Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/0/323830343a366137383a3a2f33322d3332203d3e20323730333338.roa
File:                     323830343a366137383a3a2f33322d3332203d3e20323730333338.roa (raw, json)
Hash identifier:          HKwVZMP8Z3mX9Mathauw30rJW1WdHaPiIGxsSdRhY8I=
Subject key identifier:   99:0C:D2:00:C4:86:18:3F:56:3C:BD:9D:81:B1:C9:7F:13:EB:E5:56
Certificate issuer:       /CN=966322EBF60EAC72722BAA489C53B18FD38FE811
Certificate serial:       1EF080D71EEABD80511E98186CCB22B20CF8FED7
Authority key identifier: 96:63:22:EB:F6:0E:AC:72:72:2B:AA:48:9C:53:B1:8F:D3:8F:E8:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/966322EBF60EAC72722BAA489C53B18FD38FE811.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/0/323830343a366137383a3a2f33322d3332203d3e20323730333338.roa
Signing time:             Mon 18 Dec 2023 15:53:56 +0000
ROA not before:           Mon 18 Dec 2023 15:48:56 +0000
ROA not after:            Mon 16 Dec 2024 15:53:56 +0000
asID:                     270338
IP address blocks:        2804:6a78::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:f0:80:d7:1e:ea:bd:80:51:1e:98:18:6c:cb:22:b2:0c:f8:fe:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=966322EBF60EAC72722BAA489C53B18FD38FE811
        Validity
            Not Before: Dec 18 15:48:56 2023 GMT
            Not After : Dec 16 15:53:56 2024 GMT
        Subject: CN=990CD200C486183F563CBD9D81B1C97F13EBE556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f8:da:8c:b3:34:20:49:31:d5:0e:c3:35:06:
                    05:3e:dc:f1:7a:fa:46:ca:c7:b0:39:fa:91:af:55:
                    d3:80:5b:62:7b:e4:75:30:c9:b4:68:f8:1c:60:4a:
                    dc:87:71:d7:d8:12:e2:6c:e3:6d:14:24:14:b5:59:
                    9a:09:dd:16:eb:21:b6:87:58:29:f8:72:6b:56:4b:
                    8c:ac:48:44:0e:5c:68:1e:da:ea:9e:58:29:75:9d:
                    68:c7:a5:40:1c:4c:65:68:e9:ff:1a:1e:36:ed:47:
                    3e:ad:73:c5:5e:4c:4b:15:ed:2f:7e:02:9d:7f:0b:
                    fb:ea:7f:bb:55:64:d2:18:94:92:fa:20:9e:e6:b2:
                    6c:75:5e:c6:2b:df:37:81:74:97:a6:59:77:15:aa:
                    f0:df:f0:dd:7c:66:4b:30:1e:30:b8:00:67:21:38:
                    e8:95:98:54:73:1c:a4:85:d9:7d:78:1f:68:58:03:
                    5a:50:a4:fd:c9:36:f6:24:76:10:ba:89:5c:47:6c:
                    3e:26:6c:8f:8a:45:bc:c5:95:d4:94:18:db:97:75:
                    56:9a:50:de:22:ae:28:d4:c6:63:f5:88:55:d0:73:
                    9b:66:10:12:18:10:2a:66:23:f8:bd:97:52:d1:7b:
                    17:a9:01:69:4d:52:dd:c9:9f:80:a5:af:9f:6c:8a:
                    24:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:0C:D2:00:C4:86:18:3F:56:3C:BD:9D:81:B1:C9:7F:13:EB:E5:56
            X509v3 Authority Key Identifier:
                keyid:96:63:22:EB:F6:0E:AC:72:72:2B:AA:48:9C:53:B1:8F:D3:8F:E8:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/0/966322EBF60EAC72722BAA489C53B18FD38FE811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/966322EBF60EAC72722BAA489C53B18FD38FE811.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/0/323830343a366137383a3a2f33322d3332203d3e20323730333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a78::/32

    Signature Algorithm: sha256WithRSAEncryption
         f6:74:e2:ca:67:77:a8:07:92:58:08:2f:b9:10:a0:c5:45:b8:
         0f:9b:a4:18:59:28:39:5f:6b:aa:a9:e8:dc:ce:1b:a3:40:b5:
         f0:49:7c:10:72:a4:04:3c:ad:09:4d:ed:5c:ef:13:3a:5f:49:
         85:1e:73:29:3e:f0:8b:33:a5:9a:67:75:c9:01:ce:af:03:db:
         f0:d9:a0:79:b4:d6:43:38:e6:bb:6e:45:cf:74:b0:1d:f7:62:
         25:59:b3:62:1c:cf:d1:2f:6c:be:eb:22:5a:93:66:34:2b:43:
         f6:03:e6:4b:58:59:9a:4d:ba:24:96:83:dd:7e:2c:e1:17:bd:
         f5:2a:62:6d:b4:ae:0e:54:34:6f:58:53:eb:c5:78:c2:3f:7c:
         bb:ff:fc:55:b2:a0:fc:ba:be:ee:b1:d8:11:5f:9b:64:02:d3:
         33:82:b4:14:c7:4c:9f:ec:af:8f:79:ee:ae:c9:05:6d:93:3e:
         c5:c0:cf:65:84:b5:10:c2:8a:61:6f:d9:64:5a:b2:92:0e:d7:
         8f:96:47:ef:ee:cc:c9:6b:77:54:0e:ef:b4:24:50:3c:d4:b2:
         d9:4b:af:41:34:58:53:20:f6:33:96:bd:c2:0d:99:fa:4c:87:
         e3:e5:fa:48:f0:ac:5e:65:94:c5:5e:a1:53:d6:29:29:dc:7a:
         09:61:a0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:16 2025 by rpki-client