Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DdJgAc9jrWuyAq1B4kBVUqZKp42q9evoAaKoztL3idTv/0/323830343a383536633a3a2f33342d3334203d3e20323732353738.roa
File:                     323830343a383536633a3a2f33342d3334203d3e20323732353738.roa (raw, json)
Hash identifier:          AWxkKujDkqrD/DGvD8jSobZuIpcsavjGdR3BnffYzGg=
Subject key identifier:   0B:35:F1:74:8B:23:26:34:B8:62:DD:33:A4:72:00:5B:2F:2B:8D:2B
Certificate issuer:       /CN=9DD5B61267C5C551A1025D2574BA75FA319577B7
Certificate serial:       4B3B6EA07BA845FC39B3C06243E19DF5E30D2EE4
Authority key identifier: 9D:D5:B6:12:67:C5:C5:51:A1:02:5D:25:74:BA:75:FA:31:95:77:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DD5B61267C5C551A1025D2574BA75FA319577B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DdJgAc9jrWuyAq1B4kBVUqZKp42q9evoAaKoztL3idTv/0/323830343a383536633a3a2f33342d3334203d3e20323732353738.roa
Signing time:             Tue 09 Aug 2022 00:40:10 +0000
ROA not before:           Tue 09 Aug 2022 00:35:10 +0000
ROA not after:            Tue 08 Aug 2023 00:40:10 +0000
asID:                     272578
IP address blocks:        2804:856c::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:3b:6e:a0:7b:a8:45:fc:39:b3:c0:62:43:e1:9d:f5:e3:0d:2e:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DD5B61267C5C551A1025D2574BA75FA319577B7
        Validity
            Not Before: Aug  9 00:35:10 2022 GMT
            Not After : Aug  8 00:40:10 2023 GMT
        Subject: CN=0B35F1748B232634B862DD33A472005B2F2B8D2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:51:cb:4c:4e:52:a6:1b:76:46:45:2e:2b:ac:
                    89:97:13:40:e6:8b:1b:1e:1a:ad:37:1d:83:c6:4b:
                    dd:a1:a1:ca:c9:97:80:07:08:2e:1a:a4:9a:17:db:
                    00:b1:49:95:37:79:cc:58:f3:ed:0b:24:01:60:01:
                    ac:40:aa:f1:49:b4:63:77:24:7c:30:44:30:d9:70:
                    20:cb:d9:83:24:f0:c9:4d:53:2d:7e:73:f4:0d:dd:
                    80:b9:28:ff:a3:5e:cf:75:4c:60:28:da:20:0c:8c:
                    d1:b9:61:5b:16:ad:3d:77:f2:7b:c9:55:51:88:6c:
                    47:14:77:f3:3f:8a:57:de:26:30:b7:d5:a7:eb:91:
                    3f:7d:ab:c4:37:7e:c5:87:24:32:fb:18:af:46:78:
                    ed:50:f1:84:41:61:9e:b3:cd:4e:2c:fd:2e:7f:b0:
                    6a:4c:53:6a:13:ee:30:4b:24:94:1f:58:44:5c:16:
                    9f:11:15:8c:76:c9:69:32:41:67:a3:34:fe:0d:b1:
                    10:e3:d6:6a:8a:79:62:d2:f4:ef:69:e0:c5:47:0e:
                    5d:0e:24:f0:f8:ff:22:57:3a:fb:00:d9:41:2a:53:
                    43:dc:77:cd:cf:75:97:2a:e4:45:eb:40:0c:e0:79:
                    21:ab:07:a9:cf:ec:26:6d:7b:ec:d4:fe:9d:f8:75:
                    53:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:35:F1:74:8B:23:26:34:B8:62:DD:33:A4:72:00:5B:2F:2B:8D:2B
            X509v3 Authority Key Identifier:
                keyid:9D:D5:B6:12:67:C5:C5:51:A1:02:5D:25:74:BA:75:FA:31:95:77:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DdJgAc9jrWuyAq1B4kBVUqZKp42q9evoAaKoztL3idTv/0/9DD5B61267C5C551A1025D2574BA75FA319577B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DD5B61267C5C551A1025D2574BA75FA319577B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdJgAc9jrWuyAq1B4kBVUqZKp42q9evoAaKoztL3idTv/0/323830343a383536633a3a2f33342d3334203d3e20323732353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:856c::/34

    Signature Algorithm: sha256WithRSAEncryption
         2a:57:29:b0:16:16:77:32:fd:da:ac:3c:47:7e:5a:dc:d8:ea:
         58:48:5a:15:52:6c:42:86:85:47:20:8f:87:e6:24:2e:b4:1c:
         fd:24:d5:70:34:17:08:50:ae:89:4d:79:c6:14:db:fd:3d:f4:
         b9:37:1a:af:e6:cf:c5:34:a1:c5:89:8d:a3:73:0d:00:94:2d:
         b1:d5:a8:15:d1:5f:11:4f:54:28:1e:ca:72:aa:d4:01:0e:7b:
         05:c7:17:74:7f:c8:dd:8f:3f:e3:ce:39:fe:ee:a0:7f:2c:c0:
         9c:b4:94:0d:9d:93:0a:03:ea:eb:a8:f9:a1:14:2e:3e:1b:9d:
         cb:a5:0f:8b:18:e4:d0:69:97:f5:cc:ac:84:c9:03:9d:9c:c9:
         eb:57:38:ae:95:5b:cd:ec:d8:3a:e0:1a:75:fe:87:70:11:3c:
         4d:01:c6:96:7c:a1:c0:00:26:58:6a:65:f3:66:7f:3c:a8:2e:
         eb:4e:c0:aa:55:f7:8f:8e:59:5b:d1:1f:2a:3c:09:f5:4b:94:
         ed:3f:11:43:85:e3:b2:44:fc:5d:8b:7e:f2:e5:3a:e1:a5:7e:
         07:3f:26:0f:82:a8:25:9a:08:01:fb:49:79:ee:6c:c1:9d:00:
         66:fa:ac:00:9c:d1:1e:45:59:6f:8a:e4:e8:f2:e2:cd:19:e8:
         36:b8:25:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:15:39 2025 by rpki-client