Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a393530303a3a2f34382d3438203d3e20323730373634.roa
File:                     323830343a373131303a393530303a3a2f34382d3438203d3e20323730373634.roa (raw, json)
Hash identifier:          kjGYj3QbCEzC+c6W2q9uUqlTPCWkaVPVg1yOLIZr3Ew=
Subject key identifier:   2A:2F:40:56:24:CA:08:4B:AB:40:4C:93:F1:45:32:A2:69:C1:8A:2A
Certificate issuer:       /CN=7CB7E9AD982EB7291384E505B59CE3BBEEDA3A23
Certificate serial:       7234A18401192AE0051EF063CC6AC15A496EBE41
Authority key identifier: 7C:B7:E9:AD:98:2E:B7:29:13:84:E5:05:B5:9C:E3:BB:EE:DA:3A:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CB7E9AD982EB7291384E505B59CE3BBEEDA3A23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a393530303a3a2f34382d3438203d3e20323730373634.roa
Signing time:             Sat 22 Jul 2023 19:08:50 +0000
ROA not before:           Sat 22 Jul 2023 19:03:50 +0000
ROA not after:            Sat 20 Jul 2024 19:08:50 +0000
asID:                     270764
IP address blocks:        2804:7110:9500::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:34:a1:84:01:19:2a:e0:05:1e:f0:63:cc:6a:c1:5a:49:6e:be:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB7E9AD982EB7291384E505B59CE3BBEEDA3A23
        Validity
            Not Before: Jul 22 19:03:50 2023 GMT
            Not After : Jul 20 19:08:50 2024 GMT
        Subject: CN=2A2F405624CA084BAB404C93F14532A269C18A2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3d:a6:5d:59:c1:18:79:0d:3d:82:c2:8f:03:
                    66:d7:f4:86:7b:af:94:0c:72:6d:3a:82:04:74:dd:
                    22:5f:ec:18:4c:0c:e0:59:55:f6:89:89:5c:4f:87:
                    33:83:0c:aa:fe:49:a8:31:3c:5c:b8:ba:bb:12:13:
                    a1:8d:3f:20:85:e3:81:89:99:74:bb:a4:4c:08:a8:
                    f6:b0:53:a5:26:f8:ea:d1:7e:bd:a0:ae:7b:32:85:
                    29:98:55:74:fb:0b:e0:57:76:79:50:09:9a:4f:e0:
                    bd:0f:46:08:b9:d5:52:f4:59:00:b4:00:ae:3e:47:
                    3b:78:d9:15:9e:85:35:b1:90:1e:30:c7:2e:1b:7c:
                    01:9e:c3:86:c7:57:d5:e9:2a:e3:da:74:73:16:76:
                    2c:31:f7:a9:dc:70:d6:f4:64:aa:86:75:02:60:de:
                    51:6d:ed:d2:58:24:55:6d:f2:b0:76:50:39:6a:91:
                    1c:6b:cd:3e:31:5d:4c:b3:6c:a3:e5:cb:31:16:5c:
                    11:3a:25:ee:af:d7:a1:27:f3:01:00:aa:1f:6b:cc:
                    64:62:44:0b:7d:01:52:d1:2a:1c:0a:54:1e:3b:98:
                    df:1e:4e:c7:b2:dd:1f:c8:49:52:96:1a:43:ac:b8:
                    56:31:d3:7f:e8:5a:56:5e:c2:06:71:70:77:43:72:
                    bc:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:2F:40:56:24:CA:08:4B:AB:40:4C:93:F1:45:32:A2:69:C1:8A:2A
            X509v3 Authority Key Identifier:
                keyid:7C:B7:E9:AD:98:2E:B7:29:13:84:E5:05:B5:9C:E3:BB:EE:DA:3A:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/7CB7E9AD982EB7291384E505B59CE3BBEEDA3A23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CB7E9AD982EB7291384E505B59CE3BBEEDA3A23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a393530303a3a2f34382d3438203d3e20323730373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7110:9500::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:f3:f4:36:84:a4:ed:e2:db:c2:45:cb:e1:69:db:29:de:11:
         b7:63:fe:e4:67:3e:76:fd:86:d3:82:d2:6b:2f:fa:5f:5d:15:
         1c:9c:f9:54:16:35:85:25:3c:68:0e:f9:73:ec:03:f0:03:17:
         4d:2f:8f:59:b9:f3:00:59:90:4d:ed:3b:e6:dd:d9:cd:6a:34:
         0f:57:34:1f:a5:e9:be:0a:22:5a:31:72:3b:af:24:02:f9:40:
         bd:8d:56:28:3c:21:f0:b1:4c:df:3d:e2:4b:f4:cc:9c:4a:e9:
         85:b7:ba:c4:13:5e:d6:b3:a5:09:a2:f6:ce:25:e1:c0:f2:af:
         4f:08:5a:a7:08:74:21:aa:3e:35:72:ad:ac:49:83:23:a6:3a:
         d7:80:5f:97:be:76:59:90:ef:f4:c2:dd:f5:cf:bf:0e:13:3a:
         c3:69:a6:cb:e6:18:ed:bb:d6:ba:8e:a5:b7:0b:e1:a5:c1:7b:
         5b:5c:70:bb:39:3e:49:b5:6e:ed:0c:05:85:52:9d:3d:6c:70:
         0c:75:a1:58:9a:45:11:b1:cd:b8:5c:af:f1:0f:e2:51:34:e0:
         47:73:f2:b4:38:39:07:a1:67:60:11:25:36:45:9f:81:dd:61:
         58:e8:f1:24:d7:76:fb:fd:47:7f:7d:44:16:12:b1:37:90:1a:
         fc:d1:f5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:07:28 2025 by rpki-client