Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fnADvJuByrnFb3VdGiV4aJG5DmvV5M3RpLeLiQTWkuo/0/323830343a353331383a3a2f33322d3332203d3e20323638353633.roa
File:                     323830343a353331383a3a2f33322d3332203d3e20323638353633.roa (raw, json)
Hash identifier:          RwTt47OWq0aeHh92+F34J0roZy6mI6o7IPbiY5yIiTc=
Subject key identifier:   9A:C1:3A:9A:12:EE:6B:BD:3C:07:00:AF:9A:DE:26:F0:C3:38:39:C1
Certificate issuer:       /CN=347666AA407C3FDDD24E9F81A8D0AD40D4EB540C
Certificate serial:       4A50250A6BA5787021588FD9D5024FAF03E71493
Authority key identifier: 34:76:66:AA:40:7C:3F:DD:D2:4E:9F:81:A8:D0:AD:40:D4:EB:54:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/347666AA407C3FDDD24E9F81A8D0AD40D4EB540C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fnADvJuByrnFb3VdGiV4aJG5DmvV5M3RpLeLiQTWkuo/0/323830343a353331383a3a2f33322d3332203d3e20323638353633.roa
Signing time:             Thu 11 Jul 2024 13:15:54 +0000
ROA not before:           Thu 11 Jul 2024 13:10:54 +0000
ROA not after:            Thu 10 Jul 2025 13:15:54 +0000
asID:                     268563
IP address blocks:        2804:5318::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:50:25:0a:6b:a5:78:70:21:58:8f:d9:d5:02:4f:af:03:e7:14:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=347666AA407C3FDDD24E9F81A8D0AD40D4EB540C
        Validity
            Not Before: Jul 11 13:10:54 2024 GMT
            Not After : Jul 10 13:15:54 2025 GMT
        Subject: CN=9AC13A9A12EE6BBD3C0700AF9ADE26F0C33839C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4b:e8:7b:ba:cb:02:aa:e3:97:d4:ee:2a:4a:
                    55:dc:36:13:26:dd:b2:bd:d3:68:e9:91:c5:5a:cb:
                    78:b8:c9:9e:df:ae:dd:05:a5:e4:d2:8b:3c:9d:9a:
                    f4:44:a6:e8:c0:3d:04:c6:37:75:97:a5:68:01:08:
                    57:11:d6:87:0c:92:b6:c6:b8:ee:7f:cd:d1:3a:a8:
                    36:76:d9:a0:8e:75:f7:aa:d0:e6:d6:59:78:1a:55:
                    ae:45:e8:6a:b9:fc:21:53:bc:bf:e6:7b:7a:da:ac:
                    91:aa:c9:12:89:08:15:13:10:96:19:17:01:19:bc:
                    47:0d:c9:5d:c3:e1:33:c5:08:d9:30:30:26:84:a2:
                    3d:17:7a:6a:59:f7:8a:03:f5:d5:8f:91:55:85:47:
                    88:bc:46:6d:3c:be:2e:ae:6d:a7:85:5c:88:d7:4c:
                    52:bc:75:43:ae:f8:8c:5c:3c:a6:e2:3e:aa:ec:0d:
                    74:dc:17:50:d6:d5:8e:e7:1b:56:0f:77:2f:4d:aa:
                    4c:88:fd:7d:66:8d:f8:65:6c:70:a6:fc:eb:86:9e:
                    52:c5:5a:12:ac:e9:76:ef:dd:2b:6e:3c:5a:3c:28:
                    dd:00:ec:1d:95:41:a3:3f:6b:00:07:47:5f:d1:01:
                    fb:f8:fd:e7:be:47:cb:b0:0d:42:a9:9a:34:c4:f6:
                    7a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C1:3A:9A:12:EE:6B:BD:3C:07:00:AF:9A:DE:26:F0:C3:38:39:C1
            X509v3 Authority Key Identifier:
                keyid:34:76:66:AA:40:7C:3F:DD:D2:4E:9F:81:A8:D0:AD:40:D4:EB:54:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fnADvJuByrnFb3VdGiV4aJG5DmvV5M3RpLeLiQTWkuo/0/347666AA407C3FDDD24E9F81A8D0AD40D4EB540C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/347666AA407C3FDDD24E9F81A8D0AD40D4EB540C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fnADvJuByrnFb3VdGiV4aJG5DmvV5M3RpLeLiQTWkuo/0/323830343a353331383a3a2f33322d3332203d3e20323638353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5318::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:11:f9:63:d2:77:0b:ae:e8:7d:91:7e:fb:d4:50:05:87:22:
         d7:20:69:72:d6:99:aa:bb:e7:a3:02:fe:b4:ec:ad:fb:91:2e:
         c6:28:75:96:ef:98:bb:65:f2:d9:09:a5:f9:22:c6:9d:af:ed:
         9a:62:3e:b6:9d:69:f6:22:f4:12:86:b0:ed:67:23:0d:34:dc:
         aa:62:3f:36:22:a9:5f:c1:15:0a:34:ca:00:ed:cb:ad:44:57:
         d1:84:cb:d8:63:26:59:02:99:f1:f3:ba:f2:a2:9b:f4:7e:79:
         29:2f:c9:8a:f1:83:f6:c0:27:0c:dd:5d:c7:f6:bd:d0:78:f8:
         e4:22:27:99:43:96:31:6c:af:f6:c7:39:f6:62:55:3a:22:7d:
         32:c7:34:eb:d1:c6:3e:1e:d0:68:13:09:8f:72:6e:cc:52:fa:
         01:00:93:e5:81:5f:ee:ae:df:31:6c:80:7e:d1:bd:84:34:11:
         06:e8:d3:fb:cc:7c:67:9e:9e:34:a0:e5:1d:f3:63:fe:53:ec:
         87:1d:01:f2:0d:41:a4:f1:35:a6:3e:8b:a8:12:aa:9d:27:4b:
         34:89:bb:01:04:77:4f:4f:27:c7:5b:fd:b0:19:4e:e5:b3:27:
         fd:fe:4f:fc:72:84:17:a9:c1:f1:35:b6:6f:ac:49:77:6a:b1:
         68:71:59:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:14:27 2025 by rpki-client