Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9DwaJ31p6VNGJUzE3RUixumqG71kU7EvWcv5CVTcsgv8/0/323830343a313363343a3a2f33322d3438203d3e20323632383235.roa
File:                     323830343a313363343a3a2f33322d3438203d3e20323632383235.roa (raw, json)
Hash identifier:          0OOA5jKVBTeu0Ajqy8+WEhJIMLa8s0nxk3hg6aRAMjQ=
Subject key identifier:   40:69:59:6D:CE:D8:BC:85:28:C4:35:C1:89:9D:E4:12:0A:00:29:91
Certificate issuer:       /CN=1E7BDDC05749084172E1A6131787240A66BB5D43
Certificate serial:       116179564407CA37AB07F6DCAF4C8166391B2052
Authority key identifier: 1E:7B:DD:C0:57:49:08:41:72:E1:A6:13:17:87:24:0A:66:BB:5D:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E7BDDC05749084172E1A6131787240A66BB5D43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9DwaJ31p6VNGJUzE3RUixumqG71kU7EvWcv5CVTcsgv8/0/323830343a313363343a3a2f33322d3438203d3e20323632383235.roa
Signing time:             Tue 28 Nov 2023 20:04:47 +0000
ROA not before:           Tue 28 Nov 2023 19:59:47 +0000
ROA not after:            Tue 26 Nov 2024 20:04:47 +0000
asID:                     262825
IP address blocks:        2804:13c4::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:61:79:56:44:07:ca:37:ab:07:f6:dc:af:4c:81:66:39:1b:20:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E7BDDC05749084172E1A6131787240A66BB5D43
        Validity
            Not Before: Nov 28 19:59:47 2023 GMT
            Not After : Nov 26 20:04:47 2024 GMT
        Subject: CN=4069596DCED8BC8528C435C1899DE4120A002991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6c:db:f9:40:37:c2:d6:89:e7:4b:a6:0c:71:
                    22:4a:77:cc:0b:5e:73:78:07:3d:76:e1:97:f3:a5:
                    41:23:16:83:6c:48:34:5c:14:2b:cf:5e:5f:b3:9e:
                    b9:b1:b1:02:28:6d:e6:b4:3e:46:ab:0c:0b:b0:f7:
                    10:d4:ed:0d:d3:d7:80:33:5e:f5:7f:a0:8b:ca:e3:
                    6f:a4:df:6d:a4:54:46:02:cc:f4:a6:6b:53:ba:5c:
                    e8:9d:b0:a6:9e:e6:22:a4:80:91:49:bc:04:b3:fd:
                    fb:a1:2b:fa:57:3e:8c:5e:69:dd:7c:9d:d9:77:08:
                    73:b4:87:24:f6:4f:d7:c7:60:94:ff:60:f7:44:43:
                    50:cf:f5:ed:c2:46:38:af:cb:ad:91:d5:5b:79:50:
                    6a:06:99:04:03:d5:1d:3b:a7:ed:87:30:9a:80:43:
                    96:5b:06:85:95:d4:0c:6c:a3:d1:fb:16:ce:99:0d:
                    b9:30:db:73:99:55:86:ca:e1:60:ec:05:d9:f5:ba:
                    fa:06:0b:d8:9c:ae:1f:3d:bb:d0:47:66:1f:9c:90:
                    1a:2b:5e:23:3b:bc:9f:c7:db:a8:73:49:a0:6f:94:
                    d9:37:eb:2e:a1:4d:fc:0a:80:69:f8:28:c3:05:d6:
                    cb:73:8c:4e:dd:e2:d8:e3:0d:5b:80:4b:29:eb:8f:
                    6c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:69:59:6D:CE:D8:BC:85:28:C4:35:C1:89:9D:E4:12:0A:00:29:91
            X509v3 Authority Key Identifier:
                keyid:1E:7B:DD:C0:57:49:08:41:72:E1:A6:13:17:87:24:0A:66:BB:5D:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9DwaJ31p6VNGJUzE3RUixumqG71kU7EvWcv5CVTcsgv8/0/1E7BDDC05749084172E1A6131787240A66BB5D43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E7BDDC05749084172E1A6131787240A66BB5D43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9DwaJ31p6VNGJUzE3RUixumqG71kU7EvWcv5CVTcsgv8/0/323830343a313363343a3a2f33322d3438203d3e20323632383235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:13c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:93:49:5e:33:a8:36:ab:c3:54:49:b0:80:53:b7:a3:2b:30:
         10:ea:d7:ba:91:cd:6d:cd:01:1d:59:15:0e:31:45:88:a5:3a:
         a6:38:4c:cc:0a:46:ba:25:a2:37:2c:2e:3b:e1:70:8b:1a:56:
         9e:dd:98:1e:bc:92:32:01:e6:e4:2a:43:c6:2d:f6:73:05:f6:
         a3:df:12:32:42:62:5f:c0:79:f6:55:d0:a8:d1:f5:13:45:bb:
         e3:9b:ea:98:95:0b:16:16:17:8c:82:61:2c:3c:5b:0a:3c:b6:
         04:52:9a:63:eb:21:4e:4c:38:c3:7b:26:20:7a:2a:a6:82:4e:
         35:b1:b6:b8:c6:35:7e:00:05:30:ed:ee:ee:63:5f:9a:30:9f:
         70:ba:53:6e:11:88:1e:4c:bb:42:9a:cf:06:33:0a:42:20:58:
         08:9c:f5:93:d2:c1:02:c4:7b:68:a0:76:06:41:77:bf:32:04:
         a5:d5:58:9e:a1:83:50:5d:2b:f7:1a:0d:32:1f:b6:2b:89:2f:
         6c:71:77:62:47:74:29:76:33:89:9c:8c:a8:cf:c9:58:7f:cf:
         67:a5:42:36:d0:0f:95:42:09:d6:4a:a4:d4:ac:75:e2:86:14:
         7c:e2:50:2d:11:d0:c7:4e:76:f3:c3:f7:7c:6e:a2:3b:86:1c:
         c4:93:ad:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:52:50 2025 by rpki-client