Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/323830343a3234303a313030303a3a2f33362d3336203d3e20323632373938.roa
File:                     323830343a3234303a313030303a3a2f33362d3336203d3e20323632373938.roa (raw, json)
Hash identifier:          gWaOKc9a4cvFBBUSksMVYsRtQWKDH0GNLBD2DinYRbc=
Subject key identifier:   4C:3A:A3:E5:A8:A4:0B:CC:B0:DE:B5:D2:43:4C:03:D5:C3:1B:6F:22
Certificate issuer:       /CN=55873CC5DEF0FFCA1CB3A1B8AFC0CB0D16AF07E2
Certificate serial:       0FCA7B8E48A6565D1446D39F42C9F3E26FDFC8D6
Authority key identifier: 55:87:3C:C5:DE:F0:FF:CA:1C:B3:A1:B8:AF:C0:CB:0D:16:AF:07:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/55873CC5DEF0FFCA1CB3A1B8AFC0CB0D16AF07E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/323830343a3234303a313030303a3a2f33362d3336203d3e20323632373938.roa
Signing time:             Fri 11 Feb 2022 19:24:40 +0000
ROA not before:           Fri 11 Feb 2022 19:19:40 +0000
ROA not after:            Fri 10 Feb 2023 19:24:40 +0000
asID:                     262798
IP address blocks:        2804:240:1000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ca:7b:8e:48:a6:56:5d:14:46:d3:9f:42:c9:f3:e2:6f:df:c8:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55873CC5DEF0FFCA1CB3A1B8AFC0CB0D16AF07E2
        Validity
            Not Before: Feb 11 19:19:40 2022 GMT
            Not After : Feb 10 19:24:40 2023 GMT
        Subject: CN=4C3AA3E5A8A40BCCB0DEB5D2434C03D5C31B6F22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f7:82:ef:2a:06:96:1b:81:ef:c7:b3:05:0d:
                    80:9f:fa:d2:d1:9d:da:8b:3d:da:0c:ca:2d:d5:8d:
                    e0:e2:bd:12:d9:6a:80:55:31:ac:77:f4:d5:53:dc:
                    56:61:f1:87:d7:bb:4d:86:c4:74:5d:75:7d:48:f3:
                    f2:24:58:4c:56:35:a6:44:a4:00:49:ea:cd:f3:4d:
                    56:e1:85:99:5c:64:c6:a3:9a:1f:20:fb:66:1d:4a:
                    73:ed:1d:b0:e9:ad:30:a8:14:77:95:39:af:f9:89:
                    6b:84:e0:fe:12:d7:ed:22:a9:a8:21:f2:6e:13:d7:
                    23:78:1d:da:e9:62:6c:d0:68:6d:ac:1f:6d:1b:dc:
                    af:5d:fc:b2:06:0c:ee:4d:7d:86:4a:9c:a8:92:a2:
                    ca:4a:66:e5:8e:7c:31:89:ee:e0:56:92:8a:0f:d1:
                    7c:93:22:ee:af:69:8f:ee:64:9a:75:e7:7f:3c:e5:
                    cf:80:52:54:33:30:76:44:97:e1:a4:f4:bd:37:ce:
                    07:53:5f:02:20:a6:af:07:d3:1e:58:ea:e3:37:48:
                    e7:7b:be:23:75:1c:70:19:8b:09:9f:bb:f6:d2:f6:
                    c6:a5:9f:f8:45:45:87:b2:50:e5:96:74:0d:8f:0f:
                    9d:b6:c9:11:bf:01:5a:f5:90:0e:94:68:d2:84:f6:
                    9a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:3A:A3:E5:A8:A4:0B:CC:B0:DE:B5:D2:43:4C:03:D5:C3:1B:6F:22
            X509v3 Authority Key Identifier:
                keyid:55:87:3C:C5:DE:F0:FF:CA:1C:B3:A1:B8:AF:C0:CB:0D:16:AF:07:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/55873CC5DEF0FFCA1CB3A1B8AFC0CB0D16AF07E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/55873CC5DEF0FFCA1CB3A1B8AFC0CB0D16AF07E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/323830343a3234303a313030303a3a2f33362d3336203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:240:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         00:00:2c:0d:4f:08:b9:63:c9:88:47:8d:53:9d:c6:2b:30:2f:
         d9:6a:47:b4:e8:a0:81:ee:91:30:d0:30:a0:46:97:6b:15:1b:
         e8:11:47:02:61:a0:3a:c6:fd:cf:a6:6a:32:8f:53:e9:74:b9:
         ef:21:ee:13:21:0b:7a:04:7e:42:35:37:e0:b7:d3:48:78:a4:
         7e:45:90:d5:da:d3:b4:b2:02:fa:bb:70:d1:c8:55:1d:a3:60:
         70:8e:0f:73:0f:50:b8:6d:93:0b:ce:10:ad:d7:bc:f0:d1:6c:
         10:ce:f2:00:4b:d1:c3:1c:4d:b4:f4:aa:8a:b0:1e:e6:28:48:
         e9:f2:57:c5:d0:6a:ef:0b:9a:3a:b1:1f:1a:10:7a:ce:82:6a:
         03:68:6f:f0:35:a9:19:db:dc:75:71:22:53:63:e8:67:2e:ea:
         d2:d8:22:27:70:1f:2d:37:ea:d7:88:fa:82:d5:44:f5:78:d1:
         4e:7e:2e:50:65:2b:ad:77:d5:f7:84:a0:12:71:9f:3f:e8:89:
         db:9f:61:52:c2:dc:4b:f1:5e:03:b1:b9:e4:6d:2e:b6:86:ca:
         f2:5b:e5:35:2d:c8:95:e6:fa:2d:14:3f:6a:21:de:25:99:bf:
         0e:79:25:6a:89:37:8e:29:c9:ab:60:8f:d3:0b:32:04:81:48:
         d2:6a:b7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:53:56 2025 by rpki-client