Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/323830343a376136303a666330303a3a2f34302d3430203d3e20323731333637.roa
File:                     323830343a376136303a666330303a3a2f34302d3430203d3e20323731333637.roa (raw, json)
Hash identifier:          vaxQcyz7ZVz4XpnrcIAIXVVUZJZ3ElnaFgVJVyXwGVU=
Subject key identifier:   1A:A3:F1:7F:FA:D4:67:2F:8F:C3:C5:39:C3:C5:C4:34:17:86:DF:29
Certificate issuer:       /CN=9CC508BB9684B8837402E71D2AF4DD66B77F6C27
Certificate serial:       07783182CEAADB47E5F7BDE11814EDFF030F831E
Authority key identifier: 9C:C5:08:BB:96:84:B8:83:74:02:E7:1D:2A:F4:DD:66:B7:7F:6C:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9CC508BB9684B8837402E71D2AF4DD66B77F6C27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/323830343a376136303a666330303a3a2f34302d3430203d3e20323731333637.roa
Signing time:             Sat 06 Aug 2022 01:11:12 +0000
ROA not before:           Sat 06 Aug 2022 01:06:12 +0000
ROA not after:            Sat 05 Aug 2023 01:11:12 +0000
asID:                     271367
IP address blocks:        2804:7a60:fc00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:78:31:82:ce:aa:db:47:e5:f7:bd:e1:18:14:ed:ff:03:0f:83:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CC508BB9684B8837402E71D2AF4DD66B77F6C27
        Validity
            Not Before: Aug  6 01:06:12 2022 GMT
            Not After : Aug  5 01:11:12 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bc:9b:81:82:7d:93:6c:59:ed:43:ae:fe:0d:
                    81:70:0a:5f:92:87:2a:c7:bb:11:e9:e2:11:06:d8:
                    bb:5f:5d:63:27:a8:2a:8f:fe:4d:31:cb:9b:b0:3e:
                    28:5d:c1:63:fe:c3:6b:a4:ba:a1:17:a0:d5:0c:a7:
                    74:17:06:fa:2b:49:df:41:ec:24:34:fd:03:83:f0:
                    dc:f5:f2:b4:53:ad:27:6e:95:5c:3b:4e:45:e9:73:
                    ed:68:62:84:d0:68:06:48:cf:85:bd:92:80:30:1c:
                    cf:14:c8:0e:70:23:bf:a4:20:5c:0c:a5:f5:01:3f:
                    a3:e0:b1:40:16:fa:5b:0d:70:9f:50:24:93:4c:7c:
                    6d:3c:7c:cd:54:5d:f0:0b:fb:30:01:7f:30:89:51:
                    20:b6:a9:b0:51:05:26:31:4b:17:4c:31:8a:47:50:
                    30:31:1e:30:16:d5:a2:d4:d0:54:d5:28:9d:bd:d9:
                    b5:10:29:9b:59:d0:2d:5b:83:26:a7:6b:78:ef:da:
                    ef:7b:35:c6:7f:05:ba:a4:b0:66:fd:00:9c:b5:b1:
                    b5:61:9b:a5:91:02:d0:00:1c:70:d1:ed:12:e5:5f:
                    b7:be:a0:26:91:c6:35:c0:30:37:9d:1e:38:46:12:
                    9b:ee:ca:02:bf:f4:c4:e4:7c:e4:38:7c:8b:49:c9:
                    93:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:A3:F1:7F:FA:D4:67:2F:8F:C3:C5:39:C3:C5:C4:34:17:86:DF:29
            X509v3 Authority Key Identifier:
                keyid:9C:C5:08:BB:96:84:B8:83:74:02:E7:1D:2A:F4:DD:66:B7:7F:6C:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/9CC508BB9684B8837402E71D2AF4DD66B77F6C27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9CC508BB9684B8837402E71D2AF4DD66B77F6C27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/323830343a376136303a666330303a3a2f34302d3430203d3e20323731333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a60:fc00::/40

    Signature Algorithm: sha256WithRSAEncryption
         47:83:18:7b:59:11:45:36:df:8d:30:09:48:26:c9:27:89:17:
         f9:11:55:db:2b:2d:0e:d5:b2:9d:12:00:d6:19:8f:03:b5:14:
         de:e3:98:f7:b7:00:1e:70:67:62:55:8d:bf:7b:d0:1b:df:57:
         67:e9:4f:28:e5:3a:76:c6:73:17:3b:fa:c9:a3:9c:6e:32:e8:
         93:6d:5a:cf:47:ed:63:7a:2d:16:9d:69:9d:fa:f6:21:18:11:
         39:15:7a:7f:ae:67:23:e4:84:2e:dc:3e:82:10:d3:88:13:28:
         01:82:0d:36:45:66:1b:f5:c4:0b:cc:04:e0:a8:d7:7b:0d:07:
         5a:68:a4:50:dc:53:0b:0d:6f:40:76:55:2e:e2:47:54:f7:f9:
         a6:19:45:71:73:44:8f:a6:b6:89:a3:4f:c4:b7:32:60:e3:6f:
         d6:d7:87:5d:96:b4:f3:28:7f:70:d1:1d:ba:ec:e2:64:fb:3f:
         37:85:9e:13:02:07:4c:55:14:40:33:ac:af:89:c4:68:60:34:
         b2:ee:e3:c5:ee:b3:46:89:42:06:fe:a0:4f:75:69:6a:e5:fb:
         ee:cc:9c:9b:f0:b1:80:9f:75:b1:4f:ab:ab:40:0f:aa:c3:00:
         f7:2c:d8:0d:85:e1:95:32:2d:28:1f:11:b9:a5:49:1f:8f:80:
         46:fd:3a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:56 2025 by rpki-client