Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/323830343a326231303a3a2f34372d3437203d3e203532393136.roa
File:                     323830343a326231303a3a2f34372d3437203d3e203532393136.roa (raw, json)
Hash identifier:          tY5ZxzhNx0iPej2hN5KH1p6GnxINJ+oo4eK9HwGL9mc=
Subject key identifier:   90:5F:9F:4C:08:01:4C:CE:17:87:A1:7C:07:97:A8:99:48:9D:48:A7
Certificate issuer:       /CN=D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D
Certificate serial:       19897CA79E543A3AE566EEE4D2DC9D249F01A3C5
Authority key identifier: D1:03:4C:4B:71:C8:FD:5C:F3:CC:7E:3C:02:EC:F8:22:A1:A2:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/323830343a326231303a3a2f34372d3437203d3e203532393136.roa
Signing time:             Sat 16 Jul 2022 04:17:46 +0000
ROA not before:           Sat 16 Jul 2022 04:12:46 +0000
ROA not after:            Sat 15 Jul 2023 04:17:46 +0000
asID:                     52916
IP address blocks:        2804:2b10::/47 maxlen: 47
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:89:7c:a7:9e:54:3a:3a:e5:66:ee:e4:d2:dc:9d:24:9f:01:a3:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D
        Validity
            Not Before: Jul 16 04:12:46 2022 GMT
            Not After : Jul 15 04:17:46 2023 GMT
        Subject: CN=905F9F4C08014CCE1787A17C0797A899489D48A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e4:ee:b2:47:fd:e5:00:0f:f4:35:c9:f0:7a:
                    4e:7a:fa:38:dc:d4:0f:61:25:08:33:b7:fd:fc:d8:
                    8b:9f:28:be:9b:ef:1e:6e:dd:e4:40:9e:c3:6f:af:
                    41:dc:32:f5:a6:97:60:32:0c:2a:b9:fd:07:15:e4:
                    90:0c:d9:b8:81:24:79:dd:e4:ee:b2:9d:47:c7:eb:
                    72:3c:22:8f:1b:5e:e7:e4:64:3c:74:c1:b2:dd:71:
                    ab:20:e1:83:b6:5f:c7:4e:56:74:0c:6e:1e:e2:36:
                    df:94:0d:ef:77:60:bf:2b:d0:4a:18:aa:f2:31:ac:
                    85:ef:21:b3:87:b1:56:72:42:b6:60:1a:c1:60:d5:
                    0e:67:32:13:da:6d:d7:65:ae:d7:43:72:c7:6b:cc:
                    74:92:37:46:cc:7b:eb:44:d5:c1:e2:0a:d7:c9:9c:
                    2b:c5:09:95:48:80:29:9a:af:62:36:1c:42:b2:5c:
                    3f:ee:6d:ec:19:da:6b:25:7e:63:87:8e:0b:86:d2:
                    83:ff:9e:9a:d6:ce:21:b6:95:89:12:18:4c:eb:0e:
                    f5:20:20:62:48:1e:0f:4d:fb:ef:c1:3b:10:b1:ca:
                    ad:3e:62:ff:ce:de:72:3f:6e:6c:9c:b0:31:8a:06:
                    37:48:2e:a2:d3:f9:92:ca:da:bd:53:93:98:48:50:
                    55:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:5F:9F:4C:08:01:4C:CE:17:87:A1:7C:07:97:A8:99:48:9D:48:A7
            X509v3 Authority Key Identifier:
                keyid:D1:03:4C:4B:71:C8:FD:5C:F3:CC:7E:3C:02:EC:F8:22:A1:A2:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/323830343a326231303a3a2f34372d3437203d3e203532393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b10::/47

    Signature Algorithm: sha256WithRSAEncryption
         56:af:25:11:48:72:8d:ea:1d:48:31:f7:e6:ff:1a:08:66:55:
         a2:9f:0b:ca:d4:37:5b:ed:3d:c7:17:c2:68:b9:a6:48:0b:73:
         34:83:45:64:03:43:46:b7:78:1c:9d:03:87:0e:f6:02:45:48:
         14:6f:7e:e0:b1:fa:15:2b:f4:dc:2f:5d:23:27:ae:95:7e:f9:
         a3:22:7a:50:ab:b4:cd:04:df:27:79:0f:3d:d2:63:40:9c:b1:
         ef:3f:76:e0:f6:9a:0d:7e:2a:00:eb:67:2a:c3:36:ab:6d:ff:
         33:08:cb:51:5b:be:b1:6c:47:c2:98:c7:21:21:5a:47:2a:19:
         95:c9:6d:c6:9a:97:e1:ca:52:74:ed:1a:32:2e:7c:1a:00:9d:
         58:50:7f:62:d4:1d:44:cb:82:91:c0:6e:c3:4f:f8:1f:9b:b9:
         12:86:0e:f8:e5:67:ce:d1:59:9a:b4:2a:9b:93:e3:3c:92:f4:
         52:74:ec:e4:05:51:82:fc:43:30:98:fa:e3:1f:9c:34:d3:9a:
         78:34:82:40:b9:a4:cf:9c:5c:67:f1:9c:d4:cb:09:49:f9:88:
         d5:55:e6:2d:5e:e6:9d:fe:5f:b9:2a:36:93:bd:a8:fa:c7:c8:
         cb:db:af:b9:e2:45:87:e6:d5:b5:44:be:0e:18:be:d8:42:38:
         a0:51:b6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:54:10 2025 by rpki-client