Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/323830343a3234303a363030303a3a2f33362d3336203d3e20323632373938.roa
File:                     323830343a3234303a363030303a3a2f33362d3336203d3e20323632373938.roa (raw, json)
Hash identifier:          9Aivbcn5eqkYH2oekvjdvM/tivT3FHe6bGw2i6AAqQc=
Subject key identifier:   A1:77:E9:6B:7A:CC:5A:D2:72:57:21:22:A4:53:99:16:0D:D9:FD:CB
Certificate issuer:       /CN=55873CC5DEF0FFCA1CB3A1B8AFC0CB0D16AF07E2
Certificate serial:       264B9DE6E32B0A53EE35CA06093E5921C676C86B
Authority key identifier: 55:87:3C:C5:DE:F0:FF:CA:1C:B3:A1:B8:AF:C0:CB:0D:16:AF:07:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/55873CC5DEF0FFCA1CB3A1B8AFC0CB0D16AF07E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/323830343a3234303a363030303a3a2f33362d3336203d3e20323632373938.roa
Signing time:             Fri 11 Feb 2022 19:27:48 +0000
ROA not before:           Fri 11 Feb 2022 19:22:48 +0000
ROA not after:            Fri 10 Feb 2023 19:27:48 +0000
asID:                     262798
IP address blocks:        2804:240:6000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:4b:9d:e6:e3:2b:0a:53:ee:35:ca:06:09:3e:59:21:c6:76:c8:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55873CC5DEF0FFCA1CB3A1B8AFC0CB0D16AF07E2
        Validity
            Not Before: Feb 11 19:22:48 2022 GMT
            Not After : Feb 10 19:27:48 2023 GMT
        Subject: CN=A177E96B7ACC5AD272572122A45399160DD9FDCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f1:c5:b6:81:8e:89:1f:fa:49:8b:ad:4e:b2:
                    2d:f6:82:26:52:7a:35:3d:7e:41:2f:e6:df:78:f4:
                    63:96:e7:0c:5f:ff:44:f3:3e:ad:5d:20:81:7b:04:
                    61:52:4b:43:03:84:c2:1f:05:1f:59:e8:ed:64:df:
                    36:16:6a:2c:b3:b6:b6:91:bb:24:22:cf:61:7a:bb:
                    f4:74:74:25:21:17:39:2a:f8:05:2c:b8:09:db:e6:
                    f0:61:bd:66:13:a8:6d:28:d8:3f:aa:0d:3f:66:10:
                    a4:07:2f:f4:39:48:dc:ab:e6:6e:24:c1:12:3c:a2:
                    e3:db:0b:8a:cc:01:a0:9c:59:f5:e2:bc:f6:ce:d0:
                    e1:d9:9e:e8:23:80:49:80:a4:50:22:3a:43:e6:00:
                    71:28:14:94:e7:48:a8:c4:49:ce:48:ab:88:2d:2b:
                    33:57:ce:56:7c:4a:7d:3d:a6:e9:20:e4:83:43:b1:
                    93:01:c8:39:27:99:fa:10:a9:bc:b0:8e:d7:6f:d8:
                    82:0b:19:30:1b:aa:fa:8f:0c:92:b6:c2:60:fc:2e:
                    ff:67:fe:e5:db:6a:fa:98:7a:32:1d:16:f4:cc:04:
                    6a:fa:3c:40:5b:c3:d9:b4:1a:31:a6:b0:d7:b3:f9:
                    00:fe:d0:32:7f:62:97:e8:98:41:09:4a:d4:a9:03:
                    fd:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:77:E9:6B:7A:CC:5A:D2:72:57:21:22:A4:53:99:16:0D:D9:FD:CB
            X509v3 Authority Key Identifier:
                keyid:55:87:3C:C5:DE:F0:FF:CA:1C:B3:A1:B8:AF:C0:CB:0D:16:AF:07:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/55873CC5DEF0FFCA1CB3A1B8AFC0CB0D16AF07E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/55873CC5DEF0FFCA1CB3A1B8AFC0CB0D16AF07E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/323830343a3234303a363030303a3a2f33362d3336203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:240:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3b:6a:55:e9:b5:cb:6d:c2:78:97:83:fc:6c:64:fa:ef:ac:5f:
         5e:c5:62:f5:e7:83:19:c5:a8:99:d7:1f:99:fa:0c:cb:83:65:
         f1:03:04:56:9f:79:f1:d2:84:81:49:80:69:b7:96:85:dc:94:
         41:ad:d6:14:45:ab:4e:fa:21:cd:68:d2:25:18:38:f4:14:04:
         f4:54:bc:6d:db:46:97:da:4a:1f:46:51:e9:64:78:3e:72:61:
         12:31:45:e2:5c:05:0d:cc:0d:6f:fd:9e:31:d4:43:b6:de:f9:
         1f:c1:0b:76:e9:95:25:ef:7f:55:28:ac:4f:92:6a:a6:01:ae:
         bf:98:d6:2c:7c:26:c9:0d:74:47:f0:54:8a:74:75:e7:06:99:
         77:5e:e1:6f:35:30:6d:76:9a:5e:7b:7a:3b:e5:48:b0:bb:56:
         5b:fa:ce:52:49:15:36:fb:5b:08:87:00:c9:23:57:bc:d0:21:
         3a:94:aa:bf:04:4d:91:66:7b:02:c0:02:2b:a9:14:59:68:30:
         99:dc:8f:d9:6f:b2:66:a4:63:63:d1:65:e0:07:68:23:36:00:
         d4:e6:e7:9d:c0:f9:6c:68:39:a0:3a:1e:62:2e:5f:c6:d6:d3:
         86:9b:5b:f3:f1:1c:e3:ec:24:5e:42:a7:a7:ba:a9:94:09:89:
         f7:8f:e4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:45:34 2025 by rpki-client