Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BA8kaM5eE7n2kiVizjSCEggoRsbGgBFCgpMCorxpzrmA/0/323830343a316463383a3a2f33322d3333203d3e20323634333933.roa
File:                     323830343a316463383a3a2f33322d3333203d3e20323634333933.roa (raw, json)
Hash identifier:          CdmCs6gVNRT1ij9XhYRseZHcNWyAqYUZ6afqnbnWFqM=
Subject key identifier:   A4:8C:92:18:FD:76:1C:62:EC:AB:93:71:79:5F:59:0B:3C:C4:37:69
Certificate issuer:       /CN=9A3EAB903F3D92104C008B6C652EA21CCFACBF0D
Certificate serial:       1B7CC13B968865F3670664186BA20DEE841EF1FD
Authority key identifier: 9A:3E:AB:90:3F:3D:92:10:4C:00:8B:6C:65:2E:A2:1C:CF:AC:BF:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A3EAB903F3D92104C008B6C652EA21CCFACBF0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BA8kaM5eE7n2kiVizjSCEggoRsbGgBFCgpMCorxpzrmA/0/323830343a316463383a3a2f33322d3333203d3e20323634333933.roa
Signing time:             Mon 28 Aug 2023 19:32:39 +0000
ROA not before:           Mon 28 Aug 2023 19:27:39 +0000
ROA not after:            Mon 26 Aug 2024 19:32:39 +0000
asID:                     264393
IP address blocks:        2804:1dc8::/32 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:7c:c1:3b:96:88:65:f3:67:06:64:18:6b:a2:0d:ee:84:1e:f1:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A3EAB903F3D92104C008B6C652EA21CCFACBF0D
        Validity
            Not Before: Aug 28 19:27:39 2023 GMT
            Not After : Aug 26 19:32:39 2024 GMT
        Subject: CN=A48C9218FD761C62ECAB9371795F590B3CC43769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1c:36:6b:8d:1d:9f:8d:86:5b:c5:7f:7b:d4:
                    27:0d:cc:fb:fb:17:c2:8f:33:ea:aa:24:ae:93:0b:
                    f3:32:38:02:8c:71:16:a6:d3:1b:be:28:f4:af:f9:
                    8a:29:2a:c5:7b:7f:de:e1:b2:69:3b:43:86:3a:12:
                    49:21:01:9b:16:c7:84:a3:5b:2c:9a:0c:9f:91:dc:
                    97:9f:7a:27:ae:09:72:38:a2:72:bd:83:26:bc:06:
                    8d:52:32:8d:9e:3c:67:14:3d:c7:c1:2d:86:3c:03:
                    aa:87:8a:c4:9b:3d:42:44:0d:d4:34:15:74:f1:72:
                    29:fd:dd:29:07:8c:32:92:3d:ff:4a:17:0f:4c:30:
                    8d:2d:f1:d0:2c:f6:53:ab:e8:79:63:6f:7e:02:58:
                    15:85:ee:98:62:cb:4c:c4:fa:c8:0d:37:64:5d:cd:
                    b1:a4:15:f6:06:08:62:ac:b1:95:97:4f:59:ed:3d:
                    cd:76:32:9f:27:d4:47:04:e8:84:b2:8d:ea:3c:f0:
                    d5:fc:c0:4a:66:3a:4a:e2:b3:99:ac:51:6d:70:ae:
                    26:bb:f6:5a:04:e7:12:cd:e3:35:31:2b:5b:12:8e:
                    df:96:09:1c:1f:57:0b:41:4b:c5:94:02:e3:f7:d6:
                    ec:19:b2:31:73:47:51:8a:7a:65:b0:a8:ca:36:6a:
                    d5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:8C:92:18:FD:76:1C:62:EC:AB:93:71:79:5F:59:0B:3C:C4:37:69
            X509v3 Authority Key Identifier:
                keyid:9A:3E:AB:90:3F:3D:92:10:4C:00:8B:6C:65:2E:A2:1C:CF:AC:BF:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BA8kaM5eE7n2kiVizjSCEggoRsbGgBFCgpMCorxpzrmA/0/9A3EAB903F3D92104C008B6C652EA21CCFACBF0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A3EAB903F3D92104C008B6C652EA21CCFACBF0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BA8kaM5eE7n2kiVizjSCEggoRsbGgBFCgpMCorxpzrmA/0/323830343a316463383a3a2f33322d3333203d3e20323634333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1dc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:04:19:11:12:00:47:60:91:0f:90:76:e2:7f:43:d7:20:d6:
         df:bd:4b:3a:0e:36:3a:22:e1:27:42:73:52:af:a1:50:19:5b:
         1c:68:1f:cc:74:3b:e8:7f:36:a7:f3:63:b1:33:de:13:7c:70:
         4a:11:22:d0:8d:78:df:cd:5e:8d:a7:72:34:46:c7:41:8c:dc:
         5a:a7:52:10:e1:eb:f7:bb:b6:ea:e4:95:88:93:19:43:d0:c8:
         69:cb:25:a7:10:04:23:61:47:33:49:25:aa:28:16:24:e9:80:
         14:2b:30:a1:5a:71:73:5a:3b:3a:69:e3:b5:4f:26:9b:e6:a0:
         29:ec:3f:2e:6b:c4:3d:ca:19:95:37:1c:69:0b:23:ae:de:8b:
         40:5a:33:03:a8:5c:17:17:f1:cf:88:81:2e:3a:1f:ef:c1:e5:
         5d:a7:9f:76:df:94:cf:e2:7f:36:72:04:8a:23:26:12:aa:c1:
         c9:b8:4f:3e:59:7e:44:d4:26:d1:08:9d:7b:d2:6b:29:05:a1:
         89:e8:2d:16:93:8b:82:96:1e:1d:ab:7d:30:a2:ba:ca:3b:0c:
         9c:99:38:a3:9f:85:84:a0:a7:58:b1:5f:2a:04:d2:2c:94:5d:
         75:57:32:5d:90:4f:76:53:e7:29:fe:f7:d1:6e:36:17:8d:cf:
         9e:a4:0f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:12:36 2025 by rpki-client