Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a3a2f33362d3336203d3e20323633393730.roa
File:                     323830343a323839633a3a2f33362d3336203d3e20323633393730.roa (raw, json)
Hash identifier:          7zwz3pgUtxCyyk+hf5Uyoq9Ajh/3QvKjEb+4Ekv3NJU=
Subject key identifier:   02:F1:95:E4:07:37:23:FC:8A:96:A6:26:13:E6:4B:AE:89:96:DB:7F
Certificate issuer:       /CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Certificate serial:       67DC588708012A3325D5D37EB74ADD8DDAA39C76
Authority key identifier: 44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a3a2f33362d3336203d3e20323633393730.roa
Signing time:             Mon 20 Jan 2025 11:48:00 +0000
ROA not before:           Mon 20 Jan 2025 11:43:00 +0000
ROA not after:            Mon 19 Jan 2026 11:48:00 +0000
asID:                     263970
IP address blocks:        2804:289c::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:dc:58:87:08:01:2a:33:25:d5:d3:7e:b7:4a:dd:8d:da:a3:9c:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
        Validity
            Not Before: Jan 20 11:43:00 2025 GMT
            Not After : Jan 19 11:48:00 2026 GMT
        Subject: CN=02F195E4073723FC8A96A62613E64BAE8996DB7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ef:1f:81:d0:11:cc:30:b3:20:6d:15:b1:60:
                    f3:fd:54:18:7c:32:e1:69:6b:cb:a9:fe:82:9b:cf:
                    35:54:fa:35:2a:c8:08:d1:43:20:8b:77:de:a9:76:
                    b7:89:ac:6e:a7:43:63:d5:8f:1d:04:e2:75:2c:6b:
                    c9:ed:5c:75:f3:0b:8f:7f:52:48:f0:26:04:65:53:
                    58:81:04:97:f9:df:51:eb:ae:5c:b5:61:ee:af:0a:
                    e8:c6:b9:1a:e0:94:86:bc:af:c5:e3:35:ef:ca:b1:
                    90:5f:62:37:89:fc:13:65:9a:65:9e:eb:57:b5:48:
                    04:ed:ee:39:29:b6:9c:c6:0b:7c:f2:28:4a:44:b1:
                    36:f2:12:06:ff:8f:db:ce:8a:8f:80:87:33:2e:68:
                    18:dd:09:40:7a:72:b4:74:04:9d:d6:91:eb:e8:a3:
                    9b:49:38:ac:06:1b:91:4c:d4:49:94:d9:f1:f8:b4:
                    f8:99:63:d2:71:3c:5b:d8:3e:88:a3:69:b3:60:85:
                    e2:24:d9:ab:0d:8b:b6:61:46:1e:44:7a:9e:c3:78:
                    1f:28:17:75:2c:24:3e:fa:73:5c:98:f7:48:68:19:
                    6d:c4:0e:8c:20:50:94:8c:9f:d9:3c:f9:38:49:72:
                    c1:82:2d:cd:d7:5c:72:a6:39:42:25:ef:3a:aa:18:
                    8d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F1:95:E4:07:37:23:FC:8A:96:A6:26:13:E6:4B:AE:89:96:DB:7F
            X509v3 Authority Key Identifier:
                keyid:44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/44D7F23D5E330CBCE5452DA8159460000FACF7DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a3a2f33362d3336203d3e20323633393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:289c::/36

    Signature Algorithm: sha256WithRSAEncryption
         1a:fb:d9:4c:16:67:83:2a:12:c1:31:d2:ad:63:f9:7a:71:a0:
         d6:50:81:5b:be:05:7b:1a:bc:96:2f:6a:fd:2b:fb:54:94:63:
         1d:d7:6a:2a:63:76:1a:a4:3d:1b:4e:19:a3:83:3d:f9:6d:27:
         0e:a8:64:8c:fe:dc:02:97:a1:e1:5b:6c:8d:8b:61:b7:3b:8c:
         f7:67:4b:c7:93:3a:42:62:56:f2:62:81:c3:96:1e:6e:5b:65:
         e4:9c:78:e9:a8:2b:2d:12:3d:54:42:4c:6c:20:60:da:d8:0a:
         24:55:e8:84:0f:ef:42:19:8c:c1:5f:41:fa:96:eb:f7:27:7a:
         b4:7d:2f:f4:d3:ba:eb:08:fe:8b:2b:ce:28:8b:c3:3f:8d:46:
         33:55:52:5e:56:a9:74:ab:30:ea:99:d8:68:e4:d3:c5:9d:3e:
         fb:1d:cb:5e:fe:30:14:30:12:db:1c:18:5d:f1:6f:bd:ef:96:
         62:89:b4:3b:18:a7:53:52:df:70:d2:74:5a:6d:24:0f:bd:f3:
         88:e1:7c:db:09:dd:73:4f:ac:0d:6d:d6:6a:ee:08:1f:47:07:
         88:2d:5b:dc:12:03:06:c5:fa:81:23:3f:77:1a:12:55:17:7e:
         5d:64:c1:73:bc:96:76:e4:72:3a:8c:fd:a1:cd:1d:29:da:6a:
         6b:6a:1e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:18:38 2025 by rpki-client