Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhSptJHFELEV3Mm2sPYjjT3iTWD7idfYYU1AXKCQ6Zkg/0/323830343a333537343a633030303a3a2f33342d3334203d3e20323636323837.roa
File:                     323830343a333537343a633030303a3a2f33342d3334203d3e20323636323837.roa (raw, json)
Hash identifier:          C/qIOXa6L/tvOGYrjcqQ7PcUr9G3uevC0GB/kqIAlX8=
Subject key identifier:   04:00:5A:58:6F:45:A5:30:A4:38:1E:A2:A5:CC:E5:4D:7C:5A:AE:37
Certificate issuer:       /CN=9A7757F2422FC09935E55C6FC83910131BF7B3D5
Certificate serial:       454BA29B554A5C00E64CC1178531A69F0CB694CB
Authority key identifier: 9A:77:57:F2:42:2F:C0:99:35:E5:5C:6F:C8:39:10:13:1B:F7:B3:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A7757F2422FC09935E55C6FC83910131BF7B3D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhSptJHFELEV3Mm2sPYjjT3iTWD7idfYYU1AXKCQ6Zkg/0/323830343a333537343a633030303a3a2f33342d3334203d3e20323636323837.roa
Signing time:             Sun 14 May 2023 23:31:32 +0000
ROA not before:           Sun 14 May 2023 23:26:32 +0000
ROA not after:            Sun 12 May 2024 23:31:32 +0000
asID:                     266287
IP address blocks:        2804:3574:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:4b:a2:9b:55:4a:5c:00:e6:4c:c1:17:85:31:a6:9f:0c:b6:94:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A7757F2422FC09935E55C6FC83910131BF7B3D5
        Validity
            Not Before: May 14 23:26:32 2023 GMT
            Not After : May 12 23:31:32 2024 GMT
        Subject: CN=04005A586F45A530A4381EA2A5CCE54D7C5AAE37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a8:10:91:09:db:e4:ec:25:97:c2:15:87:6e:
                    ff:d9:25:c2:22:c1:7e:23:19:cc:ae:86:bd:9b:1d:
                    81:f0:bd:8c:39:87:33:db:10:c1:15:be:3c:70:a3:
                    a7:31:aa:28:5e:ba:01:7b:5d:2e:e3:cd:30:1b:5b:
                    6f:07:79:c8:70:70:98:64:e8:36:9e:39:b7:32:1b:
                    c9:ca:7c:78:75:cb:72:6e:a6:64:15:13:0b:da:d0:
                    72:34:77:82:75:7b:e6:c2:b7:b7:2b:77:e0:e5:3b:
                    88:9a:2c:e4:e4:a0:7d:cd:e3:96:38:75:61:42:d4:
                    60:f5:14:0c:52:fa:c0:b0:cd:00:11:3a:9b:2b:7c:
                    ca:15:79:5b:f0:e0:39:4a:a6:6b:40:b1:48:7f:36:
                    ba:77:fc:5a:da:8e:65:79:df:25:1e:09:00:eb:64:
                    20:9f:10:69:98:09:7c:5f:50:b4:40:b8:cb:5a:c2:
                    7d:ab:16:6c:18:7c:e4:49:b6:b0:4e:c9:9a:f5:02:
                    1d:ac:9a:6c:57:91:12:79:b6:3e:c8:95:0b:c8:b0:
                    b0:f5:26:4f:0a:54:e7:83:b3:60:47:85:1c:ed:72:
                    7a:9b:04:17:0d:0d:fa:49:44:ca:62:06:24:0f:cb:
                    b6:27:e8:ad:b2:db:d4:b1:64:f0:5c:11:59:c6:50:
                    6c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:00:5A:58:6F:45:A5:30:A4:38:1E:A2:A5:CC:E5:4D:7C:5A:AE:37
            X509v3 Authority Key Identifier:
                keyid:9A:77:57:F2:42:2F:C0:99:35:E5:5C:6F:C8:39:10:13:1B:F7:B3:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhSptJHFELEV3Mm2sPYjjT3iTWD7idfYYU1AXKCQ6Zkg/0/9A7757F2422FC09935E55C6FC83910131BF7B3D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A7757F2422FC09935E55C6FC83910131BF7B3D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhSptJHFELEV3Mm2sPYjjT3iTWD7idfYYU1AXKCQ6Zkg/0/323830343a333537343a633030303a3a2f33342d3334203d3e20323636323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3574:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         17:22:47:39:65:68:f0:98:b6:99:b3:c0:b2:a7:11:c8:70:7e:
         9c:3d:f7:8a:21:82:3f:67:12:8c:18:03:4c:ea:97:b9:78:c7:
         b8:b1:60:e1:0c:ec:70:fb:f5:46:ab:cd:2c:7a:ba:cd:ce:6b:
         2f:6f:9c:4d:ab:d6:20:6b:90:34:87:9e:20:da:4e:e0:4f:9a:
         79:c9:eb:ad:10:ac:9c:a2:af:8b:76:58:66:25:d5:c7:b5:8f:
         94:c6:42:75:1d:79:fe:df:36:79:30:1a:cd:9f:46:fc:5c:21:
         31:8a:71:08:cf:bf:be:81:04:23:2d:8c:9c:75:f6:44:63:9d:
         18:b1:c6:dc:cf:a8:3f:e1:f4:72:30:5e:31:59:c0:09:5a:56:
         fc:09:e1:12:40:c6:5d:e3:98:b8:f0:e5:cc:04:40:db:fd:66:
         ae:ee:de:89:0a:46:9f:c9:40:31:ea:de:b4:ed:b0:5c:7f:39:
         ad:19:b7:ec:99:97:97:80:82:a1:b1:b2:76:1b:1d:e0:bf:e8:
         a7:f7:b3:41:b8:e0:82:69:f0:1a:0e:bf:15:5b:53:84:d0:22:
         5e:81:9f:31:8e:42:0c:fb:dc:e8:91:d7:b0:3b:8e:1a:ee:e7:
         7c:66:58:31:b8:c0:93:e4:5e:88:a9:83:9b:a0:c7:28:5f:09:
         e1:19:4a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:00:49 2025 by rpki-client