Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a38313a3a2f34382d3438203d3e203631383332.roa
File:                     323830343a316130343a38313a3a2f34382d3438203d3e203631383332.roa (raw, json)
Hash identifier:          cI4UF7Mok9ypSLKzhM5UmwfcNvVFOHcYIuazcaLF7ko=
Subject key identifier:   1E:A0:77:DC:6B:AF:DE:8C:CE:FD:8E:03:3F:7D:8D:C2:27:1E:96:DD
Certificate issuer:       /CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
Certificate serial:       4991C4684F6520D3305B445F6663BF32A91BDBE3
Authority key identifier: D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a38313a3a2f34382d3438203d3e203631383332.roa
Signing time:             Wed 07 Jun 2023 16:37:55 +0000
ROA not before:           Wed 07 Jun 2023 16:32:55 +0000
ROA not after:            Wed 05 Jun 2024 16:37:55 +0000
asID:                     61832
IP address blocks:        2804:1a04:81::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:91:c4:68:4f:65:20:d3:30:5b:44:5f:66:63:bf:32:a9:1b:db:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
        Validity
            Not Before: Jun  7 16:32:55 2023 GMT
            Not After : Jun  5 16:37:55 2024 GMT
        Subject: CN=1EA077DC6BAFDE8CCEFD8E033F7D8DC2271E96DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:90:35:27:56:fe:9b:78:54:cf:95:98:69:d3:
                    b7:e7:7e:57:36:06:b5:13:67:7c:b9:0d:56:cf:5e:
                    e9:51:f0:65:07:5f:a2:81:58:1c:1b:4d:73:cc:b0:
                    36:ff:99:11:f5:3a:58:d3:b1:4d:0a:29:2b:d2:87:
                    ea:6d:2a:b6:2f:8a:5e:59:4a:74:20:75:01:ca:5f:
                    67:99:fe:f0:57:84:f7:ec:5c:5d:81:ef:50:08:d4:
                    a2:5f:de:2a:7f:74:6c:f5:fa:b4:07:d4:3a:66:4c:
                    a2:5d:f5:7c:0d:e8:07:fb:6a:9e:18:e6:48:57:8c:
                    19:7e:a8:92:73:20:c5:73:18:8b:a9:ad:d4:28:e7:
                    df:da:13:e1:34:bd:2d:39:5b:9e:25:10:bd:75:87:
                    12:47:5c:03:9b:47:77:82:37:96:4c:23:f2:fa:a4:
                    e5:0b:c2:eb:0e:44:8a:1a:5d:d0:83:8d:e1:c6:17:
                    ba:cb:a8:9a:08:ab:43:53:ce:7c:f7:80:04:73:cc:
                    64:22:92:94:a5:47:49:03:33:3b:46:85:aa:c8:d7:
                    e1:71:60:3c:6d:f4:c5:a4:1d:56:10:ec:ce:e1:59:
                    b2:c3:1c:a3:8b:63:92:1c:80:a1:a6:85:ff:02:53:
                    32:10:a4:3d:50:53:04:90:e9:41:20:1a:75:75:d4:
                    eb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A0:77:DC:6B:AF:DE:8C:CE:FD:8E:03:3F:7D:8D:C2:27:1E:96:DD
            X509v3 Authority Key Identifier:
                keyid:D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a38313a3a2f34382d3438203d3e203631383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a04:81::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:af:e4:26:f5:14:94:39:3b:4f:a9:0e:0b:56:c9:9a:2d:bf:
         92:0a:bc:0f:f4:13:36:c0:27:30:59:b7:0f:64:47:63:90:47:
         b4:8f:8a:8d:34:6f:aa:6d:58:69:8b:7a:46:3b:c0:f8:b1:c5:
         c5:f6:9b:89:de:cf:32:f5:55:60:83:2e:65:29:c2:e5:de:86:
         47:84:84:d9:48:3a:43:10:e4:04:e5:fb:2a:c3:1b:89:43:e8:
         39:12:cc:67:df:2c:90:d5:5a:21:9b:f3:54:08:cb:34:c4:f7:
         87:af:f0:bf:a2:64:7c:82:fe:c3:0e:c6:46:23:30:05:74:f0:
         95:ec:6f:e3:df:9a:08:02:7a:ac:fe:36:46:12:34:8f:8e:c5:
         79:31:f5:86:f3:97:f1:e6:6a:7f:61:ad:c1:08:6a:f1:92:89:
         62:f3:8f:18:c7:d7:7c:01:03:ad:20:d8:64:7b:34:fa:bc:35:
         f3:98:56:db:cf:43:df:3c:f6:de:d1:4f:0f:db:85:01:42:bf:
         a5:1f:36:d8:5a:38:d3:63:7a:02:27:56:3d:28:1b:40:21:5f:
         bc:de:53:48:88:cb:90:58:7b:1b:bb:cf:87:dc:a1:e7:e6:5e:
         4f:26:0b:7e:d8:fc:8e:04:e5:49:51:06:7c:b5:87:c4:f3:d3:
         77:bc:53:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:38:55 2025 by rpki-client