Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHV9cFKjwq57h5ZMj2gFEDkEze6Z1YZJFtEQvNKTmjxj/0/323830343a363231343a3a2f33322d3334203d3e20323639323734.roa
File:                     323830343a363231343a3a2f33322d3334203d3e20323639323734.roa (raw, json)
Hash identifier:          //N7w3jZ14YsP41QbodbqPLAx9yOyQGrWZiaQuwqYRE=
Subject key identifier:   FF:6F:D6:FC:A3:9B:3A:CB:BC:7D:96:D3:CB:10:D2:65:03:96:06:EE
Certificate issuer:       /CN=D319009D97BFACFD2ADE23FBF673BE5AFBA92E10
Certificate serial:       208823AB079F4EB0FF37C6F072017D380631FEBB
Authority key identifier: D3:19:00:9D:97:BF:AC:FD:2A:DE:23:FB:F6:73:BE:5A:FB:A9:2E:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D319009D97BFACFD2ADE23FBF673BE5AFBA92E10.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHV9cFKjwq57h5ZMj2gFEDkEze6Z1YZJFtEQvNKTmjxj/0/323830343a363231343a3a2f33322d3334203d3e20323639323734.roa
Signing time:             Thu 09 Nov 2023 16:47:51 +0000
ROA not before:           Thu 09 Nov 2023 16:42:51 +0000
ROA not after:            Thu 07 Nov 2024 16:47:51 +0000
asID:                     269274
IP address blocks:        2804:6214::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:88:23:ab:07:9f:4e:b0:ff:37:c6:f0:72:01:7d:38:06:31:fe:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D319009D97BFACFD2ADE23FBF673BE5AFBA92E10
        Validity
            Not Before: Nov  9 16:42:51 2023 GMT
            Not After : Nov  7 16:47:51 2024 GMT
        Subject: CN=FF6FD6FCA39B3ACBBC7D96D3CB10D265039606EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:67:06:d5:fa:e5:aa:1d:1f:0a:20:64:da:01:
                    97:d2:8f:54:a3:68:93:98:9a:58:ba:ea:4b:c3:23:
                    8c:83:19:2e:63:4a:11:4a:a4:e9:60:70:21:e7:b3:
                    d0:4a:2a:67:25:19:68:41:b4:74:fe:79:e0:36:6f:
                    d3:a1:05:32:f7:27:20:79:9a:01:01:71:43:42:f8:
                    42:be:f9:75:db:1d:66:14:ca:72:26:23:ab:3c:9a:
                    62:d2:5a:5a:14:2b:07:10:4b:96:0d:a4:3b:e3:98:
                    e6:af:a0:f1:bf:42:7c:e4:25:16:ed:17:82:30:37:
                    d3:18:1a:11:7e:6a:d6:45:fb:fe:ad:21:f9:0d:23:
                    51:7c:e3:46:42:37:51:3f:13:87:05:3b:f9:de:5a:
                    86:e5:5e:5e:c4:6d:1f:60:5f:b2:38:8d:46:0e:39:
                    e3:8b:0d:03:80:20:00:76:ec:b1:17:b4:ca:88:68:
                    eb:fc:ff:d9:fb:36:1f:c9:d9:82:26:9e:52:df:e4:
                    ae:5f:9e:ea:f6:e8:dd:76:55:f2:2c:d5:10:41:cf:
                    f6:61:b3:e4:ec:4d:52:90:0b:3d:26:1f:7f:85:b0:
                    5a:04:9c:d0:6b:e8:5e:b9:68:31:69:77:50:5a:49:
                    16:41:5b:19:71:5a:ae:01:13:c6:be:1d:ff:0b:45:
                    f1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:6F:D6:FC:A3:9B:3A:CB:BC:7D:96:D3:CB:10:D2:65:03:96:06:EE
            X509v3 Authority Key Identifier:
                keyid:D3:19:00:9D:97:BF:AC:FD:2A:DE:23:FB:F6:73:BE:5A:FB:A9:2E:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHV9cFKjwq57h5ZMj2gFEDkEze6Z1YZJFtEQvNKTmjxj/0/D319009D97BFACFD2ADE23FBF673BE5AFBA92E10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D319009D97BFACFD2ADE23FBF673BE5AFBA92E10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHV9cFKjwq57h5ZMj2gFEDkEze6Z1YZJFtEQvNKTmjxj/0/323830343a363231343a3a2f33322d3334203d3e20323639323734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6214::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:28:fa:c0:62:d9:df:fe:66:97:48:5c:23:4d:7e:a6:99:c7:
         29:99:e4:e1:d6:ad:87:6a:c0:26:4a:af:87:88:9d:dc:7d:af:
         1e:28:21:a1:f9:c6:41:28:fd:88:8b:63:4d:2d:76:6b:44:84:
         4e:bc:71:0a:54:f5:99:6e:d2:00:ed:18:fe:ce:6a:a5:f2:b9:
         fb:d3:29:34:3e:6a:4d:12:b1:70:4d:6d:98:f2:72:68:af:c4:
         5b:f1:f9:28:7d:55:74:1d:ea:eb:c8:af:8e:bb:32:63:10:92:
         f1:66:f9:ca:ed:18:a1:29:34:68:15:5d:ef:59:d4:d5:8b:cf:
         80:28:2a:9b:a6:ab:d9:3b:e7:bf:4a:ac:4d:58:ed:83:52:3b:
         cd:8d:95:c2:13:a2:57:e1:c7:76:a0:2c:02:2b:d0:9b:02:fb:
         e8:82:f4:8e:b8:10:c6:eb:ae:b0:02:a8:76:31:f7:1b:f7:70:
         37:00:5d:94:5f:6d:b4:20:d4:da:b8:98:59:10:e5:83:c7:a6:
         0a:43:4e:20:43:7f:4a:d0:bf:45:2d:bc:6d:14:12:22:b5:8b:
         6e:a4:c4:dc:35:21:73:a8:88:cf:8c:ac:6c:5f:26:1e:22:72:
         5d:d0:1b:41:b8:9e:88:0b:0f:1d:ef:c9:e5:11:67:b5:ff:c5:
         18:fc:ed:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:34:39 2025 by rpki-client