Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/323830343a313937633a3a2f33322d313238203d3e203631373937.roa
File:                     323830343a313937633a3a2f33322d313238203d3e203631373937.roa (raw, json)
Hash identifier:          bR6aL9FnxjfgyrZasCZAWXju+FWFpr+SttM6wTzsjt4=
Subject key identifier:   98:7F:7D:3C:79:5C:3D:1F:C3:3B:B7:ED:CD:ED:B0:CC:89:0E:21:3D
Certificate issuer:       /CN=BDC7634940E067A4864ED1C399A802F0320CD4A4
Certificate serial:       09D31D91AE4BEC6A14AEB5C580FB86E3B21DFD3B
Authority key identifier: BD:C7:63:49:40:E0:67:A4:86:4E:D1:C3:99:A8:02:F0:32:0C:D4:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDC7634940E067A4864ED1C399A802F0320CD4A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/323830343a313937633a3a2f33322d313238203d3e203631373937.roa
Signing time:             Thu 31 Aug 2023 14:08:40 +0000
ROA not before:           Thu 31 Aug 2023 14:03:40 +0000
ROA not after:            Thu 29 Aug 2024 14:08:40 +0000
asID:                     61797
IP address blocks:        2804:197c::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:d3:1d:91:ae:4b:ec:6a:14:ae:b5:c5:80:fb:86:e3:b2:1d:fd:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDC7634940E067A4864ED1C399A802F0320CD4A4
        Validity
            Not Before: Aug 31 14:03:40 2023 GMT
            Not After : Aug 29 14:08:40 2024 GMT
        Subject: CN=987F7D3C795C3D1FC33BB7EDCDEDB0CC890E213D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:dd:6c:1d:c8:84:a3:fe:f4:63:6d:a8:2b:f1:
                    80:b9:77:2e:56:20:fb:f7:58:81:2c:3a:3e:a4:fd:
                    f3:7d:c4:1e:65:70:2b:e3:ba:4f:2b:aa:0f:ce:f9:
                    49:ce:4c:70:aa:6f:ae:cc:a2:1b:da:a7:90:90:94:
                    31:80:c1:bf:f2:47:e7:56:c3:1f:f4:a7:a3:0e:4e:
                    55:7b:ad:83:65:92:a1:41:42:27:3c:ed:1d:2b:ca:
                    11:7d:00:a2:ad:f4:3c:3d:4c:a1:0e:df:2b:d2:8a:
                    cc:e6:5a:d2:2b:c7:6f:d1:f0:5e:16:b6:2b:b2:d8:
                    94:6e:bd:af:8e:05:d3:cc:0b:8b:84:f2:b7:18:f1:
                    55:95:5b:29:09:39:61:df:3f:90:5a:a4:63:8c:a6:
                    3e:31:8c:c8:af:61:de:7a:9a:18:78:bb:46:14:21:
                    38:9c:bc:99:b9:66:2f:29:3d:ba:fd:dc:d7:c3:54:
                    de:c7:93:b5:85:64:11:7a:bd:f7:ad:2b:a9:05:c9:
                    db:bf:11:f3:a5:91:8b:c6:b4:62:6f:1a:0c:c4:c1:
                    be:53:78:38:7c:96:8e:67:42:dd:ed:08:73:39:7e:
                    bb:c3:c9:cb:ab:5f:3a:a5:b1:14:bd:4b:d2:34:cf:
                    a1:52:e6:63:3d:f7:53:d0:46:23:87:81:8d:2c:e9:
                    04:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:7F:7D:3C:79:5C:3D:1F:C3:3B:B7:ED:CD:ED:B0:CC:89:0E:21:3D
            X509v3 Authority Key Identifier:
                keyid:BD:C7:63:49:40:E0:67:A4:86:4E:D1:C3:99:A8:02:F0:32:0C:D4:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/BDC7634940E067A4864ED1C399A802F0320CD4A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDC7634940E067A4864ED1C399A802F0320CD4A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/323830343a313937633a3a2f33322d313238203d3e203631373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:197c::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:51:ac:25:d1:d1:01:72:c8:cd:4e:3b:21:25:5c:f2:b7:c2:
         c0:6d:68:a1:55:c2:bd:aa:5e:b3:d1:ca:cc:b8:b5:c7:57:a8:
         23:83:2f:8c:1e:04:2c:c1:da:da:07:d1:be:68:55:7b:67:86:
         d3:37:99:fe:02:08:34:58:5e:51:e2:15:87:03:be:ac:50:af:
         80:23:77:6c:44:2e:1d:4d:e9:a1:eb:5a:62:4c:6a:ad:7d:90:
         1e:5e:1e:d2:1e:cb:d3:b1:da:79:36:c3:15:52:60:8d:9a:a7:
         92:97:2a:4f:98:82:a5:f3:76:47:28:59:29:c9:30:e3:3f:ce:
         3b:41:4d:8e:68:84:e7:89:e6:38:fc:8c:af:26:d3:27:0d:7e:
         5a:9d:3c:9e:47:c0:af:c1:fd:a0:67:60:7f:ba:a9:2f:d7:43:
         08:c2:83:8e:33:09:26:22:38:aa:a0:62:f0:57:4a:ea:06:f3:
         63:de:c5:85:14:49:ef:17:87:cc:ef:23:f2:6b:72:af:86:1d:
         9d:5f:cc:d5:18:90:d5:55:54:e5:46:74:f3:29:55:57:46:75:
         00:c0:68:af:a5:1e:4d:53:c5:98:c4:15:e8:5b:c0:90:a8:2e:
         17:36:af:db:a2:e6:37:08:66:ad:2f:49:4e:11:51:80:b5:76:
         c3:01:3d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:24:13 2025 by rpki-client