Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHV9cFKjwq57h5ZMj2gFEDkEze6Z1YZJFtEQvNKTmjxj/0/323830343a363231343a383030303a3a2f33332d3333203d3e20323639323734.roa
File:                     323830343a363231343a383030303a3a2f33332d3333203d3e20323639323734.roa (raw, json)
Hash identifier:          B3YE6gEvBuAkjXNsg/rcSYVM7jWVaW3AckrW+4lRhhM=
Subject key identifier:   A4:0D:80:5C:1E:47:C4:B8:42:FF:27:73:80:B0:88:54:D3:48:92:74
Certificate issuer:       /CN=9D27DD9BB131EACC88E34E6DCC5650B5FE44FF70
Certificate serial:       559579C7F8DCF04D450414472279CA3A104189C0
Authority key identifier: 9D:27:DD:9B:B1:31:EA:CC:88:E3:4E:6D:CC:56:50:B5:FE:44:FF:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D27DD9BB131EACC88E34E6DCC5650B5FE44FF70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHV9cFKjwq57h5ZMj2gFEDkEze6Z1YZJFtEQvNKTmjxj/0/323830343a363231343a383030303a3a2f33332d3333203d3e20323639323734.roa
Signing time:             Thu 27 Jun 2024 03:00:30 +0000
ROA not before:           Thu 27 Jun 2024 02:55:30 +0000
ROA not after:            Thu 26 Jun 2025 03:00:30 +0000
asID:                     269274
IP address blocks:        2804:6214:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:95:79:c7:f8:dc:f0:4d:45:04:14:47:22:79:ca:3a:10:41:89:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D27DD9BB131EACC88E34E6DCC5650B5FE44FF70
        Validity
            Not Before: Jun 27 02:55:30 2024 GMT
            Not After : Jun 26 03:00:30 2025 GMT
        Subject: CN=A40D805C1E47C4B842FF277380B08854D3489274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5b:25:af:8a:50:01:5f:18:87:a4:24:aa:40:
                    5e:97:4d:6d:d1:e4:b3:ac:5f:23:6b:ca:72:51:f4:
                    53:05:ed:51:24:9d:4e:52:1c:75:52:2c:ee:cf:7f:
                    70:1f:1c:ef:b9:0c:77:f2:d2:73:c7:c6:2e:28:46:
                    01:01:4d:7c:e0:d2:ec:f5:8d:26:46:e7:42:e3:d8:
                    48:29:66:09:de:ce:86:3a:80:08:36:71:fb:a4:9b:
                    1a:fe:6b:de:8f:cb:be:59:15:c9:28:f8:56:ff:ab:
                    45:d4:67:0b:81:54:30:98:17:33:e3:9e:31:0c:82:
                    6b:8b:a9:67:a0:ad:61:22:37:29:4a:c9:ad:02:fe:
                    8f:40:d0:79:52:94:47:70:c5:ff:4d:73:80:db:d1:
                    02:5e:ef:f6:21:2f:4d:e9:1e:36:ec:cf:a1:6c:9c:
                    73:fa:c2:7a:ce:78:5c:ce:cb:a8:f0:74:d0:e5:fe:
                    7d:44:8e:9e:da:89:9a:90:29:2c:d5:0b:a8:69:23:
                    28:70:65:81:d4:f4:39:eb:26:7b:9a:5f:b5:dc:62:
                    0c:40:87:8b:74:66:0a:c6:e0:9a:7e:85:b1:e8:0e:
                    a6:3e:b9:81:a7:2a:a2:fa:58:cd:8e:67:67:b0:f8:
                    92:08:e1:cf:21:91:61:26:67:d0:12:51:95:2d:3c:
                    d7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:0D:80:5C:1E:47:C4:B8:42:FF:27:73:80:B0:88:54:D3:48:92:74
            X509v3 Authority Key Identifier:
                keyid:9D:27:DD:9B:B1:31:EA:CC:88:E3:4E:6D:CC:56:50:B5:FE:44:FF:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHV9cFKjwq57h5ZMj2gFEDkEze6Z1YZJFtEQvNKTmjxj/0/9D27DD9BB131EACC88E34E6DCC5650B5FE44FF70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D27DD9BB131EACC88E34E6DCC5650B5FE44FF70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHV9cFKjwq57h5ZMj2gFEDkEze6Z1YZJFtEQvNKTmjxj/0/323830343a363231343a383030303a3a2f33332d3333203d3e20323639323734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6214:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         50:5f:bd:34:d8:87:68:ed:fd:8c:b4:67:07:8e:5f:f5:31:33:
         12:95:c5:17:88:c3:fe:b1:b6:30:52:7d:77:08:f3:44:f9:6e:
         19:26:8e:57:bf:7b:a6:5b:86:93:02:a9:d8:90:65:4c:a1:5c:
         be:33:85:7b:0a:9f:db:65:35:56:1a:ba:49:11:f1:63:2f:79:
         3c:fd:30:5c:95:97:46:b7:01:ec:0b:0f:0c:8a:dd:8d:fb:ef:
         93:bc:b9:b2:bc:5f:7b:f1:f8:5f:2e:b0:64:6c:51:d0:0d:08:
         9e:ea:66:bd:7f:5a:b3:51:10:86:05:1d:d5:37:2b:c9:ee:69:
         7b:34:09:5a:b6:88:d2:68:18:bb:34:42:17:f1:5f:13:6d:6d:
         75:5b:6e:2d:70:1f:34:26:37:41:76:3c:b8:39:c0:b0:3d:02:
         83:27:3b:01:33:1b:ea:cb:44:ce:2d:70:3c:c9:76:e8:a1:73:
         ed:16:02:1b:b6:d0:d8:1a:47:10:af:2a:01:10:1d:9c:1f:54:
         5f:f4:ed:ed:7f:7a:d7:49:85:87:37:a9:15:da:d9:cf:d7:7f:
         73:d8:72:5b:4e:89:11:47:37:0b:01:cf:87:99:0a:80:36:f2:
         07:4b:52:69:6f:d4:ef:ed:cc:00:81:19:aa:a1:3b:fb:43:a4:
         41:cf:0e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:32:56 2025 by rpki-client