Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/323830343a3364633a6130303a3a2f34342d3434203d3e203532393637.roa
File:                     323830343a3364633a6130303a3a2f34342d3434203d3e203532393637.roa (raw, json)
Hash identifier:          C0nrMDrXgW2hPqqf8AbRWjWMc7Q62Fn2u3tuHOTFUfY=
Subject key identifier:   7A:3C:47:39:72:AD:77:BE:0F:8C:D8:A6:D0:3D:16:32:2F:85:91:E7
Certificate issuer:       /CN=133ACFA06BCB1C106E8FDAD07EB2655C37438C81
Certificate serial:       0DF96F8FE3F5DCBF46D279EAC303475A3CEE499C
Authority key identifier: 13:3A:CF:A0:6B:CB:1C:10:6E:8F:DA:D0:7E:B2:65:5C:37:43:8C:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/133ACFA06BCB1C106E8FDAD07EB2655C37438C81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/323830343a3364633a6130303a3a2f34342d3434203d3e203532393637.roa
Signing time:             Thu 01 Sep 2022 13:50:47 +0000
ROA not before:           Thu 01 Sep 2022 13:45:47 +0000
ROA not after:            Thu 31 Aug 2023 13:50:47 +0000
asID:                     52967
IP address blocks:        2804:3dc:a00::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:f9:6f:8f:e3:f5:dc:bf:46:d2:79:ea:c3:03:47:5a:3c:ee:49:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133ACFA06BCB1C106E8FDAD07EB2655C37438C81
        Validity
            Not Before: Sep  1 13:45:47 2022 GMT
            Not After : Aug 31 13:50:47 2023 GMT
        Subject: CN=7A3C473972AD77BE0F8CD8A6D03D16322F8591E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5f:e8:91:d6:88:95:ab:3e:90:a7:ca:d5:cd:
                    1e:ee:09:49:00:2b:6b:2b:7a:99:52:d4:29:7b:10:
                    3e:bd:14:dd:02:bf:86:20:89:15:0b:a7:7f:c9:03:
                    0a:d4:d1:c0:b4:50:57:db:40:33:9f:29:ce:cb:88:
                    c5:f4:7b:33:65:7b:6e:d9:e8:50:7f:6b:6b:0a:2c:
                    70:7d:1b:81:45:3d:52:56:92:ef:4c:03:c0:a2:c2:
                    a7:28:1f:b4:29:9d:c4:16:3b:9f:2f:71:16:13:04:
                    d0:62:1f:23:41:ad:86:ba:e9:85:f9:97:26:8e:64:
                    5b:da:b3:40:a9:e3:28:20:9d:bf:ab:d4:ce:f3:4f:
                    e9:56:6d:fe:92:42:3c:85:8d:57:e3:3c:43:2e:9c:
                    b2:ec:6f:56:aa:80:8a:8e:9e:27:e2:0b:0a:63:51:
                    95:a2:36:ce:e7:a1:9c:0b:f8:fa:9f:c3:4d:a6:4a:
                    7a:28:4a:2a:58:ad:28:d9:19:fb:f8:c2:04:7e:01:
                    2e:c4:b5:2f:8d:88:a3:41:58:1c:0a:dc:9f:aa:d8:
                    f2:95:6f:12:a5:8d:2c:15:7b:71:dd:8c:20:23:b6:
                    82:80:5a:25:c9:ce:c7:f3:36:8f:7c:7c:c2:5e:ba:
                    67:82:fb:ef:7d:90:22:60:db:c9:91:c7:09:c6:52:
                    64:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:3C:47:39:72:AD:77:BE:0F:8C:D8:A6:D0:3D:16:32:2F:85:91:E7
            X509v3 Authority Key Identifier:
                keyid:13:3A:CF:A0:6B:CB:1C:10:6E:8F:DA:D0:7E:B2:65:5C:37:43:8C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/133ACFA06BCB1C106E8FDAD07EB2655C37438C81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/133ACFA06BCB1C106E8FDAD07EB2655C37438C81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AZzoTwcQC3bPpaKY1M8Ram76cfyBDGMnPi9yrCyEsF4T/0/323830343a3364633a6130303a3a2f34342d3434203d3e203532393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3dc:a00::/44

    Signature Algorithm: sha256WithRSAEncryption
         99:63:2f:af:83:f5:17:99:9f:ed:e1:40:da:f6:18:b9:d2:08:
         fc:d1:79:88:74:d3:1b:28:72:17:f7:10:37:2b:8d:e4:f3:7d:
         1f:4f:94:48:dd:ef:d5:4e:92:4c:bd:7c:e6:09:ab:69:37:0b:
         c1:7c:d9:dd:2a:6d:eb:ac:58:d5:b1:a2:ef:b8:1d:c9:3e:f1:
         9e:c5:46:24:da:b4:30:96:87:8c:06:6f:9f:7f:43:d4:22:cf:
         57:b3:2e:41:bd:fd:e5:7c:14:72:0a:26:6f:e0:fd:33:2c:82:
         33:8c:82:58:14:95:fa:c3:ca:95:9d:90:1c:45:85:8c:d8:b8:
         c7:fd:60:cf:4d:2e:aa:6d:41:ba:66:73:3e:03:31:03:92:47:
         40:51:3a:32:4f:79:5f:e4:9c:5b:33:c5:99:89:09:39:28:9c:
         50:c1:f0:12:f0:27:aa:33:89:0b:36:7e:6b:e3:4e:2f:a2:1b:
         01:d8:e7:0e:5b:28:1e:cf:a6:9f:41:d0:e2:a5:00:6c:05:c4:
         d7:d5:da:31:47:24:15:7d:d3:6c:fa:4e:3d:29:c6:1a:12:1f:
         0b:a9:d8:ec:4b:e8:bd:de:56:6d:92:9d:56:4f:a4:b7:3d:94:
         96:8f:55:9a:c5:c7:da:b6:34:75:1e:12:04:67:82:ad:aa:2b:
         eb:60:e9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:33:33 2025 by rpki-client