Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9FbNHx7Mpi32dcm1v4bT7vTyurf44gPkxs6PjjJGbbYw/0/323830343a373631383a3a2f33322d3438203d3e20323731303839.roa
File:                     323830343a373631383a3a2f33322d3438203d3e20323731303839.roa (raw, json)
Hash identifier:          EE/gtTgdYTvQci3mXWuoRwOrfLGODipR3cIMxTkum6g=
Subject key identifier:   DB:48:5D:50:9E:C5:BA:D6:1C:42:E7:7D:E4:CB:97:CB:04:D0:9E:E2
Certificate issuer:       /CN=FB8339435145A20213F790D3F180A4E390A95A2A
Certificate serial:       6D66FE19D81F7B796A7C70ECE38B595F74920F91
Authority key identifier: FB:83:39:43:51:45:A2:02:13:F7:90:D3:F1:80:A4:E3:90:A9:5A:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB8339435145A20213F790D3F180A4E390A95A2A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9FbNHx7Mpi32dcm1v4bT7vTyurf44gPkxs6PjjJGbbYw/0/323830343a373631383a3a2f33322d3438203d3e20323731303839.roa
Signing time:             Tue 21 Sep 2021 17:12:00 +0000
ROA not before:           Tue 21 Sep 2021 17:07:00 +0000
ROA not after:            Tue 20 Sep 2022 17:12:00 +0000
asID:                     271089
IP address blocks:        2804:7618::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:66:fe:19:d8:1f:7b:79:6a:7c:70:ec:e3:8b:59:5f:74:92:0f:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB8339435145A20213F790D3F180A4E390A95A2A
        Validity
            Not Before: Sep 21 17:07:00 2021 GMT
            Not After : Sep 20 17:12:00 2022 GMT
        Subject: CN=3082010A0282010100BF04D6E66602CBE8ADF905AA1835C729BC3B62667F9121987F26F99D7A0B49DCAE2AFD119485B7E8EC02A7451063B92AA839DF94F16D2F76803CF93AA7755F8968DB0869CBEDC40A4CF85D7E8C0199D24F16125AD8BA00277C6E416A80240C7AAB89D0D5E665A5C29809E0D947E5F4D4ED6F1BE64B1B78A45D4A849B8623ADEE78C17C8F1158D954AC059B39F6EA08344CEB29D28DBEA017E006BEF9C6EB076BE720F974DF0A48EF5F5112E3F72F8C30CBB27F14DD8E2D57CFA231DFC11D049978CFDFC544DFF8E8A18635B635C545316F57C3E48D8DE4F8E5A99FF9E9C0865D5144F7B284A4622436D959BDC76C71876DC932A127393CD9DBA21E6FFB443C3B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:04:d6:e6:66:02:cb:e8:ad:f9:05:aa:18:35:
                    c7:29:bc:3b:62:66:7f:91:21:98:7f:26:f9:9d:7a:
                    0b:49:dc:ae:2a:fd:11:94:85:b7:e8:ec:02:a7:45:
                    10:63:b9:2a:a8:39:df:94:f1:6d:2f:76:80:3c:f9:
                    3a:a7:75:5f:89:68:db:08:69:cb:ed:c4:0a:4c:f8:
                    5d:7e:8c:01:99:d2:4f:16:12:5a:d8:ba:00:27:7c:
                    6e:41:6a:80:24:0c:7a:ab:89:d0:d5:e6:65:a5:c2:
                    98:09:e0:d9:47:e5:f4:d4:ed:6f:1b:e6:4b:1b:78:
                    a4:5d:4a:84:9b:86:23:ad:ee:78:c1:7c:8f:11:58:
                    d9:54:ac:05:9b:39:f6:ea:08:34:4c:eb:29:d2:8d:
                    be:a0:17:e0:06:be:f9:c6:eb:07:6b:e7:20:f9:74:
                    df:0a:48:ef:5f:51:12:e3:f7:2f:8c:30:cb:b2:7f:
                    14:dd:8e:2d:57:cf:a2:31:df:c1:1d:04:99:78:cf:
                    df:c5:44:df:f8:e8:a1:86:35:b6:35:c5:45:31:6f:
                    57:c3:e4:8d:8d:e4:f8:e5:a9:9f:f9:e9:c0:86:5d:
                    51:44:f7:b2:84:a4:62:24:36:d9:59:bd:c7:6c:71:
                    87:6d:c9:32:a1:27:39:3c:d9:db:a2:1e:6f:fb:44:
                    3c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:48:5D:50:9E:C5:BA:D6:1C:42:E7:7D:E4:CB:97:CB:04:D0:9E:E2
            X509v3 Authority Key Identifier:
                keyid:FB:83:39:43:51:45:A2:02:13:F7:90:D3:F1:80:A4:E3:90:A9:5A:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9FbNHx7Mpi32dcm1v4bT7vTyurf44gPkxs6PjjJGbbYw/0/FB8339435145A20213F790D3F180A4E390A95A2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB8339435145A20213F790D3F180A4E390A95A2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9FbNHx7Mpi32dcm1v4bT7vTyurf44gPkxs6PjjJGbbYw/0/323830343a373631383a3a2f33322d3438203d3e20323731303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7618::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:cc:03:ea:01:ff:8e:cf:b8:4c:ad:17:66:1c:95:c0:2b:4c:
         59:96:f5:c2:e2:d6:39:24:58:d9:86:b9:98:fe:00:13:32:37:
         ad:04:72:c3:c8:4b:f4:a6:f9:8c:db:20:7e:8f:e1:cb:88:2e:
         67:d4:d4:75:f4:80:c0:3a:66:93:ad:a7:8c:dd:39:79:c7:6a:
         1f:5d:c1:e3:ed:79:2f:ca:9b:a7:55:fd:e6:22:80:00:6c:d9:
         1c:71:73:cf:a0:f5:24:d5:30:19:e7:43:b1:99:40:91:99:fd:
         3f:bc:04:2e:1b:6f:11:52:75:03:d0:79:54:6c:c4:c3:d7:d1:
         4c:71:77:0e:9d:c3:13:08:99:47:5e:81:e8:69:cc:cc:b3:42:
         32:c2:80:22:2d:2f:3c:6c:49:5a:61:f5:51:42:fa:52:d9:96:
         6c:42:65:e4:c3:cd:c3:7d:3d:77:46:df:c9:b6:19:73:76:07:
         6a:cb:39:c8:ad:83:c1:d4:a7:3d:8f:62:cd:c2:0f:0f:c4:fc:
         8b:43:89:b2:3d:9d:13:1f:f6:d1:16:f9:60:2f:4f:33:1b:f8:
         c5:0c:9e:b0:27:4e:26:09:ab:c1:a8:23:3f:08:29:4d:80:32:
         4b:79:9b:4f:44:8b:21:6e:1f:e1:af:d9:c1:d5:bd:ca:07:37:
         1b:79:e3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:39 2025 by rpki-client