Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/323830343a313337303a313430303a3a2f34302d3430203d3e203631393031.roa
File:                     323830343a313337303a313430303a3a2f34302d3430203d3e203631393031.roa (raw, json)
Hash identifier:          n0rL2NyuXwFUMO7cr9cUtPh2SWMl4AWtPRXl6G68rrs=
Subject key identifier:   AD:45:02:BD:59:77:AA:E5:C1:B7:49:C1:5D:87:A3:1B:8E:F6:FE:A4
Certificate issuer:       /CN=834FD73E60D786FC8CCB3F96DB2FA9765CEC8335
Certificate serial:       528C8DB4CDB8E63EB80D048645FC92974978D525
Authority key identifier: 83:4F:D7:3E:60:D7:86:FC:8C:CB:3F:96:DB:2F:A9:76:5C:EC:83:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/834FD73E60D786FC8CCB3F96DB2FA9765CEC8335.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/323830343a313337303a313430303a3a2f34302d3430203d3e203631393031.roa
Signing time:             Tue 07 Nov 2023 14:19:07 +0000
ROA not before:           Tue 07 Nov 2023 14:14:07 +0000
ROA not after:            Tue 05 Nov 2024 14:19:07 +0000
asID:                     61901
IP address blocks:        2804:1370:1400::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:8c:8d:b4:cd:b8:e6:3e:b8:0d:04:86:45:fc:92:97:49:78:d5:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=834FD73E60D786FC8CCB3F96DB2FA9765CEC8335
        Validity
            Not Before: Nov  7 14:14:07 2023 GMT
            Not After : Nov  5 14:19:07 2024 GMT
        Subject: CN=AD4502BD5977AAE5C1B749C15D87A31B8EF6FEA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a4:45:5e:77:65:57:68:e0:e8:81:61:0e:76:
                    6a:03:f6:34:e7:e8:51:56:23:7c:b2:fa:a4:31:55:
                    14:26:b3:bf:b0:7e:06:12:39:fc:7d:f0:9c:94:27:
                    2d:b2:b7:e7:8b:13:ba:64:21:e0:d2:f1:68:ca:0b:
                    3f:6d:c9:de:46:80:4e:dc:83:3b:3f:9a:9b:8e:71:
                    64:ac:fd:96:9f:41:11:08:20:42:05:47:7c:7e:cb:
                    f5:a0:0e:74:3b:ec:ee:c8:75:6c:16:72:55:64:20:
                    2a:ce:25:6f:0c:ab:10:80:bc:32:98:47:c7:ef:bf:
                    de:14:8c:31:40:d9:24:24:cf:45:ac:43:ac:8c:8d:
                    e2:a3:29:0c:e2:5c:c4:83:49:f1:2a:7e:c9:d2:40:
                    31:56:34:c4:2f:80:5a:58:e1:16:25:ed:0d:f2:5f:
                    9e:0c:bb:44:15:0a:68:7c:65:c1:05:fb:ce:0a:7f:
                    87:9b:22:04:6b:cf:93:a6:15:c7:5c:da:d4:8d:16:
                    29:f2:ee:6e:53:93:a8:f4:27:fa:b7:a8:7a:17:2f:
                    ad:46:f5:62:21:64:c9:5d:67:84:62:9b:e0:87:f4:
                    0d:72:2d:5f:f4:14:56:9c:8e:59:8a:4e:56:f8:6b:
                    1f:3b:ee:f7:14:5b:9f:9b:48:5b:ae:28:c3:17:c0:
                    8a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:45:02:BD:59:77:AA:E5:C1:B7:49:C1:5D:87:A3:1B:8E:F6:FE:A4
            X509v3 Authority Key Identifier:
                keyid:83:4F:D7:3E:60:D7:86:FC:8C:CB:3F:96:DB:2F:A9:76:5C:EC:83:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/834FD73E60D786FC8CCB3F96DB2FA9765CEC8335.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/834FD73E60D786FC8CCB3F96DB2FA9765CEC8335.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/323830343a313337303a313430303a3a2f34302d3430203d3e203631393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1370:1400::/40

    Signature Algorithm: sha256WithRSAEncryption
         51:01:1f:d0:98:f8:03:49:10:13:12:44:43:48:b5:4e:18:5f:
         9b:99:f0:a8:f3:20:89:c4:9e:4c:b4:a4:9f:90:d7:c3:84:02:
         fd:7a:37:d1:0f:4a:d3:f5:8f:73:95:fa:94:57:e5:72:ff:9c:
         35:8a:99:8d:28:5b:af:d5:ea:ac:7e:f7:6d:c8:b1:2a:f4:58:
         63:98:80:27:5b:20:28:54:12:ff:96:2d:e0:e5:92:65:6a:29:
         2e:c1:5c:7d:9e:51:35:c0:36:28:8d:a5:aa:79:9a:c2:67:fd:
         50:88:64:55:6e:d3:b7:97:0d:51:43:3a:6e:4c:85:74:ef:e6:
         08:7b:c9:14:3a:83:b3:59:20:c6:2f:3e:51:de:9e:ae:4d:1d:
         91:1c:4b:9e:d1:03:01:05:57:62:d6:e1:be:c1:6b:c2:aa:0c:
         df:be:40:34:fe:85:68:76:aa:92:7c:ce:63:32:cb:28:a2:1c:
         86:9d:79:de:95:30:67:2f:6b:ae:62:fe:d2:eb:70:eb:53:30:
         2d:77:3b:82:5b:b3:ef:23:2f:89:c3:09:25:0e:8f:80:4e:27:
         1d:34:41:bb:7d:99:fd:bf:ac:9d:7e:98:85:5c:0e:ba:7c:f2:
         05:bb:8b:74:5a:e6:03:05:47:bd:51:71:a9:bb:52:9d:f4:e4:
         a9:12:09:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:51 2025 by rpki-client