Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/323830343a3234303a343030303a3a2f33362d3336203d3e20323632373938.roa
File:                     323830343a3234303a343030303a3a2f33362d3336203d3e20323632373938.roa (raw, json)
Hash identifier:          vmkmcfYDTE6rlMsEFn6cotiKACZJuKJ/knV/iOo7oRs=
Subject key identifier:   79:D0:E7:70:01:D9:02:37:AD:C7:B0:53:27:91:A3:18:B8:87:43:E5
Certificate issuer:       /CN=55873CC5DEF0FFCA1CB3A1B8AFC0CB0D16AF07E2
Certificate serial:       56A53E2E5619D0B9752FA8E69F859258CBE0CEC4
Authority key identifier: 55:87:3C:C5:DE:F0:FF:CA:1C:B3:A1:B8:AF:C0:CB:0D:16:AF:07:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/55873CC5DEF0FFCA1CB3A1B8AFC0CB0D16AF07E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/323830343a3234303a343030303a3a2f33362d3336203d3e20323632373938.roa
Signing time:             Fri 11 Feb 2022 19:25:57 +0000
ROA not before:           Fri 11 Feb 2022 19:20:57 +0000
ROA not after:            Fri 10 Feb 2023 19:25:57 +0000
asID:                     262798
IP address blocks:        2804:240:4000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:a5:3e:2e:56:19:d0:b9:75:2f:a8:e6:9f:85:92:58:cb:e0:ce:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55873CC5DEF0FFCA1CB3A1B8AFC0CB0D16AF07E2
        Validity
            Not Before: Feb 11 19:20:57 2022 GMT
            Not After : Feb 10 19:25:57 2023 GMT
        Subject: CN=79D0E77001D90237ADC7B0532791A318B88743E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:dc:6f:18:12:29:62:68:22:8f:c0:c7:53:8b:
                    f0:87:84:81:d5:b4:17:99:c6:99:4c:53:01:e8:31:
                    e9:23:77:b4:b6:09:4a:46:5a:ef:7d:ce:97:50:8a:
                    a0:9a:cb:de:df:6b:6e:c4:0a:51:72:0f:a8:02:14:
                    ce:fc:6a:13:3f:f4:92:f6:7a:ba:24:01:25:bc:8b:
                    71:94:e9:66:69:ab:ef:74:34:da:ff:6c:ea:cd:e9:
                    8e:ed:1d:5f:f7:06:d4:ee:d2:4c:7a:9c:2a:00:b7:
                    fd:00:db:e2:b0:55:6c:5a:3e:1d:f9:4b:44:42:ce:
                    61:77:19:72:53:6b:b7:30:51:f0:d8:8b:42:fa:f0:
                    ab:79:e8:57:3c:04:1d:11:e2:3c:e7:d8:c3:57:59:
                    b4:41:0d:34:0e:51:c4:96:ff:1a:4c:36:24:69:0a:
                    48:bb:66:e3:2d:ee:87:d8:0f:bb:04:d8:df:07:33:
                    06:ea:a0:45:52:81:c7:6b:0a:d9:93:1b:5a:5b:86:
                    28:8d:1d:2f:d2:77:c6:7e:a4:15:fe:15:dc:9f:80:
                    69:06:69:27:63:4f:c4:a2:00:80:51:a1:6a:6b:95:
                    d9:47:d6:60:5e:a4:54:96:2a:9c:94:44:69:b3:ba:
                    bd:32:d6:d9:c0:53:5c:44:c2:50:96:27:08:d9:98:
                    4c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:D0:E7:70:01:D9:02:37:AD:C7:B0:53:27:91:A3:18:B8:87:43:E5
            X509v3 Authority Key Identifier:
                keyid:55:87:3C:C5:DE:F0:FF:CA:1C:B3:A1:B8:AF:C0:CB:0D:16:AF:07:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/55873CC5DEF0FFCA1CB3A1B8AFC0CB0D16AF07E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/55873CC5DEF0FFCA1CB3A1B8AFC0CB0D16AF07E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/323830343a3234303a343030303a3a2f33362d3336203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:240:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         10:88:5e:59:b9:cf:25:b8:c6:81:25:ed:61:0a:14:1e:8b:87:
         04:90:79:36:fe:71:01:fc:46:1c:34:38:61:c2:d6:6e:88:83:
         76:62:b3:22:0d:07:7e:89:78:05:63:27:e8:32:8d:e3:df:dc:
         47:7d:8f:b8:10:88:68:85:01:2b:1e:73:91:99:8c:45:07:f1:
         0f:a0:cd:c1:5d:ea:ef:2f:58:7e:37:8d:04:93:bd:1b:74:10:
         cf:bb:99:7b:e4:0f:82:af:9b:2b:2e:8f:64:d8:b6:d8:b5:29:
         4c:bd:53:57:d7:cc:73:76:c7:0f:aa:79:d5:09:6f:ad:8d:82:
         17:bb:e9:94:4b:f9:3b:43:ec:24:ec:00:bf:9f:2c:5c:40:53:
         0f:22:c9:d9:00:b1:e0:c6:52:a7:d0:da:6b:a1:ca:14:28:fb:
         00:20:32:07:45:44:25:71:ad:65:76:d1:34:f7:19:66:dd:e5:
         34:2e:48:ea:01:df:e2:81:9b:fc:af:45:34:7e:93:dc:85:df:
         e2:96:0d:e2:c0:01:be:fe:62:c3:37:46:f7:88:8c:b1:b7:55:
         a1:bc:8e:4d:d5:b6:e5:66:ac:24:da:cf:1b:cb:de:f0:ae:2d:
         27:1e:30:3e:82:b3:ca:b3:bf:2f:5f:4a:a1:d1:6f:79:59:a0:
         cb:38:66:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:55:19 2025 by rpki-client