Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D8cbJyQKPVdsajinWbr9HQTShvgBrnq6okkzWxWrxuoX/0/323830343a363365383a383030303a3a2f33332d3333203d3e20323639333931.roa
File:                     323830343a363365383a383030303a3a2f33332d3333203d3e20323639333931.roa (raw, json)
Hash identifier:          OVLoznFe3a+GTWaGGU5gi0x72pGYCpREmqvoLcsccEE=
Subject key identifier:   30:57:E2:A8:F0:86:97:75:07:9C:FF:36:DA:A5:F5:00:E7:9A:92:8A
Certificate issuer:       /CN=9FF7AE1DE3A484ED489D36F4B5315338134CB42F
Certificate serial:       697AC2788612576E4D8EC5CB98E0D58D2091E49F
Authority key identifier: 9F:F7:AE:1D:E3:A4:84:ED:48:9D:36:F4:B5:31:53:38:13:4C:B4:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FF7AE1DE3A484ED489D36F4B5315338134CB42F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D8cbJyQKPVdsajinWbr9HQTShvgBrnq6okkzWxWrxuoX/0/323830343a363365383a383030303a3a2f33332d3333203d3e20323639333931.roa
Signing time:             Tue 18 Jan 2022 18:17:01 +0000
ROA not before:           Tue 18 Jan 2022 18:12:01 +0000
ROA not after:            Tue 17 Jan 2023 18:17:01 +0000
asID:                     269391
IP address blocks:        2804:63e8:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:7a:c2:78:86:12:57:6e:4d:8e:c5:cb:98:e0:d5:8d:20:91:e4:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FF7AE1DE3A484ED489D36F4B5315338134CB42F
        Validity
            Not Before: Jan 18 18:12:01 2022 GMT
            Not After : Jan 17 18:17:01 2023 GMT
        Subject: CN=3057E2A8F0869775079CFF36DAA5F500E79A928A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7f:6e:1a:30:5a:94:48:a4:c4:89:5c:6c:11:
                    5b:92:3b:6b:67:88:9f:24:8a:da:df:6f:7e:88:14:
                    9a:c2:c5:fc:52:c1:a3:06:38:01:51:c0:9b:99:e6:
                    78:17:e6:9b:4c:08:29:91:0e:04:e2:4a:08:79:e5:
                    ca:2c:20:87:9a:ee:52:76:74:b0:c8:69:12:f3:76:
                    c3:4a:97:b6:5d:33:2c:0f:b2:06:a7:25:db:c1:f8:
                    51:ad:c9:e9:76:a8:6d:60:86:04:c1:55:41:6b:d1:
                    6f:da:e1:25:88:ef:56:34:c9:13:a0:f7:bb:9f:d1:
                    b0:19:4a:85:a3:35:be:5d:15:c3:a0:cc:39:ff:c1:
                    7a:10:bc:b9:dc:ff:d7:8d:31:eb:2d:49:65:b9:87:
                    02:a8:70:bc:ef:ae:b5:20:b6:8f:6e:f8:4a:47:59:
                    6e:87:d6:13:f1:fc:b7:2e:93:15:b4:1f:1f:27:e0:
                    dc:2c:8d:90:f5:a5:99:2c:92:e1:39:c0:c6:5c:dc:
                    ce:38:7e:53:c7:a3:33:b4:8e:f8:a7:1a:ed:a8:52:
                    3f:e6:f6:b6:38:14:f8:2d:ad:87:00:a8:2f:27:6b:
                    ed:ca:58:ea:6b:2e:da:49:db:2a:3c:36:36:53:06:
                    91:10:fc:36:11:3b:99:2a:e6:46:27:f2:a9:87:c0:
                    ca:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:57:E2:A8:F0:86:97:75:07:9C:FF:36:DA:A5:F5:00:E7:9A:92:8A
            X509v3 Authority Key Identifier:
                keyid:9F:F7:AE:1D:E3:A4:84:ED:48:9D:36:F4:B5:31:53:38:13:4C:B4:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D8cbJyQKPVdsajinWbr9HQTShvgBrnq6okkzWxWrxuoX/0/9FF7AE1DE3A484ED489D36F4B5315338134CB42F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FF7AE1DE3A484ED489D36F4B5315338134CB42F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8cbJyQKPVdsajinWbr9HQTShvgBrnq6okkzWxWrxuoX/0/323830343a363365383a383030303a3a2f33332d3333203d3e20323639333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:63e8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         39:53:6f:99:62:fc:80:bb:a4:76:44:2a:2d:78:61:95:d1:30:
         8d:f9:31:28:bd:71:dd:30:a5:88:28:e5:4e:08:94:d6:36:5f:
         1c:a9:98:4a:7d:bb:d1:9a:ff:d0:ac:8c:7e:f4:52:c1:a9:9b:
         56:20:14:1d:77:4d:85:8d:b1:3f:7a:da:57:6a:f3:42:0a:01:
         58:77:a1:42:e8:7a:83:2e:06:bf:34:c6:01:a7:22:d9:44:a5:
         5b:64:83:78:70:bf:14:f3:d1:01:f2:c3:d8:25:c0:0f:28:16:
         e7:23:d9:ae:e9:60:06:26:81:59:f3:c1:3e:20:15:72:cc:5c:
         4b:4f:f3:00:9d:c5:5e:da:f1:bb:62:52:35:fb:bd:45:9d:ab:
         68:ab:9d:24:52:73:67:58:aa:c9:d6:ff:e0:0f:07:13:31:73:
         c4:23:ac:48:36:3b:d3:76:2e:78:7c:fe:84:4d:ba:39:ea:53:
         82:2e:95:4a:97:de:2b:58:29:86:16:9a:92:83:1f:b5:58:e3:
         08:00:74:95:a4:ca:76:b6:b8:0b:7f:5a:6d:6a:91:66:34:ae:
         61:46:2e:c8:5d:8f:20:9c:a3:89:6e:ca:3f:9d:26:04:ab:4d:
         dd:4a:d0:52:43:bc:02:19:d5:b0:41:17:71:29:83:f1:71:bd:
         4a:9d:c8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:04:27 2025 by rpki-client