Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/323830343a346435633a383030303a3a2f33342d3334203d3e20323638313932.roa
File:                     323830343a346435633a383030303a3a2f33342d3334203d3e20323638313932.roa (raw, json)
Hash identifier:          lWWS5RT6UBzHvMpq/h5R6uShmLXrOoEm+svt6xIXDPU=
Subject key identifier:   45:D5:15:13:A7:D8:E4:79:16:C8:53:23:F0:41:21:4F:A5:16:31:DE
Certificate issuer:       /CN=9196DD3555A3B15AB662F32F036A015CAC7C79A1
Certificate serial:       2A171D19B3F0600657BAA0D346C9E368C74B38E6
Authority key identifier: 91:96:DD:35:55:A3:B1:5A:B6:62:F3:2F:03:6A:01:5C:AC:7C:79:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9196DD3555A3B15AB662F32F036A015CAC7C79A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/323830343a346435633a383030303a3a2f33342d3334203d3e20323638313932.roa
Signing time:             Sun 27 Nov 2022 05:23:14 +0000
ROA not before:           Sun 27 Nov 2022 05:18:14 +0000
ROA not after:            Sun 26 Nov 2023 05:23:14 +0000
asID:                     268192
IP address blocks:        2804:4d5c:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:17:1d:19:b3:f0:60:06:57:ba:a0:d3:46:c9:e3:68:c7:4b:38:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9196DD3555A3B15AB662F32F036A015CAC7C79A1
        Validity
            Not Before: Nov 27 05:18:14 2022 GMT
            Not After : Nov 26 05:23:14 2023 GMT
        Subject: CN=45D51513A7D8E47916C85323F041214FA51631DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cd:4d:d2:fb:22:58:fc:99:ab:84:88:82:d5:
                    da:02:6e:ac:c7:54:53:15:d1:ee:69:de:80:92:ee:
                    c2:ed:f6:3c:e1:de:98:9f:7d:13:e8:da:46:63:60:
                    06:0e:e6:33:1e:a0:44:78:51:65:fe:ea:8d:d2:f4:
                    6e:39:80:ee:e3:8f:ae:1e:4d:2a:51:74:e7:64:fc:
                    f3:5c:72:5d:bc:09:18:1a:79:b0:3d:ed:31:5d:fe:
                    f1:87:b8:07:b0:1c:bb:51:aa:7e:c8:2c:8f:6d:be:
                    aa:6b:a9:07:8e:da:41:74:ae:81:3a:a3:54:65:b9:
                    d2:99:64:d4:d7:d2:88:2b:2a:c6:db:ef:e2:56:ad:
                    03:73:d4:06:de:11:62:2e:41:0b:87:5c:8c:b3:60:
                    52:b8:7e:0c:b1:60:1c:20:21:a8:eb:8f:9d:80:3a:
                    f2:4a:96:21:0f:1e:e6:e5:ff:12:7b:ba:1d:7e:63:
                    c4:0d:f4:69:89:83:49:67:ca:13:6d:eb:a8:58:26:
                    58:1d:ad:1e:83:99:49:21:23:bb:81:43:0c:e2:9c:
                    04:c9:00:a4:0b:5c:84:8d:55:80:36:c7:f3:fd:b1:
                    37:c6:b6:26:5a:58:1c:c4:93:e0:1d:58:8b:1e:a6:
                    96:a9:a1:2c:e1:8d:d5:fd:90:75:4e:b8:cd:3e:ad:
                    f9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D5:15:13:A7:D8:E4:79:16:C8:53:23:F0:41:21:4F:A5:16:31:DE
            X509v3 Authority Key Identifier:
                keyid:91:96:DD:35:55:A3:B1:5A:B6:62:F3:2F:03:6A:01:5C:AC:7C:79:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/9196DD3555A3B15AB662F32F036A015CAC7C79A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9196DD3555A3B15AB662F32F036A015CAC7C79A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/323830343a346435633a383030303a3a2f33342d3334203d3e20323638313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d5c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         42:7e:05:54:d7:c2:5c:11:cd:6a:92:dd:aa:7b:94:6a:e4:33:
         2a:0f:92:80:1e:5a:12:8a:34:89:2b:a2:63:57:47:76:0f:39:
         0e:9b:e5:5f:ef:1b:13:7f:8a:13:b3:20:4d:43:2d:77:6d:a9:
         6e:82:41:85:37:0f:0b:26:0f:3e:34:00:27:fb:d7:35:5b:a3:
         c7:d2:42:00:1c:d9:5c:01:5e:36:de:92:4e:13:93:52:50:e2:
         7e:67:7f:d4:1b:b6:be:60:14:f5:ad:99:83:fe:df:ee:0d:94:
         cc:f7:9f:62:14:5d:7e:fd:72:96:33:1c:f5:19:52:fc:e5:65:
         c6:83:3d:7a:28:42:9e:e2:30:7d:b1:ce:3c:99:90:cc:0a:e0:
         5f:bd:d4:bd:6b:d8:bc:07:be:72:a2:8b:66:5b:ad:e4:2a:92:
         e3:17:85:ec:74:27:05:9c:52:75:34:49:7a:59:99:1d:71:87:
         74:54:c2:ab:33:43:fe:5a:9f:aa:c2:5d:3b:85:db:c9:69:12:
         2d:09:7f:ae:ef:90:15:39:af:d7:cd:75:0b:e2:49:0d:e5:73:
         5c:b6:e7:21:d5:c0:bc:11:49:b7:50:50:f5:e1:10:6c:58:35:
         6f:21:43:db:66:1d:a0:e1:93:21:6c:57:61:d9:07:f2:1d:88:
         9a:80:13:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:48:34 2025 by rpki-client