Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/93QEg13XEKDaooV633Fgr1k9dYbz4pxVbLKbMxWbkdJe/0/323830343a383434303a383030303a3a2f33332d3333203d3e20323732323439.roa
File:                     323830343a383434303a383030303a3a2f33332d3333203d3e20323732323439.roa (raw, json)
Hash identifier:          gTAmLRPpJ4tkc3JEQqsu2a4F22thLufEbswtwCi7fJM=
Subject key identifier:   BE:D4:A0:FA:3E:82:58:A9:CF:AD:3C:EC:86:50:BE:37:B0:7A:27:A5
Certificate issuer:       /CN=70D787DC339ED4E5F48AC2A915C5F1AECE4C47F9
Certificate serial:       29A24D3D8AAAD244BABF097D85CE2EA6CF5C3E3C
Authority key identifier: 70:D7:87:DC:33:9E:D4:E5:F4:8A:C2:A9:15:C5:F1:AE:CE:4C:47:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70D787DC339ED4E5F48AC2A915C5F1AECE4C47F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/93QEg13XEKDaooV633Fgr1k9dYbz4pxVbLKbMxWbkdJe/0/323830343a383434303a383030303a3a2f33332d3333203d3e20323732323439.roa
Signing time:             Fri 16 Dec 2022 22:42:54 +0000
ROA not before:           Fri 16 Dec 2022 22:37:54 +0000
ROA not after:            Fri 15 Dec 2023 22:42:54 +0000
asID:                     272249
IP address blocks:        2804:8440:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:a2:4d:3d:8a:aa:d2:44:ba:bf:09:7d:85:ce:2e:a6:cf:5c:3e:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70D787DC339ED4E5F48AC2A915C5F1AECE4C47F9
        Validity
            Not Before: Dec 16 22:37:54 2022 GMT
            Not After : Dec 15 22:42:54 2023 GMT
        Subject: CN=BED4A0FA3E8258A9CFAD3CEC8650BE37B07A27A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f1:c2:13:f6:46:fa:8c:b5:9f:63:b8:56:7a:
                    9a:7c:b1:d2:9e:d6:e8:a6:a4:5a:56:d6:5c:cb:9b:
                    77:0d:fc:3a:39:26:1b:57:61:c8:56:20:96:95:40:
                    83:4e:86:68:b7:b3:0b:a8:e9:27:14:90:55:c4:16:
                    bc:e1:32:25:5d:74:95:c8:8e:61:3f:aa:a0:34:1c:
                    fc:c9:0e:59:62:83:9b:cf:e2:41:04:dc:98:c9:04:
                    d0:53:dd:e3:37:79:5d:36:ee:b4:a6:99:d3:87:ba:
                    03:0d:0c:a3:a6:33:44:6c:f6:c6:6b:a0:ba:87:e4:
                    81:1f:78:1f:e2:18:ee:bc:2a:ab:54:82:dd:a3:34:
                    c5:f1:d7:70:8e:1a:45:a3:85:d9:48:91:73:43:60:
                    bb:c8:bf:7d:84:84:dd:67:cb:f1:7e:c8:46:2b:69:
                    05:cf:5d:83:6c:54:6e:83:5a:e9:ae:1c:dc:76:c8:
                    c3:32:a1:42:79:88:cf:11:23:a2:cd:7c:b3:91:82:
                    ef:b7:ec:fd:52:10:ce:b9:05:cb:ff:6e:5f:80:08:
                    fb:57:58:3b:3a:8b:90:4a:b2:01:c8:72:cd:e0:d4:
                    b1:8b:7f:04:54:43:d2:28:9c:a7:f5:3e:ce:ad:16:
                    38:c1:7c:86:66:2c:72:45:2e:c7:c3:a7:f0:3f:d6:
                    c4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D4:A0:FA:3E:82:58:A9:CF:AD:3C:EC:86:50:BE:37:B0:7A:27:A5
            X509v3 Authority Key Identifier:
                keyid:70:D7:87:DC:33:9E:D4:E5:F4:8A:C2:A9:15:C5:F1:AE:CE:4C:47:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/93QEg13XEKDaooV633Fgr1k9dYbz4pxVbLKbMxWbkdJe/0/70D787DC339ED4E5F48AC2A915C5F1AECE4C47F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70D787DC339ED4E5F48AC2A915C5F1AECE4C47F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/93QEg13XEKDaooV633Fgr1k9dYbz4pxVbLKbMxWbkdJe/0/323830343a383434303a383030303a3a2f33332d3333203d3e20323732323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8440:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         06:c8:68:68:21:ec:99:a1:78:c9:e2:fc:9a:9d:4e:fd:5b:1d:
         87:b8:0b:c5:f2:62:77:db:bc:8c:30:da:0a:ef:5a:f2:65:2f:
         84:b2:93:5e:74:99:1f:23:2a:1d:f6:9e:e1:b4:b3:5d:57:eb:
         84:74:e8:ae:1c:68:7c:0a:60:6c:d2:31:35:4b:27:51:6e:6e:
         cd:cb:36:7b:2e:16:db:c6:34:28:c6:bc:c0:b8:c2:77:79:de:
         ad:17:59:58:c2:ce:56:7b:89:e8:bc:7f:52:63:79:d0:42:26:
         2b:d6:68:b2:34:03:09:37:ab:71:aa:9a:e8:e6:7f:0f:ab:37:
         73:21:47:c7:bb:13:da:63:f8:6b:31:14:42:1c:f1:b4:d5:fd:
         58:bb:39:23:9d:a3:ca:5f:3b:b7:8a:a0:d9:34:1c:d6:65:d6:
         1c:5a:3f:96:af:e1:5d:cf:1e:e7:36:2d:a5:ee:6a:71:f7:eb:
         99:9a:03:d7:76:70:10:ef:a5:a4:18:03:0f:a8:9f:09:2c:57:
         e3:58:40:a2:3c:90:60:e9:4b:cd:0c:c3:c0:99:07:fa:79:0a:
         2c:89:ea:9f:43:48:1d:7a:4a:55:78:75:f9:2d:2a:c0:f6:9c:
         29:cd:b1:1a:16:55:6e:ce:75:6b:c5:17:56:87:71:ac:c1:5c:
         fe:53:ef:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:45 2025 by rpki-client