Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/323830343a336430303a383030303a3a2f33332d3333203d3e20323636323437.roa
File:                     323830343a336430303a383030303a3a2f33332d3333203d3e20323636323437.roa (raw, json)
Hash identifier:          03fPtQ4yiovFwnW/pPra7RXJtawLe1n5Xk2SDuaXI6o=
Subject key identifier:   32:92:FA:1C:48:63:44:00:F2:90:74:6F:1D:03:A7:F5:3A:75:0C:1E
Certificate issuer:       /CN=33C080E6201C3118EC8E437DCF9D314BBCFC74BE
Certificate serial:       0EFE8C1CAD84997669996597C90DA0804313980B
Authority key identifier: 33:C0:80:E6:20:1C:31:18:EC:8E:43:7D:CF:9D:31:4B:BC:FC:74:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33C080E6201C3118EC8E437DCF9D314BBCFC74BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/323830343a336430303a383030303a3a2f33332d3333203d3e20323636323437.roa
Signing time:             Tue 18 Jan 2022 13:49:47 +0000
ROA not before:           Tue 18 Jan 2022 13:44:47 +0000
ROA not after:            Tue 17 Jan 2023 13:49:47 +0000
asID:                     266247
IP address blocks:        2804:3d00:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:fe:8c:1c:ad:84:99:76:69:99:65:97:c9:0d:a0:80:43:13:98:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33C080E6201C3118EC8E437DCF9D314BBCFC74BE
        Validity
            Not Before: Jan 18 13:44:47 2022 GMT
            Not After : Jan 17 13:49:47 2023 GMT
        Subject: CN=3292FA1C48634400F290746F1D03A7F53A750C1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f4:6a:ce:30:69:d3:c1:f5:e7:ee:fe:b2:1f:
                    10:ac:43:3d:98:18:7c:2a:f0:2d:59:55:78:cf:08:
                    e2:1d:de:bb:a1:5a:5c:74:f8:e5:32:ae:e3:5a:66:
                    88:ec:9b:e8:5c:70:79:69:0d:34:93:03:eb:e0:9b:
                    45:05:da:1d:4c:0e:54:2e:42:7c:fd:39:59:17:16:
                    b9:ad:20:0f:05:55:3c:a7:4e:ee:e3:99:da:91:ae:
                    8f:e5:c4:9c:38:ea:bf:55:3b:a7:8a:7d:e0:53:54:
                    cb:d7:0e:cf:ad:d9:aa:66:a0:c9:a5:aa:a1:ca:91:
                    ca:1f:fa:a5:c3:cc:9b:24:03:88:62:b6:13:42:f9:
                    76:f3:e0:18:bc:49:68:4b:e2:37:d7:c7:47:9c:b9:
                    d2:a6:86:a6:fc:89:26:d2:a9:a0:03:dc:36:e7:58:
                    37:7a:6c:d8:d0:87:5d:4a:41:59:51:2e:0b:d3:ff:
                    3a:12:03:20:74:ff:b6:f7:18:02:e6:64:8c:dd:ed:
                    ee:f6:e9:15:28:4b:aa:58:cb:a6:e9:bb:d4:80:63:
                    65:06:ac:dd:d0:98:5a:03:be:65:d4:47:f3:6b:48:
                    8e:97:d4:b1:e9:40:ab:da:2d:f5:9f:3d:3e:83:c7:
                    74:d9:c7:38:d0:d9:49:d1:3d:fb:72:93:3a:8c:c7:
                    2c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:92:FA:1C:48:63:44:00:F2:90:74:6F:1D:03:A7:F5:3A:75:0C:1E
            X509v3 Authority Key Identifier:
                keyid:33:C0:80:E6:20:1C:31:18:EC:8E:43:7D:CF:9D:31:4B:BC:FC:74:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/33C080E6201C3118EC8E437DCF9D314BBCFC74BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33C080E6201C3118EC8E437DCF9D314BBCFC74BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/323830343a336430303a383030303a3a2f33332d3333203d3e20323636323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d00:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         46:8a:e4:57:b2:80:ae:29:3a:b2:0b:4d:bd:d4:98:4c:14:62:
         f0:49:f8:43:78:ce:c6:b5:7b:4c:21:2b:3a:ef:d9:08:ef:25:
         7e:28:8a:68:25:19:7f:1c:31:5e:ed:6a:1a:d3:44:da:2d:cc:
         dd:05:f1:2a:44:b6:20:bb:0e:17:07:34:33:5c:64:1a:e8:06:
         4b:46:6f:1e:26:01:b1:5f:63:1e:6f:cb:ff:cc:5e:db:e7:4a:
         b6:85:9c:72:7f:ce:6d:d6:c0:0e:ee:34:5e:fb:1d:97:bb:8b:
         c7:e8:d3:cd:ba:8d:65:d3:a9:fe:52:b4:28:0a:be:4e:b8:62:
         d2:b4:0c:32:2d:2d:0e:37:7c:d4:65:d2:fb:60:36:e0:f4:b0:
         4f:a3:d3:cc:01:8e:fc:33:b0:86:a5:8d:f4:99:b9:56:c1:a7:
         9a:fe:d4:0c:09:d6:08:6c:fc:4c:b2:ae:3c:03:c0:25:94:8b:
         99:de:4d:f6:a5:e8:88:40:23:3b:c5:e5:5a:36:bc:86:82:5d:
         3a:27:5b:a5:1d:9a:9c:6a:87:69:68:72:48:59:9d:ed:b3:81:
         04:c0:66:58:c1:da:7f:1e:12:57:a7:5a:35:30:64:ee:5b:a5:
         9d:8e:b8:05:13:cf:37:ce:38:1b:d1:1d:a5:41:c5:9f:f5:11:
         e8:d5:3e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:57 2025 by rpki-client