Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D17Z9LGhDwZrjnULS2eK8LLCVswms5jmgYsD6H6eBLZh/0/323830343a346662633a3a2f33332d3333203d3e20323638333436.roa
File:                     323830343a346662633a3a2f33332d3333203d3e20323638333436.roa (raw, json)
Hash identifier:          PjV/9BG7+hQYjbkKJDWbkLvdzaFc81glBNYEujPErHs=
Subject key identifier:   44:15:0C:8E:80:54:01:87:F2:40:E0:96:7A:CC:9A:A3:89:97:81:BF
Certificate issuer:       /CN=0A4290FC91304B5BF80991BEBA06F918C4FAF5AF
Certificate serial:       2597A803041C551A78CAD5CAE2097CEECDCE7041
Authority key identifier: 0A:42:90:FC:91:30:4B:5B:F8:09:91:BE:BA:06:F9:18:C4:FA:F5:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0A4290FC91304B5BF80991BEBA06F918C4FAF5AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D17Z9LGhDwZrjnULS2eK8LLCVswms5jmgYsD6H6eBLZh/0/323830343a346662633a3a2f33332d3333203d3e20323638333436.roa
Signing time:             Mon 22 May 2023 19:23:58 +0000
ROA not before:           Mon 22 May 2023 19:18:58 +0000
ROA not after:            Mon 20 May 2024 19:23:58 +0000
asID:                     268346
IP address blocks:        2804:4fbc::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:97:a8:03:04:1c:55:1a:78:ca:d5:ca:e2:09:7c:ee:cd:ce:70:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A4290FC91304B5BF80991BEBA06F918C4FAF5AF
        Validity
            Not Before: May 22 19:18:58 2023 GMT
            Not After : May 20 19:23:58 2024 GMT
        Subject: CN=44150C8E80540187F240E0967ACC9AA3899781BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:69:fc:c0:bd:7b:41:20:ca:0c:18:1a:2b:2e:
                    1c:ff:95:94:4d:9c:4e:93:84:57:d9:36:7b:95:a5:
                    0a:05:89:67:cf:76:d2:2c:25:ed:64:4e:14:40:4a:
                    c3:03:60:a8:e6:a8:b1:73:ef:91:c1:28:77:51:1e:
                    dc:9e:f9:4d:77:5b:8f:d9:50:0f:d3:ce:e7:6f:2a:
                    54:bd:43:df:94:1f:89:e4:a3:68:42:0d:72:7f:9e:
                    fa:80:74:4b:24:e6:a4:52:bf:5a:da:ab:aa:73:9a:
                    9f:05:4b:77:fe:5c:a4:cb:73:41:ea:5c:bf:e2:6c:
                    4f:42:a3:33:c1:bb:ff:15:23:dd:4f:ba:e4:48:53:
                    1d:4c:33:9f:12:a5:b7:b0:7d:f7:ec:ba:a0:f6:63:
                    2d:bd:1a:fb:ee:ac:0b:43:8d:5b:a4:da:d0:fe:c7:
                    b3:ca:34:06:96:8e:35:29:7a:97:f2:40:94:59:7a:
                    7c:68:cc:77:d4:d5:ad:24:86:d3:e5:47:19:a1:fe:
                    00:bc:fe:93:52:4a:70:38:f5:7c:61:9e:44:3c:c8:
                    f6:12:cc:d4:9e:56:92:ef:1b:f9:0f:6f:09:b4:b0:
                    59:4a:13:c4:5c:8d:93:f6:fc:0b:55:d7:61:5d:1a:
                    6a:6e:de:09:32:26:02:0d:d2:cc:76:20:c2:01:92:
                    ab:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:15:0C:8E:80:54:01:87:F2:40:E0:96:7A:CC:9A:A3:89:97:81:BF
            X509v3 Authority Key Identifier:
                keyid:0A:42:90:FC:91:30:4B:5B:F8:09:91:BE:BA:06:F9:18:C4:FA:F5:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D17Z9LGhDwZrjnULS2eK8LLCVswms5jmgYsD6H6eBLZh/0/0A4290FC91304B5BF80991BEBA06F918C4FAF5AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0A4290FC91304B5BF80991BEBA06F918C4FAF5AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D17Z9LGhDwZrjnULS2eK8LLCVswms5jmgYsD6H6eBLZh/0/323830343a346662633a3a2f33332d3333203d3e20323638333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4fbc::/33

    Signature Algorithm: sha256WithRSAEncryption
         15:00:4c:76:87:31:07:57:6b:e1:4b:eb:a0:37:bf:6b:6e:fb:
         ce:88:17:d0:13:3b:c2:89:36:ed:8c:aa:3d:17:e7:5e:24:00:
         60:f1:48:ac:de:fb:a7:c5:10:f8:02:2b:d1:4a:25:5f:13:74:
         e3:ee:3e:93:1c:22:b4:24:a7:a3:22:21:90:31:15:5b:d1:98:
         3c:bd:a6:15:07:82:74:4a:b4:0e:f0:02:22:1b:89:fe:91:81:
         15:e3:ab:d4:d3:3e:04:38:77:cb:9d:76:12:3a:4e:db:1e:6b:
         a8:82:c0:fe:7a:78:62:2e:c4:e6:c9:10:25:df:cd:73:e2:b2:
         de:71:5d:49:78:6c:ef:70:f4:c4:24:ed:bc:69:06:78:33:55:
         ed:36:58:a5:ea:38:c5:af:d2:db:25:b1:8c:98:29:7f:60:36:
         70:9c:45:06:90:40:3a:da:b1:35:72:f9:3c:22:ee:ce:14:46:
         6e:5c:c3:18:f6:f8:30:a0:d5:c1:d6:94:99:89:1e:a7:f5:d0:
         e8:33:26:13:3e:50:2f:dd:19:c9:00:f7:b5:cf:ff:c2:5b:d6:
         ff:29:ad:a1:ee:4a:2c:39:fd:cf:e5:8f:ab:3a:de:c5:a2:ea:
         02:3e:19:cb:93:38:d9:cc:40:92:8a:0f:a5:7e:6f:e9:48:34:
         b7:49:03:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:24:20 2025 by rpki-client