Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/323830343a346435633a383030303a3a2f33332d3333203d3e20323638313932.roa
File:                     323830343a346435633a383030303a3a2f33332d3333203d3e20323638313932.roa (raw, json)
Hash identifier:          d221qCjXeK/6hbJLcRRXI5/57QZJIj4fKZioTierojI=
Subject key identifier:   9C:70:DE:78:FA:16:F9:19:C6:79:CE:54:6C:4B:AC:B0:47:6E:2E:F0
Certificate issuer:       /CN=9196DD3555A3B15AB662F32F036A015CAC7C79A1
Certificate serial:       1408CDAAFC831A639C3C22FE1D671DB37C6D27D9
Authority key identifier: 91:96:DD:35:55:A3:B1:5A:B6:62:F3:2F:03:6A:01:5C:AC:7C:79:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9196DD3555A3B15AB662F32F036A015CAC7C79A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/323830343a346435633a383030303a3a2f33332d3333203d3e20323638313932.roa
Signing time:             Sun 27 Nov 2022 05:23:13 +0000
ROA not before:           Sun 27 Nov 2022 05:18:13 +0000
ROA not after:            Sun 26 Nov 2023 05:23:13 +0000
asID:                     268192
IP address blocks:        2804:4d5c:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:08:cd:aa:fc:83:1a:63:9c:3c:22:fe:1d:67:1d:b3:7c:6d:27:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9196DD3555A3B15AB662F32F036A015CAC7C79A1
        Validity
            Not Before: Nov 27 05:18:13 2022 GMT
            Not After : Nov 26 05:23:13 2023 GMT
        Subject: CN=9C70DE78FA16F919C679CE546C4BACB0476E2EF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:81:3f:9a:d2:ee:d1:ab:18:da:ac:43:f6:b8:
                    ed:23:dd:2e:6a:8a:44:05:90:cb:0f:8a:24:38:fe:
                    1f:14:e4:da:0f:17:d8:ac:7b:8a:75:2f:7f:a9:94:
                    ab:d6:ab:09:e1:f3:72:6c:72:82:d6:0d:af:35:c6:
                    79:77:b8:7f:22:1d:c3:45:b2:cf:04:0a:d7:39:08:
                    19:89:05:e0:64:6c:b2:19:69:0f:70:ac:f2:d7:d6:
                    74:d1:19:8e:21:23:da:b9:11:cc:19:f9:52:e2:24:
                    b1:88:52:c7:59:5b:f3:1e:21:64:f5:42:b4:bf:fa:
                    4d:9e:71:bf:25:2d:2c:ef:14:c9:74:d3:71:28:15:
                    ac:76:40:26:d8:1c:3a:b1:eb:de:e7:6f:cb:d4:13:
                    54:12:f4:4c:b9:25:ff:ad:dd:93:cd:ae:26:cc:62:
                    86:58:4b:bc:fa:4d:97:58:b5:c4:07:c0:b5:98:2b:
                    41:21:f2:9e:be:8c:8f:06:6b:5e:6e:0f:90:ed:f1:
                    a3:68:a2:b4:93:99:37:7b:ea:a3:95:ba:71:36:4e:
                    e6:c2:21:ce:9f:03:c1:ef:01:a2:4e:d0:00:29:5a:
                    b7:ff:e3:f8:80:29:02:5d:2b:95:62:77:0f:0f:3f:
                    95:13:c0:6c:3c:6e:84:7b:15:e4:df:6f:74:aa:d3:
                    0e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:70:DE:78:FA:16:F9:19:C6:79:CE:54:6C:4B:AC:B0:47:6E:2E:F0
            X509v3 Authority Key Identifier:
                keyid:91:96:DD:35:55:A3:B1:5A:B6:62:F3:2F:03:6A:01:5C:AC:7C:79:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/9196DD3555A3B15AB662F32F036A015CAC7C79A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9196DD3555A3B15AB662F32F036A015CAC7C79A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/323830343a346435633a383030303a3a2f33332d3333203d3e20323638313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d5c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         58:ff:9b:cb:e4:fb:b4:4f:6e:74:7b:d6:99:68:ea:9e:8d:ff:
         39:38:ac:17:4f:66:42:f1:fb:a3:01:b7:2f:4e:c6:68:2a:73:
         dc:db:82:c7:84:fa:56:fc:47:3d:69:9c:bf:98:7c:78:2f:01:
         93:52:5a:9e:25:37:9b:b7:51:6f:e6:42:93:bf:d6:df:23:81:
         27:9e:49:74:1c:e3:44:70:e4:94:0d:4c:f4:5a:83:fe:ed:55:
         65:c6:a8:f0:ee:36:74:cf:00:a3:2c:66:b6:db:f3:19:53:62:
         87:86:57:a5:c0:27:96:9f:4d:86:72:da:ca:b0:15:f0:a5:27:
         91:ac:b1:f9:6b:4c:ec:c4:7d:1e:0e:fe:68:1e:36:ee:d1:41:
         d8:6a:48:ee:da:77:45:49:d9:53:04:68:a3:68:b5:bb:3d:bb:
         e2:b2:64:03:1b:32:9a:10:c6:00:41:dd:2c:c5:c5:70:68:90:
         ad:ee:3e:be:b2:85:be:14:d8:7e:a6:8a:3e:b4:43:99:18:c8:
         78:fa:6a:5a:d4:ae:03:5f:fa:51:da:12:91:9f:fd:24:59:b6:
         c4:d9:71:18:3a:38:b9:a4:5f:2f:1c:d3:33:71:ab:db:d1:9e:
         72:45:cc:1e:54:da:c5:0a:15:1c:e5:de:59:9b:e3:d2:35:ac:
         3b:ad:12:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:28 2025 by rpki-client