Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/93QEg13XEKDaooV633Fgr1k9dYbz4pxVbLKbMxWbkdJe/0/323830343a383434303a383030303a3a2f33342d3334203d3e20323732323439.roa
File:                     323830343a383434303a383030303a3a2f33342d3334203d3e20323732323439.roa (raw, json)
Hash identifier:          VAxgNDgXMnjgSfqkG1kFbWr+ZIMjnzx94WB9YjunQWk=
Subject key identifier:   AE:BB:EE:0A:90:7E:12:9C:1C:A1:17:D5:4C:4B:3B:3D:F7:DE:64:D2
Certificate issuer:       /CN=70D787DC339ED4E5F48AC2A915C5F1AECE4C47F9
Certificate serial:       DCBD8FDB7C37C1290DAB1A87647C5D744143EA
Authority key identifier: 70:D7:87:DC:33:9E:D4:E5:F4:8A:C2:A9:15:C5:F1:AE:CE:4C:47:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70D787DC339ED4E5F48AC2A915C5F1AECE4C47F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/93QEg13XEKDaooV633Fgr1k9dYbz4pxVbLKbMxWbkdJe/0/323830343a383434303a383030303a3a2f33342d3334203d3e20323732323439.roa
Signing time:             Fri 16 Dec 2022 22:42:58 +0000
ROA not before:           Fri 16 Dec 2022 22:37:58 +0000
ROA not after:            Fri 15 Dec 2023 22:42:58 +0000
asID:                     272249
IP address blocks:        2804:8440:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            dc:bd:8f:db:7c:37:c1:29:0d:ab:1a:87:64:7c:5d:74:41:43:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70D787DC339ED4E5F48AC2A915C5F1AECE4C47F9
        Validity
            Not Before: Dec 16 22:37:58 2022 GMT
            Not After : Dec 15 22:42:58 2023 GMT
        Subject: CN=AEBBEE0A907E129C1CA117D54C4B3B3DF7DE64D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c3:ed:45:5c:04:6e:ea:44:27:45:1f:46:a4:
                    e1:76:c0:43:77:9d:46:0e:86:c6:3e:cb:e1:b9:71:
                    9b:0d:52:98:07:5a:0e:16:c9:2a:0e:30:cf:49:cb:
                    fe:cb:67:c9:42:68:f5:62:54:d1:32:5a:82:97:6c:
                    cf:75:34:31:3e:92:0e:cf:95:d6:23:04:24:bd:9e:
                    36:7d:fd:6d:c8:f0:5e:1b:8e:c8:3b:c9:e1:91:9b:
                    72:95:82:52:9c:b5:6d:23:03:97:47:05:fd:bd:a8:
                    1d:ad:e5:2f:df:f8:fe:3d:5a:f8:aa:16:7c:b6:a5:
                    cb:3f:0c:64:2d:fb:e4:a8:11:cf:93:c3:29:25:43:
                    41:f7:d6:63:3b:41:24:56:63:9f:8f:69:8d:90:42:
                    43:42:79:86:d1:ac:83:ad:d5:52:fc:b0:71:d9:aa:
                    b2:49:88:fa:3c:56:9d:7b:23:35:60:0a:d9:56:9b:
                    12:42:a4:1b:ef:1c:87:ee:31:98:68:af:a7:31:c5:
                    95:e6:30:36:73:d0:da:10:d8:24:a2:24:7a:9d:9f:
                    ba:35:52:3f:2e:e1:a5:73:01:7a:ee:04:8c:91:ad:
                    e9:9b:65:f8:14:77:8b:3c:6a:4d:8e:eb:b4:a7:78:
                    f9:4d:70:14:cd:64:15:7d:13:78:f8:26:a0:2d:aa:
                    d4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:BB:EE:0A:90:7E:12:9C:1C:A1:17:D5:4C:4B:3B:3D:F7:DE:64:D2
            X509v3 Authority Key Identifier:
                keyid:70:D7:87:DC:33:9E:D4:E5:F4:8A:C2:A9:15:C5:F1:AE:CE:4C:47:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/93QEg13XEKDaooV633Fgr1k9dYbz4pxVbLKbMxWbkdJe/0/70D787DC339ED4E5F48AC2A915C5F1AECE4C47F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70D787DC339ED4E5F48AC2A915C5F1AECE4C47F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/93QEg13XEKDaooV633Fgr1k9dYbz4pxVbLKbMxWbkdJe/0/323830343a383434303a383030303a3a2f33342d3334203d3e20323732323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8440:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         95:86:4c:a5:7f:9e:65:53:5b:fb:2b:7f:6f:46:53:9c:18:81:
         5c:79:5c:16:b3:c1:02:0c:d0:01:3c:60:ea:6f:d3:06:37:09:
         ec:3d:cc:b6:d2:32:16:07:06:b0:98:f4:70:67:e8:21:d7:d9:
         f8:0c:e8:bd:60:46:a9:67:03:1d:92:eb:9b:a7:a1:f3:66:4e:
         d3:2c:b7:0b:98:97:b6:f7:57:25:69:97:76:5e:a0:32:99:03:
         af:f7:e5:c3:c7:4b:b3:08:b0:b4:e2:78:df:4f:a2:76:1d:61:
         01:ad:7f:8a:f4:83:c3:7f:f4:65:31:07:01:d8:b3:8e:bd:18:
         3d:bc:fb:07:27:ee:4f:c9:41:de:31:b8:6d:19:e5:eb:b4:ce:
         54:17:7d:a4:f3:80:77:7e:af:78:0a:e2:ab:2b:76:ad:0b:44:
         9e:67:7a:98:61:9d:46:3d:13:95:0d:11:44:b9:9e:2a:95:27:
         d5:a2:a4:16:35:80:1d:6d:97:76:42:47:4b:36:a3:25:86:e3:
         c8:68:e8:23:65:c5:12:b3:f1:6c:76:d2:fc:1e:7a:9b:42:ca:
         6e:a0:fe:b8:46:93:e8:12:86:03:f5:72:aa:86:11:91:ad:a7:
         db:24:17:a0:dc:70:ea:23:bd:6a:97:45:eb:c7:d7:2e:a2:de:
         29:29:cd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 04:50:21 2025 by rpki-client