Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E3oBih1ePYHe52iyFoF51jmBAJSdky2UUHx7CewFALGS/0/323830343a363637633a383030303a3a2f33332d3333203d3e20323639353633.roa
File:                     323830343a363637633a383030303a3a2f33332d3333203d3e20323639353633.roa (raw, json)
Hash identifier:          hZiZ8UGG4Px+BJ4xaG84j+6+zXtbjFTVaGtqI9b2eME=
Subject key identifier:   81:8C:DF:80:63:E8:8E:1F:23:26:29:67:77:F1:C3:64:32:69:D0:0D
Certificate issuer:       /CN=9DEAA4729E7E5DC67882BE2305F6B8EB86B54D57
Certificate serial:       5B196E0773C261101BA27407998BE48469B266E0
Authority key identifier: 9D:EA:A4:72:9E:7E:5D:C6:78:82:BE:23:05:F6:B8:EB:86:B5:4D:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DEAA4729E7E5DC67882BE2305F6B8EB86B54D57.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E3oBih1ePYHe52iyFoF51jmBAJSdky2UUHx7CewFALGS/0/323830343a363637633a383030303a3a2f33332d3333203d3e20323639353633.roa
Signing time:             Tue 02 Jan 2024 16:29:46 +0000
ROA not before:           Tue 02 Jan 2024 16:24:46 +0000
ROA not after:            Tue 31 Dec 2024 16:29:46 +0000
asID:                     269563
IP address blocks:        2804:667c:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:19:6e:07:73:c2:61:10:1b:a2:74:07:99:8b:e4:84:69:b2:66:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DEAA4729E7E5DC67882BE2305F6B8EB86B54D57
        Validity
            Not Before: Jan  2 16:24:46 2024 GMT
            Not After : Dec 31 16:29:46 2024 GMT
        Subject: CN=818CDF8063E88E1F2326296777F1C3643269D00D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:0e:b2:60:f8:6e:1f:b3:b3:dd:61:a3:d8:2e:
                    1d:f0:39:83:cb:b8:5a:77:84:2f:d2:e6:43:e9:dd:
                    77:72:71:7d:f5:6d:4d:2f:ec:bf:8c:72:c6:b2:78:
                    f1:d0:83:8f:c8:2f:14:51:d2:ba:ef:f9:c5:94:43:
                    fd:1b:be:5a:76:f9:3a:bd:eb:4e:51:eb:1e:17:7e:
                    cd:00:bc:8c:b7:d6:e6:07:52:66:40:0d:ba:fb:37:
                    c2:d3:01:90:33:e7:25:37:60:68:1b:71:5f:65:2c:
                    c7:8a:da:f6:dc:b5:17:46:4b:01:27:d2:a7:0d:3a:
                    ed:a8:2e:ff:1f:5e:93:b9:43:c6:53:ba:ec:f6:e7:
                    ff:55:53:6d:58:c1:81:03:a3:ca:16:e9:ff:fc:fd:
                    af:26:c9:4f:16:f8:41:77:02:be:88:18:91:a0:66:
                    55:c6:7b:33:3a:6d:62:45:b8:6a:a2:11:eb:53:f7:
                    fd:7a:0d:90:6d:76:d5:f9:4d:a4:f4:2e:46:a7:78:
                    a1:0b:6f:04:50:7d:a3:d6:9c:d6:2e:88:03:13:53:
                    4b:9a:29:b5:a3:fa:de:17:dd:6a:8b:88:f0:ef:6c:
                    e6:1a:0f:f5:d4:d0:b4:28:4e:74:46:07:1a:5c:db:
                    ec:5f:2b:1f:5b:ac:9f:f9:0c:84:5e:4f:ba:21:71:
                    f6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:8C:DF:80:63:E8:8E:1F:23:26:29:67:77:F1:C3:64:32:69:D0:0D
            X509v3 Authority Key Identifier:
                keyid:9D:EA:A4:72:9E:7E:5D:C6:78:82:BE:23:05:F6:B8:EB:86:B5:4D:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E3oBih1ePYHe52iyFoF51jmBAJSdky2UUHx7CewFALGS/0/9DEAA4729E7E5DC67882BE2305F6B8EB86B54D57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DEAA4729E7E5DC67882BE2305F6B8EB86B54D57.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3oBih1ePYHe52iyFoF51jmBAJSdky2UUHx7CewFALGS/0/323830343a363637633a383030303a3a2f33332d3333203d3e20323639353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:667c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         9f:22:94:89:af:d3:dc:1e:dd:b8:e5:c0:af:0c:f3:00:11:4e:
         bf:8e:22:7a:d6:5e:ed:33:3f:7a:ad:34:2f:ec:c4:7e:d6:12:
         35:34:bb:0a:49:a7:3c:1d:5c:f5:1d:26:cd:67:31:1f:fb:81:
         2a:ac:30:d4:a0:57:95:90:c5:0d:93:5b:bb:b7:db:62:2e:fb:
         ca:8a:2d:89:a6:9c:f4:91:75:6c:7b:f5:2d:d0:10:9e:d5:fe:
         90:9b:f4:bf:03:c8:6b:72:d7:c2:9a:2d:47:0c:20:59:cc:09:
         65:1c:e6:b7:28:43:1d:0b:1b:0c:07:77:b1:04:f2:13:99:e9:
         71:40:4c:f7:dc:cb:78:93:d3:65:fc:73:21:75:6a:a9:98:89:
         08:93:29:18:6b:19:4c:25:1b:8a:60:79:84:53:f2:30:2f:61:
         34:61:f2:46:7d:91:d5:3b:9b:f2:7a:05:fb:3e:fc:a9:17:1e:
         10:d9:9f:b5:54:bd:2b:05:71:42:d9:47:ac:c3:2c:28:78:8f:
         0f:36:03:c5:78:d4:e0:99:de:2a:1b:b6:83:25:c6:4c:ba:8f:
         3f:ce:74:43:69:83:2e:34:7c:da:6e:f4:9e:8f:3a:c0:83:4e:
         3a:45:db:b2:ed:d4:97:fd:9d:f0:ae:05:2b:8b:cf:ae:71:38:
         44:4a:e6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:28:21 2025 by rpki-client