Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/323830343a336430303a633030303a3a2f33342d3334203d3e20323636323437.roa
File:                     323830343a336430303a633030303a3a2f33342d3334203d3e20323636323437.roa (raw, json)
Hash identifier:          owem0IE2LUinLM+7y0uZr8g4+MW+0YzfxRPxJ97Zb78=
Subject key identifier:   8F:65:71:7B:37:1E:8B:51:E1:9B:2D:91:54:70:E7:3A:5B:A7:C7:9F
Certificate issuer:       /CN=33C080E6201C3118EC8E437DCF9D314BBCFC74BE
Certificate serial:       578CD2310D6856834512E7D9E296C66E1C40E8AB
Authority key identifier: 33:C0:80:E6:20:1C:31:18:EC:8E:43:7D:CF:9D:31:4B:BC:FC:74:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33C080E6201C3118EC8E437DCF9D314BBCFC74BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/323830343a336430303a633030303a3a2f33342d3334203d3e20323636323437.roa
Signing time:             Tue 18 Jan 2022 13:49:49 +0000
ROA not before:           Tue 18 Jan 2022 13:44:49 +0000
ROA not after:            Tue 17 Jan 2023 13:49:49 +0000
asID:                     266247
IP address blocks:        2804:3d00:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:8c:d2:31:0d:68:56:83:45:12:e7:d9:e2:96:c6:6e:1c:40:e8:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33C080E6201C3118EC8E437DCF9D314BBCFC74BE
        Validity
            Not Before: Jan 18 13:44:49 2022 GMT
            Not After : Jan 17 13:49:49 2023 GMT
        Subject: CN=8F65717B371E8B51E19B2D915470E73A5BA7C79F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:94:62:6f:e8:0c:34:e0:39:6a:32:dd:f4:d6:
                    72:c4:95:68:b3:b2:34:c8:e0:9e:a4:c6:11:1c:41:
                    a1:af:22:a3:3c:d8:56:2a:2b:19:8d:6c:d0:d2:05:
                    9a:c4:ba:5a:21:c4:9e:18:cb:84:99:7e:a1:6a:92:
                    21:64:8e:14:0f:80:95:7d:de:20:ad:b3:43:9a:ec:
                    de:6d:cb:06:5f:1a:c9:6c:e3:1c:0e:8b:78:eb:8b:
                    3d:a0:e5:99:17:5b:90:f6:af:d2:d0:6c:4a:6b:01:
                    a4:af:0a:7e:43:39:83:53:6f:92:ee:8d:e5:f7:6c:
                    69:11:44:70:05:3e:f2:1f:7c:79:34:f3:b4:db:49:
                    6f:05:08:d2:46:57:2c:76:88:97:91:3f:ef:f6:f9:
                    c9:71:8f:4d:84:aa:77:88:5d:0f:7d:2d:79:d7:ca:
                    81:0a:43:87:f8:a1:fb:9d:9f:3d:58:96:99:ce:0e:
                    dd:44:59:28:24:08:a1:50:96:f2:4e:c9:08:12:ed:
                    5f:73:cf:c8:e2:22:c7:07:86:af:87:c3:ac:ba:19:
                    cb:2d:c5:c9:0f:56:25:69:4f:d6:4c:a4:d2:6e:af:
                    f5:d3:07:69:f2:2c:9c:6f:ab:fe:7c:18:03:39:0c:
                    b9:60:01:2d:4b:61:92:02:77:9e:4f:66:05:db:13:
                    44:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:65:71:7B:37:1E:8B:51:E1:9B:2D:91:54:70:E7:3A:5B:A7:C7:9F
            X509v3 Authority Key Identifier:
                keyid:33:C0:80:E6:20:1C:31:18:EC:8E:43:7D:CF:9D:31:4B:BC:FC:74:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/33C080E6201C3118EC8E437DCF9D314BBCFC74BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33C080E6201C3118EC8E437DCF9D314BBCFC74BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/323830343a336430303a633030303a3a2f33342d3334203d3e20323636323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d00:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3d:de:37:4f:97:33:ce:f6:6d:dd:23:d7:d6:bf:00:07:3b:0b:
         a8:27:d4:58:ee:1a:2f:b3:03:c4:3f:21:09:27:21:18:48:20:
         b6:52:87:9b:2c:31:d4:c5:97:ab:03:36:ae:e5:e7:50:01:20:
         36:a1:e1:96:58:ee:f4:f7:38:54:61:da:bf:ec:a0:4a:2a:1e:
         fe:f2:cd:e2:94:2c:47:7c:c8:b8:96:34:b9:d6:33:4e:67:40:
         a7:7a:c3:72:5d:67:e8:d0:5d:69:91:45:8d:fa:5f:66:0a:ce:
         0c:af:28:ca:b3:c1:6e:af:0f:80:89:6b:cd:db:9c:b9:ce:04:
         ff:f1:eb:e5:dc:44:01:d3:f6:32:e1:2c:98:b5:57:d4:16:2b:
         79:15:09:af:64:40:0b:38:e5:b8:85:b9:47:96:4a:cd:51:d2:
         64:15:f5:54:eb:18:26:2e:8d:5e:9f:0a:fd:b5:58:08:c9:41:
         9f:48:f3:ec:4b:d7:a4:b9:9f:65:55:be:80:94:d4:ef:a6:be:
         3e:90:5d:fd:05:8f:c2:ea:76:f0:3e:2a:2e:2b:68:1d:64:7e:
         08:f7:99:c0:56:fb:f9:f0:e4:5c:ea:31:2b:47:80:ba:ad:96:
         42:56:32:e8:09:90:20:4d:5d:2d:c3:c6:da:4f:48:07:00:ed:
         b9:b3:07:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:56 2025 by rpki-client