Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/323830343a336363303a343030303a3a2f33342d3334203d3e20323636323332.roa
File:                     323830343a336363303a343030303a3a2f33342d3334203d3e20323636323332.roa (raw, json)
Hash identifier:          hf/qJwAmv3jWvOfwKmaD+awAsy6ywbu6mLv/osmEND4=
Subject key identifier:   6D:C3:C6:0A:87:4F:BA:8B:1C:AF:7D:DE:0E:B9:61:07:8B:E1:1C:54
Certificate issuer:       /CN=8A99421ADB1DC9BA7F69837F108B27A79FBEFA9F
Certificate serial:       7BCD855EA74778435A7E7A2A34F44027D9FF6A5E
Authority key identifier: 8A:99:42:1A:DB:1D:C9:BA:7F:69:83:7F:10:8B:27:A7:9F:BE:FA:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A99421ADB1DC9BA7F69837F108B27A79FBEFA9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/323830343a336363303a343030303a3a2f33342d3334203d3e20323636323332.roa
Signing time:             Mon 20 Mar 2023 02:09:22 +0000
ROA not before:           Mon 20 Mar 2023 02:04:22 +0000
ROA not after:            Mon 18 Mar 2024 02:09:22 +0000
asID:                     266232
IP address blocks:        2804:3cc0:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:cd:85:5e:a7:47:78:43:5a:7e:7a:2a:34:f4:40:27:d9:ff:6a:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A99421ADB1DC9BA7F69837F108B27A79FBEFA9F
        Validity
            Not Before: Mar 20 02:04:22 2023 GMT
            Not After : Mar 18 02:09:22 2024 GMT
        Subject: CN=6DC3C60A874FBA8B1CAF7DDE0EB961078BE11C54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3c:3e:93:2f:05:bc:55:e8:91:13:0a:29:03:
                    90:a2:c4:18:f6:d1:fd:4f:9d:89:96:fc:d1:32:85:
                    22:b9:37:98:c2:a8:65:d0:12:3b:f3:e4:5c:69:e7:
                    24:70:b0:f1:3c:3d:77:18:9d:26:89:79:e9:8c:0f:
                    2a:20:39:9f:ed:b8:5b:53:61:b3:1c:5b:bc:9e:09:
                    d4:93:5e:02:8d:64:b7:5a:e0:1f:a4:9c:f7:44:ef:
                    e1:b6:d0:21:98:83:83:06:65:7d:a4:f6:78:30:14:
                    ea:d7:a4:cc:02:4e:39:2e:3f:88:16:2b:79:8c:6f:
                    0b:00:bc:40:d7:49:9a:b7:86:41:5c:22:a8:20:aa:
                    eb:6b:55:c6:50:07:10:8c:e3:e1:a8:be:68:1d:93:
                    ac:06:75:1f:b2:ca:92:ce:84:6e:47:28:f8:96:9f:
                    b7:4d:26:39:ef:a9:80:63:96:fc:c8:23:2d:39:ef:
                    22:7e:8c:88:95:e2:e1:c7:a9:4e:40:96:60:28:97:
                    00:f9:51:ac:e9:8d:f4:2a:5f:50:18:8a:c6:b7:af:
                    1d:f8:0b:76:71:bb:26:a6:71:80:56:8e:bd:6c:b7:
                    21:cf:dc:ac:4b:98:ac:25:f6:95:89:f0:4d:68:a6:
                    a8:86:c4:5c:5d:54:66:86:95:b1:22:7d:32:31:ff:
                    5c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C3:C6:0A:87:4F:BA:8B:1C:AF:7D:DE:0E:B9:61:07:8B:E1:1C:54
            X509v3 Authority Key Identifier:
                keyid:8A:99:42:1A:DB:1D:C9:BA:7F:69:83:7F:10:8B:27:A7:9F:BE:FA:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/8A99421ADB1DC9BA7F69837F108B27A79FBEFA9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A99421ADB1DC9BA7F69837F108B27A79FBEFA9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/323830343a336363303a343030303a3a2f33342d3334203d3e20323636323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3cc0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         02:86:96:ef:01:3d:34:2a:a3:4a:df:6c:e2:f5:c9:33:ed:33:
         02:cf:88:38:77:02:23:01:1b:97:b0:e2:81:43:cb:ba:1a:8b:
         cc:85:c1:0b:a0:c6:9f:64:3c:31:00:f6:0d:bf:c1:3c:f8:c8:
         3b:23:89:c6:a7:76:fe:25:51:3a:0e:9b:97:f7:9a:73:5e:14:
         31:b7:12:0b:e2:73:c2:fe:92:e6:71:84:82:36:a7:3b:9c:49:
         a7:12:cb:c6:78:08:2f:07:27:ab:49:f0:44:b5:62:ca:6a:93:
         b5:19:62:c6:ac:2b:9d:72:e8:70:51:7a:1e:18:33:55:ca:bd:
         4e:08:fc:6a:22:7d:48:9f:d5:8e:58:05:dd:ae:45:e3:9e:06:
         5b:d2:60:f9:5f:ad:6d:ac:22:eb:b2:6e:62:a9:56:34:28:1e:
         fd:84:62:90:a0:ac:49:e1:fc:33:6d:17:9a:bf:03:c8:63:c7:
         f2:e0:3e:71:54:be:08:1d:71:7f:5f:0b:ce:37:cf:4b:75:db:
         03:30:56:03:dd:fc:6d:93:12:26:cc:48:72:ed:40:b1:75:50:
         df:fd:e3:57:9f:cd:82:a5:9f:89:66:66:95:5f:41:c6:27:e1:
         d2:2e:4c:34:e8:97:a5:37:26:09:52:09:ea:eb:6b:88:5e:1c:
         77:59:80:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:48:38 2025 by rpki-client