Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/323830343a6138303a313030303a3a2f34302d3430203d3e20323632323933.roa
File:                     323830343a6138303a313030303a3a2f34302d3430203d3e20323632323933.roa (raw, json)
Hash identifier:          3RH4JD4dlQYmFeh+ThXFziCPip73KJXyNuAG+2gKmRo=
Subject key identifier:   57:01:45:93:15:BD:1C:94:99:00:FE:6C:19:E7:1C:8D:26:52:3A:5C
Certificate issuer:       /CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
Certificate serial:       22F09221C5D774B073AA1DB770FA2DAF76160F11
Authority key identifier: 1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/323830343a6138303a313030303a3a2f34302d3430203d3e20323632323933.roa
Signing time:             Tue 02 Jan 2024 21:16:40 +0000
ROA not before:           Tue 02 Jan 2024 21:11:40 +0000
ROA not after:            Tue 31 Dec 2024 21:16:40 +0000
asID:                     262293
IP address blocks:        2804:a80:1000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:f0:92:21:c5:d7:74:b0:73:aa:1d:b7:70:fa:2d:af:76:16:0f:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
        Validity
            Not Before: Jan  2 21:11:40 2024 GMT
            Not After : Dec 31 21:16:40 2024 GMT
        Subject: CN=5701459315BD1C949900FE6C19E71C8D26523A5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:50:db:91:d5:3a:19:53:51:b4:8d:cd:69:f2:
                    2b:bc:3f:32:e4:8d:04:1b:9a:59:a0:66:08:14:3a:
                    d0:50:0f:97:0f:cd:42:81:a0:9a:b4:5a:a6:82:85:
                    a9:40:33:9a:cb:28:c1:ed:2f:7a:5b:58:08:df:a2:
                    84:b5:c5:de:4f:d7:e5:4b:16:0b:45:8a:14:d8:68:
                    61:be:38:c5:8d:99:31:38:25:75:5d:05:04:f3:4f:
                    ee:27:ba:22:9e:3e:a0:94:0c:d3:31:73:49:0f:a0:
                    bc:ef:3a:91:37:33:24:ac:d2:a4:23:4b:e6:59:ed:
                    9e:2e:26:ae:97:bc:50:4a:5c:d3:e8:62:69:18:ec:
                    32:6d:a4:1d:e9:93:81:93:5d:fc:ca:e5:3b:91:f7:
                    65:06:ea:a0:6e:98:98:f1:04:9a:1a:bc:2e:b2:c8:
                    7d:de:e9:b4:f4:3e:8c:22:9a:6e:7e:bd:14:60:95:
                    01:c9:fb:db:29:76:44:78:10:06:b1:ed:44:36:f6:
                    58:89:5d:c5:45:4e:5f:69:20:fa:f9:67:6c:0c:41:
                    e3:bd:cc:bc:7e:61:6e:7e:ab:e0:a1:a6:c4:23:cc:
                    d9:33:66:a4:0d:43:7f:8a:97:2c:8e:f7:75:51:8e:
                    b0:cc:cf:16:b5:09:7c:a4:0d:d3:71:b5:50:3d:04:
                    5c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:01:45:93:15:BD:1C:94:99:00:FE:6C:19:E7:1C:8D:26:52:3A:5C
            X509v3 Authority Key Identifier:
                keyid:1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/323830343a6138303a313030303a3a2f34302d3430203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a80:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         85:e8:48:df:ca:50:7b:a0:b9:43:1d:0b:d0:2f:2e:93:8e:3a:
         b4:ad:3e:85:8a:80:e3:d5:cf:81:a0:d4:ec:73:7f:a2:c8:69:
         41:b0:ad:62:e0:63:a4:9b:51:e2:1e:ec:cb:76:7a:e5:53:99:
         ff:a7:21:91:90:c2:22:3e:87:9f:15:30:ca:da:e2:59:8a:f0:
         8f:73:8b:84:09:3a:5e:c6:4e:95:bd:23:7f:82:84:0e:e3:9e:
         df:ff:1b:1b:71:a1:f7:bf:bc:18:75:20:41:e3:c9:d3:43:aa:
         3f:c0:22:54:28:80:78:b9:6b:a1:7e:ad:42:3d:92:30:e5:44:
         7e:b7:aa:74:e4:20:8a:95:d3:cd:2a:36:ef:2d:6b:3d:dd:9b:
         68:22:c0:f8:24:42:92:d7:22:41:a9:1d:29:02:0e:f1:1b:a8:
         df:c8:44:25:9f:94:76:9b:79:68:d0:c3:6a:d5:9c:dc:c2:c2:
         29:cb:b0:17:fa:82:10:42:a4:1d:de:3c:07:75:40:7f:d0:5b:
         e9:06:7e:eb:0b:ec:f6:9e:6b:ff:84:3a:d4:23:9a:cb:2b:15:
         c9:37:a4:33:1e:08:f4:79:4c:69:8f:52:d3:80:15:de:be:b4:
         fc:fe:a5:66:92:aa:3d:87:3e:05:bb:bc:ed:68:5c:ad:47:cd:
         5c:0a:82:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 19:32:14 2025 by rpki-client