d:75:aa:ed:5f:b0:32:03:83:a6:
                    7c:cb:8a:95:f0:69:7c:dc:11:65:64:18:6b:4f:b3:
                    14:a0:3b:95:84:35:78:7c:be:ba:e6:70:99:5d:ec:
                    ec:1a:9b:cb:ab:d1:f9:1f:bf:3d:29:4d:ce:bb:98:
                    02:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:9A:6E:DB:06:DD:1A:E5:D4:AD:FE:A8:7F:7D:F7:10:BF:88:BD:14
            X509v3 Authority Key Identifier:
                keyid:9F:55:24:86:99:26:2B:34:92:BB:7E:F6:05:30:26:82:D5:6B:BE:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/9F55248699262B3492BB7EF605302682D56BBE22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F55248699262B3492BB7EF605302682D56BBE22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/323830343a316236383a3a2f33342d3334203d3e203631373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b68::/34

    Signature Algorithm: sha256WithRSAEncryption
         9b:f7:2a:58:f8:8e:aa:d4:a2:31:63:4a:57:22:19:9a:8e:86:
         98:d6:e2:b9:c6:9a:01:d1:fb:c1:3a:4d:5d:90:82:ff:5c:b6:
         7a:03:95:89:f8:24:65:98:cb:95:6d:19:01:e9:48:94:0f:9d:
         26:da:c3:65:96:4f:f2:0f:85:3c:1b:a8:05:55:f8:35:cc:11:
         4a:dc:55:f9:5a:a4:5c:d0:fd:66:aa:09:aa:8e:de:60:30:f1:
         2a:41:d3:bd:4e:fa:8c:66:d8:83:d0:a3:a8:d4:ed:8f:f1:90:
         ae:e9:21:a8:bd:34:d0:de:61:f8:95:19:73:97:73:08:9e:c2:
         96:81:35:d6:72:a1:69:eb:dd:1d:9e:93:44:78:d9:07:f1:5e:
         93:91:81:24:03:c4:ca:14:6f:ec:9e:b7:0a:48:9b:58:e2:7f:
         d8:ef:ff:bd:34:dc:43:e1:9f:b2:3f:d5:8d:b5:e9:a9:70:37:
         39:3f:b5:a7:e5:e4:5c:a8:1b:bb:da:4c:0e:df:8a:c3:42:6a:
         2f:b1:43:24:a9:8b:1c:bf:6d:0c:48:13:80:56:c1:60:3d:38:
         5d:3b:d1:17:4f:29:56:3c:cd:d6:94:ca:18:69:5f:ed:b0:2c:
         d0:b1:70:42:e0:a2:38:9a:ee:88:81:e3:8f:23:0a:8c:00:d6:
         b7:80:53:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:28:31 2025 by rpki-client