Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/323830343a363432343a3a2f33322d3334203d3e20323639343039.roa
File:                     323830343a363432343a3a2f33322d3334203d3e20323639343039.roa (raw, json)
Hash identifier:          XQEiThYouKVSVzJkSLCaileEejoK0+OKgZmN0+ZluIo=
Subject key identifier:   11:21:2B:FA:53:92:DB:28:98:68:71:58:05:37:89:78:67:9C:A2:03
Certificate issuer:       /CN=0F40F991AFD86683432FB917804FDCB3FE6CE126
Certificate serial:       55F2C3C60648F447840F51D31F63367C86483B91
Authority key identifier: 0F:40:F9:91:AF:D8:66:83:43:2F:B9:17:80:4F:DC:B3:FE:6C:E1:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F40F991AFD86683432FB917804FDCB3FE6CE126.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/323830343a363432343a3a2f33322d3334203d3e20323639343039.roa
Signing time:             Sat 20 May 2023 18:17:11 +0000
ROA not before:           Sat 20 May 2023 18:12:11 +0000
ROA not after:            Sat 18 May 2024 18:17:11 +0000
asID:                     269409
IP address blocks:        2804:6424::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:f2:c3:c6:06:48:f4:47:84:0f:51:d3:1f:63:36:7c:86:48:3b:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F40F991AFD86683432FB917804FDCB3FE6CE126
        Validity
            Not Before: May 20 18:12:11 2023 GMT
            Not After : May 18 18:17:11 2024 GMT
        Subject: CN=11212BFA5392DB289868715805378978679CA203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2a:50:f2:fc:91:fe:ce:0e:2c:46:2b:7b:25:
                    a5:3f:0d:69:c0:84:69:10:33:18:88:b8:7b:03:89:
                    1a:0d:79:f4:e1:e4:1f:02:42:cb:db:07:06:a6:d2:
                    ef:ac:fb:dd:41:15:35:ef:27:9f:f7:e8:8a:ac:78:
                    01:33:0b:e5:40:fd:1b:f4:86:a1:01:47:b4:be:d8:
                    30:33:78:02:18:fd:16:9d:09:99:02:46:ab:e3:c9:
                    e1:09:53:d6:35:38:8d:ea:57:ce:25:fd:7c:2d:ab:
                    30:86:7a:fe:8a:d5:fa:98:ec:c5:0f:80:0a:2e:70:
                    a5:7c:a0:54:5a:1c:2f:1c:bd:50:3d:8c:97:b0:ee:
                    97:fa:e7:6a:32:89:e3:23:3d:7a:08:92:1b:2e:20:
                    f5:af:17:51:6f:12:5f:0d:0d:3e:03:27:7e:1a:7a:
                    e4:1f:20:9f:f5:5b:04:65:4a:ff:4f:f4:c8:c9:e1:
                    c0:78:d2:e2:18:4e:14:0d:ea:d2:37:ea:b6:ec:93:
                    34:9b:18:0d:80:ae:84:05:1e:f3:a1:ed:31:2d:f0:
                    c7:0d:f6:b0:8e:0a:63:32:77:41:7c:2a:97:60:27:
                    5d:c7:54:77:9f:ca:55:d2:60:d8:79:40:3e:6e:e4:
                    4a:05:1e:18:2c:9d:72:58:e7:14:de:54:eb:a7:f9:
                    25:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:21:2B:FA:53:92:DB:28:98:68:71:58:05:37:89:78:67:9C:A2:03
            X509v3 Authority Key Identifier:
                keyid:0F:40:F9:91:AF:D8:66:83:43:2F:B9:17:80:4F:DC:B3:FE:6C:E1:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/0F40F991AFD86683432FB917804FDCB3FE6CE126.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F40F991AFD86683432FB917804FDCB3FE6CE126.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/323830343a363432343a3a2f33322d3334203d3e20323639343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6424::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:b1:d0:57:70:29:9c:9e:c4:c1:20:86:bc:85:91:38:b6:1b:
         4d:07:2d:d7:a6:7f:d7:aa:4b:7a:4c:f8:7b:ea:07:b5:05:6a:
         87:c4:8b:66:7d:ec:38:84:fc:89:5b:e2:6e:85:ad:70:98:3a:
         a1:90:7b:1a:d2:4b:1a:88:7e:38:d9:7c:07:3b:cc:36:81:c5:
         e9:9d:90:7a:8c:9b:97:97:55:4e:6c:b5:cc:aa:0d:23:f1:6c:
         5f:68:15:6f:f3:77:05:d7:9e:f6:74:20:f7:58:7b:20:bf:39:
         78:2b:1a:03:03:91:fe:4f:c6:7e:9d:1c:6b:b0:3d:83:ee:a5:
         c1:1b:c5:39:92:4b:e7:7c:d9:90:0c:46:a7:d5:95:94:e7:42:
         6e:9f:28:6b:52:3f:b2:23:17:00:1d:2b:c3:9e:9b:3a:0f:ad:
         0c:81:31:05:86:1c:00:50:36:80:df:8a:0d:76:05:d9:00:8d:
         da:8e:8d:dd:06:ab:1c:fe:b0:88:11:1d:23:ee:03:fe:7a:aa:
         f3:52:83:7a:3d:ed:11:57:1c:54:18:40:3f:c2:09:96:cb:b2:
         17:50:cf:b6:6f:4b:59:be:f3:09:9b:2e:4c:8d:11:9e:2e:a4:
         b2:78:61:95:3b:e7:b3:e0:d8:7a:47:81:19:da:c7:7c:17:e4:
         5b:7d:2f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:18:36 2025 by rpki-client