Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Gxh7q5vcAwahAQisrHGBDeLBEyAVexSuaDmCsN3R7dQ/0/323830343a343364343a3a2f33322d3333203d3e20323637353933.roa
File:                     323830343a343364343a3a2f33322d3333203d3e20323637353933.roa (raw, json)
Hash identifier:          x7IUs9ib2PPnhm8jjhhHAlJieGGi8fISNAXY5yZF1rw=
Subject key identifier:   A1:A0:23:A2:4C:91:43:64:6C:A4:C0:8C:0B:59:6A:31:A3:5C:B9:C8
Certificate issuer:       /CN=3F175E66F2E0A76812C6FE5AFEDA9159214458CB
Certificate serial:       40B264AF0548C9F0F0898BE9B2D01C345416EF
Authority key identifier: 3F:17:5E:66:F2:E0:A7:68:12:C6:FE:5A:FE:DA:91:59:21:44:58:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F175E66F2E0A76812C6FE5AFEDA9159214458CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Gxh7q5vcAwahAQisrHGBDeLBEyAVexSuaDmCsN3R7dQ/0/323830343a343364343a3a2f33322d3333203d3e20323637353933.roa
Signing time:             Fri 23 Aug 2024 17:44:52 +0000
ROA not before:           Fri 23 Aug 2024 17:39:52 +0000
ROA not after:            Fri 22 Aug 2025 17:44:52 +0000
asID:                     267593
IP address blocks:        2804:43d4::/32 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:b2:64:af:05:48:c9:f0:f0:89:8b:e9:b2:d0:1c:34:54:16:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F175E66F2E0A76812C6FE5AFEDA9159214458CB
        Validity
            Not Before: Aug 23 17:39:52 2024 GMT
            Not After : Aug 22 17:44:52 2025 GMT
        Subject: CN=A1A023A24C9143646CA4C08C0B596A31A35CB9C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1b:6f:93:aa:ea:ba:56:b7:c8:bf:88:09:85:
                    66:ef:8b:cd:cd:f5:07:18:ad:ab:69:2c:b4:71:be:
                    99:62:cb:a1:47:ae:39:fa:ea:08:0c:08:a6:fc:d1:
                    55:1e:75:de:66:b6:f2:e2:78:69:86:21:8e:f3:5f:
                    df:3f:d9:80:66:98:b0:3b:a4:b9:00:1e:aa:9d:be:
                    64:9e:19:89:2a:48:4f:71:cf:ea:13:db:6f:5a:a9:
                    38:ed:ee:d8:b3:69:3a:fe:04:20:c0:ea:c7:5b:91:
                    84:30:59:e9:21:90:71:94:f5:b7:8c:5d:7d:4d:d6:
                    b9:5c:e6:a7:fe:73:3a:08:84:95:a9:92:51:bf:dc:
                    b1:df:80:1c:ac:6b:2b:00:34:6f:ae:d8:89:56:4d:
                    6d:1b:fb:3b:62:fa:10:e2:8c:a4:32:d3:4f:d2:62:
                    c3:3d:36:c1:45:a9:4f:03:15:0d:be:7b:95:1d:74:
                    c0:d7:13:fc:de:b3:89:3e:85:b3:f1:1d:dc:8c:07:
                    af:01:14:5d:15:34:4d:6b:34:50:dd:20:f4:c1:00:
                    7f:5d:da:37:4e:8a:56:64:12:cd:62:8b:ae:08:d1:
                    c1:06:9c:e7:40:91:97:e6:4c:42:a4:80:1c:aa:55:
                    34:e2:b8:a7:06:de:00:65:34:b5:0d:40:84:7e:42:
                    13:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A0:23:A2:4C:91:43:64:6C:A4:C0:8C:0B:59:6A:31:A3:5C:B9:C8
            X509v3 Authority Key Identifier:
                keyid:3F:17:5E:66:F2:E0:A7:68:12:C6:FE:5A:FE:DA:91:59:21:44:58:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Gxh7q5vcAwahAQisrHGBDeLBEyAVexSuaDmCsN3R7dQ/0/3F175E66F2E0A76812C6FE5AFEDA9159214458CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F175E66F2E0A76812C6FE5AFEDA9159214458CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Gxh7q5vcAwahAQisrHGBDeLBEyAVexSuaDmCsN3R7dQ/0/323830343a343364343a3a2f33322d3333203d3e20323637353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:81:25:d5:fd:39:53:28:d1:1f:3e:52:34:fc:9b:80:5e:68:
         db:4a:82:84:f1:41:29:64:11:ac:69:21:73:44:4b:87:08:47:
         c9:4d:1e:22:b6:9b:bd:ba:69:67:cf:3f:08:e5:6e:4f:16:79:
         2f:30:bd:23:4b:c3:50:20:a1:e9:a7:34:56:a9:0c:f6:91:e1:
         68:e9:bd:9f:88:86:b1:2a:c7:9f:c5:4e:17:83:54:32:ff:6a:
         ca:62:90:e2:74:61:e8:98:ad:22:52:f6:6c:6f:eb:54:a3:c3:
         e3:de:29:52:9d:3d:bb:24:f3:ba:5f:1b:a7:b4:d0:85:75:57:
         71:52:d5:f2:e5:00:b4:a1:b2:68:06:d9:3e:34:d3:03:16:58:
         4a:e1:df:49:44:9b:74:66:e3:6e:dc:7f:89:d1:d6:89:29:f5:
         cb:a8:84:03:44:8a:6a:b2:bd:5f:9d:16:70:a1:58:79:a6:b9:
         46:d0:39:70:5f:b4:a9:5b:cc:9e:6b:f5:36:31:0e:ef:d7:d1:
         cd:ef:6c:d6:8d:6b:d4:05:3c:97:0d:f2:96:21:40:32:2c:85:
         69:b2:f6:0e:fd:fb:f5:17:ff:3c:92:c0:fe:41:e7:18:47:04:
         2c:4e:7a:03:32:73:53:d8:09:98:6b:34:34:be:76:b1:53:c6:
         ff:63:15:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:42:55 2025 by rpki-client