Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/0/323830343a323236343a3a2f33362d3336203d3e20323634303936.roa
File:                     323830343a323236343a3a2f33362d3336203d3e20323634303936.roa (raw, json)
Hash identifier:          8azkaYJhSEZIIn5XMJqUtByXTVo9dIdfv1PACnWNzeE=
Subject key identifier:   91:D6:92:9E:F4:7E:E8:B0:22:EA:CC:1E:CB:88:B1:21:83:1F:8A:5E
Certificate issuer:       /CN=BD9063ADADF748EEA58A242F1668AF322657ABD1
Certificate serial:       1C764FB9C69C002F4704EFAE709FBD18E5C42FE5
Authority key identifier: BD:90:63:AD:AD:F7:48:EE:A5:8A:24:2F:16:68:AF:32:26:57:AB:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BD9063ADADF748EEA58A242F1668AF322657ABD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/0/323830343a323236343a3a2f33362d3336203d3e20323634303936.roa
Signing time:             Fri 28 Jul 2023 20:00:01 +0000
ROA not before:           Fri 28 Jul 2023 19:55:01 +0000
ROA not after:            Fri 26 Jul 2024 20:00:01 +0000
asID:                     264096
IP address blocks:        2804:2264::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:76:4f:b9:c6:9c:00:2f:47:04:ef:ae:70:9f:bd:18:e5:c4:2f:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD9063ADADF748EEA58A242F1668AF322657ABD1
        Validity
            Not Before: Jul 28 19:55:01 2023 GMT
            Not After : Jul 26 20:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b6:7e:12:e7:11:c6:82:0d:96:9b:c9:21:fe:
                    7e:e4:4c:f1:f2:4e:f6:bf:72:91:28:f4:6e:c1:ed:
                    9b:18:e3:09:d9:43:6d:72:d1:07:15:83:e4:56:68:
                    58:c3:42:98:7c:1e:47:b9:f8:0d:5c:0a:7a:88:32:
                    53:b1:ed:34:17:d1:5f:ba:7e:d9:3e:f6:89:57:be:
                    a8:9c:5b:8e:71:3c:af:04:ae:71:67:7b:d6:51:93:
                    dc:6b:18:72:e2:89:99:cd:f4:79:b4:cb:94:26:d9:
                    d1:cf:1f:31:ae:bf:1f:f2:f7:bb:fd:7d:cf:11:fc:
                    ab:64:cf:96:9e:f6:c4:17:ff:6e:ca:01:3d:0f:7f:
                    64:a4:3c:d7:7b:cd:0a:ba:e8:9b:c0:59:02:ec:9f:
                    8d:25:c4:29:30:3e:9f:22:3f:05:8d:45:56:53:c4:
                    3a:1e:40:42:a3:0e:42:7a:75:a1:1f:87:00:4d:19:
                    b3:fe:14:da:f8:78:2d:17:bd:89:eb:7f:35:61:bf:
                    9e:bf:fd:d3:f3:c0:03:c5:ba:5a:18:46:4a:ac:39:
                    96:70:6d:e6:e9:87:14:47:68:96:83:cd:5e:9c:74:
                    b2:46:0f:57:f6:f2:59:e6:e7:97:27:56:38:37:24:
                    60:4b:50:0a:b9:0c:bc:f3:86:e3:6c:41:e3:16:83:
                    87:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:D6:92:9E:F4:7E:E8:B0:22:EA:CC:1E:CB:88:B1:21:83:1F:8A:5E
            X509v3 Authority Key Identifier:
                keyid:BD:90:63:AD:AD:F7:48:EE:A5:8A:24:2F:16:68:AF:32:26:57:AB:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/0/BD9063ADADF748EEA58A242F1668AF322657ABD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BD9063ADADF748EEA58A242F1668AF322657ABD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/0/323830343a323236343a3a2f33362d3336203d3e20323634303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2264::/36

    Signature Algorithm: sha256WithRSAEncryption
         1e:f8:2a:b9:92:e0:f1:b1:77:c3:89:2f:b4:44:2c:a5:f4:cd:
         6e:cc:76:5c:eb:a5:13:5b:a0:98:c1:c5:73:74:c7:6a:b4:ec:
         01:cd:06:4a:71:a5:48:20:17:a0:17:0e:07:24:6c:62:e6:6d:
         cb:3c:a2:f5:22:cf:4f:0c:8c:8a:34:0e:38:4e:52:ff:c0:84:
         ad:01:e9:00:b0:a8:23:e8:95:b2:15:42:1c:ec:4d:8f:bc:b0:
         38:cb:23:89:4c:82:2f:91:ed:37:1d:2e:b7:6c:ff:46:37:b3:
         5e:36:25:d2:1b:4a:94:c5:a6:c3:1c:a6:9a:a3:2d:eb:1f:a4:
         bb:a2:f0:de:90:8b:cf:56:3f:dd:64:3b:c1:77:3c:36:b1:e6:
         58:cc:77:6d:1e:76:1f:57:08:99:c9:a7:32:94:05:bc:b6:f8:
         d5:95:30:3b:31:86:dd:e8:7d:d7:82:03:47:b9:d8:a8:ba:e9:
         1e:f2:f7:a3:e9:fd:e9:97:a5:6d:25:bf:fa:34:29:ee:f2:08:
         97:03:57:a1:c8:f7:65:78:19:49:dc:48:c4:28:4c:6e:fa:9a:
         af:ba:34:55:62:64:ff:6d:a7:fb:91:6e:3c:e9:a2:76:d2:ee:
         30:7a:8a:2c:b0:c6:5f:71:56:02:77:05:04:d3:53:0b:31:4b:
         6e:5b:8a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:07 2025 by rpki-client