Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BA8kaM5eE7n2kiVizjSCEggoRsbGgBFCgpMCorxpzrmA/0/323830343a316463383a656530303a3a2f34302d3430203d3e20323634333933.roa
File:                     323830343a316463383a656530303a3a2f34302d3430203d3e20323634333933.roa (raw, json)
Hash identifier:          xHma4NtONvoiEaMjGy6FsxcDWqRXG8VIOX1MXCpa8TA=
Subject key identifier:   0A:E2:16:B2:E3:DA:FC:2A:8E:6D:4F:26:2E:1D:9D:52:40:A9:CE:43
Certificate issuer:       /CN=9A3EAB903F3D92104C008B6C652EA21CCFACBF0D
Certificate serial:       79139CDA138401F9EE92540C70F5748C8C4D9C07
Authority key identifier: 9A:3E:AB:90:3F:3D:92:10:4C:00:8B:6C:65:2E:A2:1C:CF:AC:BF:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A3EAB903F3D92104C008B6C652EA21CCFACBF0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BA8kaM5eE7n2kiVizjSCEggoRsbGgBFCgpMCorxpzrmA/0/323830343a316463383a656530303a3a2f34302d3430203d3e20323634333933.roa
Signing time:             Wed 04 Jan 2023 11:21:15 +0000
ROA not before:           Wed 04 Jan 2023 11:16:15 +0000
ROA not after:            Wed 03 Jan 2024 11:21:15 +0000
asID:                     264393
IP address blocks:        2804:1dc8:ee00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:13:9c:da:13:84:01:f9:ee:92:54:0c:70:f5:74:8c:8c:4d:9c:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A3EAB903F3D92104C008B6C652EA21CCFACBF0D
        Validity
            Not Before: Jan  4 11:16:15 2023 GMT
            Not After : Jan  3 11:21:15 2024 GMT
        Subject: CN=0AE216B2E3DAFC2A8E6D4F262E1D9D5240A9CE43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cb:5a:7c:ba:d1:44:65:84:d5:db:00:08:b7:
                    01:ac:9a:fc:56:8f:c9:a3:66:12:12:a2:59:7c:81:
                    72:e9:9c:1c:3e:60:a1:9c:b3:e7:56:ce:25:75:7b:
                    62:54:59:36:de:16:fe:34:d2:1e:75:86:3f:0a:df:
                    77:d1:d1:b1:2f:08:70:6a:dd:1a:60:6c:a0:69:dd:
                    9d:90:77:73:35:36:8e:40:e8:94:fa:70:28:af:6f:
                    ff:4a:dc:2b:34:cc:28:4f:da:ce:c8:88:7b:48:64:
                    6f:d9:d1:c0:f7:82:2b:d0:4f:28:b5:4b:34:ff:90:
                    20:5e:97:d7:83:a6:e1:1f:77:a2:d9:6f:9c:36:01:
                    6a:4e:c9:93:20:99:e0:c6:7b:a0:c0:7c:05:61:80:
                    e0:48:cd:8c:be:28:93:20:5c:07:79:dd:7b:59:26:
                    74:a2:dd:8c:3e:f5:a3:ef:22:d6:f1:96:74:1b:30:
                    9d:c7:5a:78:2c:e7:d2:c1:c7:ce:b4:a6:22:ce:21:
                    fd:68:2f:1b:35:92:5e:ca:f1:10:d8:18:b0:50:0d:
                    34:4a:19:0a:72:00:64:80:a0:a7:b4:2e:a2:44:80:
                    e5:d8:0a:1e:1d:52:75:0d:78:d7:c4:e4:50:97:b6:
                    38:59:c3:b8:52:39:69:81:30:52:21:e4:db:63:7b:
                    8c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E2:16:B2:E3:DA:FC:2A:8E:6D:4F:26:2E:1D:9D:52:40:A9:CE:43
            X509v3 Authority Key Identifier:
                keyid:9A:3E:AB:90:3F:3D:92:10:4C:00:8B:6C:65:2E:A2:1C:CF:AC:BF:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BA8kaM5eE7n2kiVizjSCEggoRsbGgBFCgpMCorxpzrmA/0/9A3EAB903F3D92104C008B6C652EA21CCFACBF0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A3EAB903F3D92104C008B6C652EA21CCFACBF0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BA8kaM5eE7n2kiVizjSCEggoRsbGgBFCgpMCorxpzrmA/0/323830343a316463383a656530303a3a2f34302d3430203d3e20323634333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1dc8:ee00::/40

    Signature Algorithm: sha256WithRSAEncryption
         65:4d:4d:24:0c:47:42:01:69:e4:3d:0f:5d:aa:bf:5d:1e:69:
         44:7a:43:b6:8c:a3:6d:f5:18:52:4e:22:1c:6c:aa:9d:8d:a4:
         45:1c:35:7a:11:1a:ec:d9:59:de:39:73:a0:e4:d5:4a:27:6a:
         12:d7:cb:03:04:af:a5:ee:54:73:e9:13:85:71:25:38:17:cf:
         b7:84:2b:c9:ae:ee:de:04:ca:e6:ac:5f:a5:6c:6f:d3:4c:39:
         2b:e2:f4:86:40:a0:4b:e3:5a:63:b5:14:c7:43:4f:11:2b:89:
         ef:bc:78:f3:0d:aa:69:ad:b5:09:c9:e4:b3:a1:b4:75:b6:5e:
         ba:f5:75:61:16:f4:24:49:dc:87:af:c5:17:b7:de:8c:66:1e:
         93:45:8c:79:e0:1c:e1:1f:77:07:d4:3d:bc:64:69:19:38:e1:
         a8:09:f0:4a:98:db:22:a4:73:02:d0:d1:ca:d7:5e:08:28:e0:
         ab:ed:25:c3:49:93:51:07:58:92:32:71:fa:42:6e:ed:bc:72:
         a9:2b:4b:6a:37:70:fb:1d:84:7f:c4:86:22:1b:ae:90:74:46:
         20:ee:ae:ff:3f:ee:59:95:6c:87:55:db:8a:4e:17:fd:74:de:
         72:13:54:cc:c4:66:f8:8f:bd:f7:5a:e8:96:52:3d:de:ad:2e:
         c2:3b:cd:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:01 2025 by rpki-client