Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/323830343a336437343a3a2f34382d3438203d3e20323632363137.roa
File:                     323830343a336437343a3a2f34382d3438203d3e20323632363137.roa (raw, json)
Hash identifier:          cH0DXFjc3dPkSAjbXmbX2Kd2Br6avmMU4cBXJDDbqMM=
Subject key identifier:   9A:11:17:D1:4A:84:D0:C7:67:25:18:22:11:3C:69:6A:79:DA:73:6D
Certificate issuer:       /CN=97E394FE854613CE9784B1D64D805ABFF0DF922C
Certificate serial:       1E5C935998017D29B1961006E4B64204162B8AEC
Authority key identifier: 97:E3:94:FE:85:46:13:CE:97:84:B1:D6:4D:80:5A:BF:F0:DF:92:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97E394FE854613CE9784B1D64D805ABFF0DF922C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/323830343a336437343a3a2f34382d3438203d3e20323632363137.roa
Signing time:             Tue 24 Jan 2023 18:27:45 +0000
ROA not before:           Tue 24 Jan 2023 18:22:45 +0000
ROA not after:            Tue 23 Jan 2024 18:27:45 +0000
asID:                     262617
IP address blocks:        2804:3d74::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:5c:93:59:98:01:7d:29:b1:96:10:06:e4:b6:42:04:16:2b:8a:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97E394FE854613CE9784B1D64D805ABFF0DF922C
        Validity
            Not Before: Jan 24 18:22:45 2023 GMT
            Not After : Jan 23 18:27:45 2024 GMT
        Subject: CN=9A1117D14A84D0C767251822113C696A79DA736D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:00:6c:9b:a2:b1:f9:52:89:0d:27:2b:39:0a:
                    32:4e:e7:34:c3:ab:eb:6c:bd:ad:ce:b8:25:40:fe:
                    b4:fe:0b:d1:4e:d2:54:39:fb:ea:25:ee:ad:66:c9:
                    85:9e:51:35:5e:5d:65:5d:24:4d:85:a0:29:eb:23:
                    c5:b4:d8:1e:b6:b6:77:6e:4d:d9:bb:18:13:f8:d5:
                    fe:01:ba:38:09:0d:a9:ea:7a:71:bf:16:41:cf:9c:
                    23:4f:78:3c:d4:2c:14:62:fd:c8:a1:0a:6c:18:a3:
                    62:4f:9c:8c:66:50:26:29:ea:49:13:e5:ee:c3:4f:
                    a8:59:5a:ad:a2:e4:f4:70:cc:b6:1a:f0:05:c5:aa:
                    59:0d:b2:da:34:46:b8:95:47:a4:fc:4a:66:18:66:
                    9e:1e:ee:37:09:81:52:a7:99:94:2e:0c:f4:0b:cd:
                    6b:56:a0:6a:b8:72:b6:92:43:ff:ac:3c:2c:0d:3b:
                    aa:1e:3d:6c:e2:7c:e1:bf:80:e3:f0:2d:b8:91:2c:
                    03:ba:57:01:f8:f8:31:e4:97:80:3a:a1:c0:de:65:
                    bc:9a:97:35:0a:22:b7:98:6c:bd:b4:8a:be:75:e4:
                    c5:82:7c:6a:9c:65:bb:96:5b:62:0b:12:5a:c5:f0:
                    05:25:86:ff:27:e4:15:82:36:f0:18:6e:59:4a:ae:
                    f6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:11:17:D1:4A:84:D0:C7:67:25:18:22:11:3C:69:6A:79:DA:73:6D
            X509v3 Authority Key Identifier:
                keyid:97:E3:94:FE:85:46:13:CE:97:84:B1:D6:4D:80:5A:BF:F0:DF:92:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/97E394FE854613CE9784B1D64D805ABFF0DF922C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97E394FE854613CE9784B1D64D805ABFF0DF922C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/323830343a336437343a3a2f34382d3438203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d74::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:25:4f:7d:8b:3f:32:68:46:5c:3e:f2:fb:19:56:38:59:25:
         d3:a8:1d:86:04:3a:7c:f4:1b:c2:31:ae:ab:d9:55:f1:89:1f:
         cd:84:f8:10:ce:ce:ed:e3:e1:c5:e4:76:69:31:4b:59:f5:e4:
         9e:ca:46:3c:c7:e2:bc:70:9c:37:cd:f0:88:f6:a6:e6:f7:9b:
         40:cb:96:69:d4:64:82:36:d0:00:a9:de:c3:9d:12:90:47:89:
         7b:90:0b:1b:9b:4e:20:6c:13:ca:21:de:ac:0d:c9:44:b6:f3:
         f5:76:73:67:5e:5c:7e:53:8e:3c:22:4d:38:39:ad:26:0f:a2:
         8d:56:95:8a:a3:14:83:88:6e:e0:59:48:59:b6:65:e5:b0:21:
         b7:61:f3:9f:c0:23:6c:67:b9:50:2a:c9:99:e1:53:b5:71:2d:
         7d:25:8e:10:4e:72:cd:6c:23:e5:9a:17:1f:b8:fa:63:b4:8d:
         96:79:4d:4b:a4:ee:3f:53:77:b7:e3:3a:b8:a5:c0:8b:0c:d6:
         71:09:2e:71:c6:29:44:81:db:ae:fc:46:dc:86:2c:6d:ca:10:
         9b:62:1d:18:dd:0b:c8:b1:ce:0a:ff:8f:b3:e7:09:dd:d2:b1:
         cd:ef:cc:f2:c4:ef:6b:38:d3:9a:6b:74:c9:c4:b1:25:43:ad:
         b2:49:d3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:18 2025 by rpki-client