Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9qcYFbmdgit3byHLvEgn1G2RCqLavmCSH4WQeuFDy7pU/0/323830343a333839343a3a2f33332d3333203d3e20323636343837.roa
File:                     323830343a333839343a3a2f33332d3333203d3e20323636343837.roa (raw, json)
Hash identifier:          bbMilsMt5sd0moi12lv9JWxFb5bLcDPT/IOtieFJrjY=
Subject key identifier:   D1:4F:F5:F1:6C:0B:CA:D3:6A:BA:EF:CD:20:2A:4D:2D:23:96:1A:D9
Certificate issuer:       /CN=9EE7E228565399C7733D7B54CA4022D13B0E9209
Certificate serial:       5118CF02F1907B5C2D8FAA463FED6B6E8468883C
Authority key identifier: 9E:E7:E2:28:56:53:99:C7:73:3D:7B:54:CA:40:22:D1:3B:0E:92:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9EE7E228565399C7733D7B54CA4022D13B0E9209.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9qcYFbmdgit3byHLvEgn1G2RCqLavmCSH4WQeuFDy7pU/0/323830343a333839343a3a2f33332d3333203d3e20323636343837.roa
Signing time:             Fri 14 Jul 2023 12:17:56 +0000
ROA not before:           Fri 14 Jul 2023 12:12:56 +0000
ROA not after:            Fri 12 Jul 2024 12:17:56 +0000
asID:                     266487
IP address blocks:        2804:3894::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:18:cf:02:f1:90:7b:5c:2d:8f:aa:46:3f:ed:6b:6e:84:68:88:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EE7E228565399C7733D7B54CA4022D13B0E9209
        Validity
            Not Before: Jul 14 12:12:56 2023 GMT
            Not After : Jul 12 12:17:56 2024 GMT
        Subject: CN=D14FF5F16C0BCAD36ABAEFCD202A4D2D23961AD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ef:c0:aa:eb:9c:75:9c:f5:0f:42:b4:71:ca:
                    28:29:56:7e:2b:a8:30:ff:de:c8:65:ba:e0:ce:a6:
                    47:0a:40:c5:7a:4a:58:ce:47:26:a7:6b:af:9a:38:
                    69:47:27:cc:08:31:60:68:80:e9:52:59:80:09:95:
                    ce:93:00:91:a1:8e:3d:db:67:c2:61:34:ff:f7:88:
                    66:19:7e:1d:d9:31:60:43:d5:9c:14:47:f3:e5:c7:
                    2e:d6:e4:c4:83:19:e5:41:31:21:62:2d:33:cd:5e:
                    7a:bd:79:82:5f:d4:4d:99:cb:9c:cb:d7:32:d6:ac:
                    0c:b2:38:87:a8:a1:c0:9d:f0:a8:8a:c3:5e:96:bd:
                    d6:32:25:cf:7a:d3:0b:5a:3c:0b:4e:06:dc:16:3b:
                    f1:1e:ee:16:b6:71:55:4f:e8:dd:75:78:a1:78:41:
                    f3:c6:a0:e1:83:95:d3:88:5e:24:77:17:d5:b0:ac:
                    64:9d:d2:43:32:b7:9e:2d:00:d3:ed:07:e3:f3:c7:
                    20:4a:f7:9c:a3:fd:cc:34:25:69:64:88:05:e9:d0:
                    e7:0f:9d:5d:83:53:88:38:95:4d:a3:37:ef:00:82:
                    f0:1b:b8:d4:55:98:d3:91:5a:76:4b:8e:c0:57:27:
                    32:e5:2f:45:34:32:a0:b1:6e:4b:c0:14:bb:90:b4:
                    c9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:4F:F5:F1:6C:0B:CA:D3:6A:BA:EF:CD:20:2A:4D:2D:23:96:1A:D9
            X509v3 Authority Key Identifier:
                keyid:9E:E7:E2:28:56:53:99:C7:73:3D:7B:54:CA:40:22:D1:3B:0E:92:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9qcYFbmdgit3byHLvEgn1G2RCqLavmCSH4WQeuFDy7pU/0/9EE7E228565399C7733D7B54CA4022D13B0E9209.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9EE7E228565399C7733D7B54CA4022D13B0E9209.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qcYFbmdgit3byHLvEgn1G2RCqLavmCSH4WQeuFDy7pU/0/323830343a333839343a3a2f33332d3333203d3e20323636343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3894::/33

    Signature Algorithm: sha256WithRSAEncryption
         02:3d:93:1e:1e:5e:2d:a1:b6:9c:f1:1f:02:5c:aa:60:05:e0:
         f7:3d:e8:7e:c7:54:bc:c8:88:6b:f9:fa:4c:ab:c4:7d:5b:53:
         e9:3d:44:98:d0:42:d1:d4:8b:19:62:2f:77:a4:df:c0:64:a5:
         97:0c:79:5e:11:98:80:aa:11:ac:37:d3:83:b0:26:a3:ee:c9:
         0a:f8:b5:4d:cd:a0:4f:5f:20:99:87:39:a6:10:bc:5d:96:94:
         d2:b9:f6:4e:1f:72:47:53:97:6c:29:45:7c:a9:61:3e:b1:5a:
         90:6f:6c:86:76:b3:77:f5:5d:82:fd:ae:ec:fd:bd:e7:8b:7f:
         86:0c:ed:fa:d6:8b:47:5e:de:3a:05:d3:35:df:19:8f:10:ca:
         bb:81:2d:35:ab:c6:dd:2f:ce:e7:06:91:5a:c5:89:33:36:00:
         50:54:89:c0:2b:33:e7:2e:55:66:f9:65:4b:d1:d7:e5:ba:b1:
         bc:28:ad:ea:f7:00:5b:93:08:49:93:d7:f2:40:b7:14:38:b5:
         07:fa:c0:a2:1e:29:7b:6c:0a:23:76:2b:cb:df:1f:c7:d4:e0:
         16:f2:b5:73:59:1a:43:08:4d:42:c1:37:72:1a:d4:61:01:32:
         05:1b:d1:7c:20:71:53:2e:cf:7d:b1:10:b3:81:bb:8c:fb:01:
         bd:60:83:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:49 2025 by rpki-client