Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bnKAzzDfhZELHMx3uTajdoiNZUnSBhRmMqjzKqkavCb/0/323830343a383565383a3a2f33322d3438203d3e20323632373032.roa
File:                     323830343a383565383a3a2f33322d3438203d3e20323632373032.roa (raw, json)
Hash identifier:          IO0vyju+IVbAmTiUucfttvS/U8m30bEeFePTfHiLifY=
Subject key identifier:   44:19:15:C4:0C:0F:BA:43:B0:74:8D:79:71:1D:30:DB:D0:B9:24:39
Certificate issuer:       /CN=9DF20F0DE6FF579CBBDB345EC8984426D099267A
Certificate serial:       77612ED2454BB9E72035A02F7E953C0ADA19DA85
Authority key identifier: 9D:F2:0F:0D:E6:FF:57:9C:BB:DB:34:5E:C8:98:44:26:D0:99:26:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DF20F0DE6FF579CBBDB345EC8984426D099267A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bnKAzzDfhZELHMx3uTajdoiNZUnSBhRmMqjzKqkavCb/0/323830343a383565383a3a2f33322d3438203d3e20323632373032.roa
Signing time:             Thu 15 Feb 2024 16:54:19 +0000
ROA not before:           Thu 15 Feb 2024 16:49:19 +0000
ROA not after:            Thu 13 Feb 2025 16:54:19 +0000
asID:                     262702
IP address blocks:        2804:85e8::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:61:2e:d2:45:4b:b9:e7:20:35:a0:2f:7e:95:3c:0a:da:19:da:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DF20F0DE6FF579CBBDB345EC8984426D099267A
        Validity
            Not Before: Feb 15 16:49:19 2024 GMT
            Not After : Feb 13 16:54:19 2025 GMT
        Subject: CN=441915C40C0FBA43B0748D79711D30DBD0B92439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ae:dd:da:88:75:ba:ad:7c:b3:2b:2f:05:87:
                    02:eb:e5:ec:c6:e5:11:89:6a:a0:ca:ff:82:af:4e:
                    73:69:4d:8c:b2:cf:af:aa:e7:3f:f3:ee:26:dd:37:
                    4d:28:09:28:ea:fb:c4:5c:9d:6c:0e:c6:3a:26:7f:
                    18:29:e5:b6:23:a1:d7:18:7a:8d:ca:08:d0:9e:97:
                    c3:5a:2d:c4:f0:3c:5b:6b:cd:1b:f1:b8:a8:5c:58:
                    d2:ba:71:03:97:1e:ac:ff:af:40:f0:3e:1d:8b:89:
                    16:ad:ed:da:da:29:ae:0c:84:cb:9c:d7:2e:88:d4:
                    25:95:7a:15:41:3c:97:77:bf:d8:86:68:2f:c3:55:
                    32:ab:dc:e2:36:f3:fb:a7:85:5f:3d:5d:8d:43:ca:
                    e6:3c:d1:cf:8a:8c:b7:b0:45:61:89:9a:fc:a3:56:
                    09:a2:70:39:e3:ad:64:1c:01:06:bc:33:bc:e2:77:
                    5e:b8:03:03:95:10:7e:cf:98:9b:de:3f:17:07:cf:
                    35:e8:6b:e9:50:eb:09:be:5c:ed:f8:5f:e3:40:b4:
                    54:cf:a3:e7:f5:de:50:c1:e3:c8:ba:78:48:ce:06:
                    0b:d0:ea:a8:6d:a2:a8:c4:b2:57:b6:b6:19:ce:07:
                    36:94:03:39:64:19:d0:6b:00:25:f4:c4:0f:2b:3a:
                    8e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:19:15:C4:0C:0F:BA:43:B0:74:8D:79:71:1D:30:DB:D0:B9:24:39
            X509v3 Authority Key Identifier:
                keyid:9D:F2:0F:0D:E6:FF:57:9C:BB:DB:34:5E:C8:98:44:26:D0:99:26:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bnKAzzDfhZELHMx3uTajdoiNZUnSBhRmMqjzKqkavCb/0/9DF20F0DE6FF579CBBDB345EC8984426D099267A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DF20F0DE6FF579CBBDB345EC8984426D099267A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bnKAzzDfhZELHMx3uTajdoiNZUnSBhRmMqjzKqkavCb/0/323830343a383565383a3a2f33322d3438203d3e20323632373032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:85e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         bb:a4:75:f6:5b:b0:bf:99:2b:ed:50:68:bf:bf:66:90:71:12:
         bd:33:97:5c:ff:70:af:33:d1:91:3f:f5:fe:22:9c:7a:71:ef:
         33:7b:26:f1:65:64:ab:b7:c8:7b:36:c5:94:11:a7:10:7f:b6:
         ed:db:fb:9a:5b:c8:c5:8d:11:f0:d6:f6:d3:0f:90:c8:95:32:
         6d:03:8a:7e:37:22:99:76:d0:a6:24:b5:cd:b1:17:7f:f6:b2:
         7b:e1:2f:3c:45:af:be:1f:0a:30:c5:35:ea:17:a1:f9:d7:4b:
         f9:2a:b5:d4:e4:d5:41:28:c8:7f:77:40:68:d9:d6:1a:29:70:
         b2:47:39:64:e9:90:10:79:7b:c5:e0:91:f2:06:bc:2e:d0:c2:
         6a:21:ab:59:42:be:e1:4b:88:76:e7:34:36:69:e7:7b:e9:dc:
         13:de:93:fa:c6:ad:29:ca:f4:8f:3b:fc:f6:10:36:7d:2a:31:
         f5:81:b4:4b:cd:f1:3b:dc:c5:24:56:42:29:2c:f1:f0:18:72:
         f6:90:ea:ed:26:3d:ce:f9:a3:9a:d3:30:ba:ed:8a:d7:7f:b7:
         7c:c7:47:63:52:d8:83:01:e4:e8:56:13:7d:7b:98:0d:95:69:
         73:7a:19:21:77:1a:67:68:2a:59:ab:9c:bb:11:ad:72:e2:3d:
         a9:63:81:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:39:12 2025 by rpki-client