Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E3oBih1ePYHe52iyFoF51jmBAJSdky2UUHx7CewFALGS/0/323830343a363637633a383030303a3a2f33342d3334203d3e20323639353633.roa
File:                     323830343a363637633a383030303a3a2f33342d3334203d3e20323639353633.roa (raw, json)
Hash identifier:          1JnmtXXlkVNHeIaDPtYN4RHfQL2QA6gXrD6amNOoOrg=
Subject key identifier:   30:66:95:0F:37:EC:5C:BA:A2:CC:8E:43:D3:CB:23:89:9F:5D:93:5A
Certificate issuer:       /CN=9DEAA4729E7E5DC67882BE2305F6B8EB86B54D57
Certificate serial:       75E41631D82ADF88D47DF07ED5BF18755CCD6E08
Authority key identifier: 9D:EA:A4:72:9E:7E:5D:C6:78:82:BE:23:05:F6:B8:EB:86:B5:4D:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DEAA4729E7E5DC67882BE2305F6B8EB86B54D57.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E3oBih1ePYHe52iyFoF51jmBAJSdky2UUHx7CewFALGS/0/323830343a363637633a383030303a3a2f33342d3334203d3e20323639353633.roa
Signing time:             Tue 02 Jan 2024 16:29:46 +0000
ROA not before:           Tue 02 Jan 2024 16:24:46 +0000
ROA not after:            Tue 31 Dec 2024 16:29:46 +0000
asID:                     269563
IP address blocks:        2804:667c:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:e4:16:31:d8:2a:df:88:d4:7d:f0:7e:d5:bf:18:75:5c:cd:6e:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DEAA4729E7E5DC67882BE2305F6B8EB86B54D57
        Validity
            Not Before: Jan  2 16:24:46 2024 GMT
            Not After : Dec 31 16:29:46 2024 GMT
        Subject: CN=3066950F37EC5CBAA2CC8E43D3CB23899F5D935A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2a:e0:07:a0:8f:d4:7f:7f:28:0a:07:f4:b2:
                    f9:65:d7:bf:5d:d7:4b:bd:52:6d:7e:1b:4a:34:29:
                    f8:a5:0c:a8:77:92:c3:ba:2e:a1:65:6d:be:4e:a1:
                    c0:48:e1:27:d9:ac:9f:51:c1:cd:3d:49:3c:58:33:
                    04:59:48:e5:59:a2:58:29:da:73:e4:ce:c4:14:e8:
                    b5:4c:2a:9f:1d:7b:96:16:12:7b:35:5a:35:8a:d9:
                    1c:9b:06:fb:e4:e7:64:2b:b6:11:6a:6d:bd:27:fa:
                    86:bc:b6:57:3c:e9:25:84:85:c3:87:f5:1c:78:ec:
                    1e:74:7f:d0:07:5c:29:c5:68:39:3b:d2:ef:4d:3e:
                    e9:fc:11:2f:d5:fd:7f:86:20:eb:d3:02:50:1d:35:
                    4a:9a:ce:86:82:75:d8:19:1b:94:df:7e:b6:72:2a:
                    29:8f:cf:6a:ef:b9:19:31:ce:87:3b:62:8c:99:8e:
                    26:58:59:e0:98:a3:d8:8d:7a:0e:9c:af:64:56:1d:
                    52:d8:b0:36:4d:49:35:67:43:e8:7d:5d:fa:f3:5d:
                    db:1c:02:c0:8f:bb:ed:4c:a3:67:4e:2d:fc:ba:e8:
                    53:95:b6:53:dc:2f:3e:39:ab:14:79:3e:47:2f:4a:
                    7a:f9:27:82:bb:b5:02:1f:d4:d0:f0:94:63:dc:bd:
                    7d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:66:95:0F:37:EC:5C:BA:A2:CC:8E:43:D3:CB:23:89:9F:5D:93:5A
            X509v3 Authority Key Identifier:
                keyid:9D:EA:A4:72:9E:7E:5D:C6:78:82:BE:23:05:F6:B8:EB:86:B5:4D:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E3oBih1ePYHe52iyFoF51jmBAJSdky2UUHx7CewFALGS/0/9DEAA4729E7E5DC67882BE2305F6B8EB86B54D57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DEAA4729E7E5DC67882BE2305F6B8EB86B54D57.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3oBih1ePYHe52iyFoF51jmBAJSdky2UUHx7CewFALGS/0/323830343a363637633a383030303a3a2f33342d3334203d3e20323639353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:667c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         55:3b:f5:44:17:31:d0:66:64:fd:15:d4:45:1c:a2:43:09:79:
         58:30:da:0d:23:33:24:da:4a:36:3f:28:37:84:63:1e:7c:a8:
         bf:fb:ca:6e:5b:93:6a:e6:9c:02:6a:ce:c3:fc:70:3a:2c:6f:
         82:b9:e6:61:83:13:4a:fe:9e:e3:bc:81:4a:78:70:57:20:6a:
         a1:5c:34:bc:97:63:23:24:28:eb:85:1a:59:90:e2:a4:a4:5a:
         af:cf:a0:78:10:c9:cc:e7:4f:7b:ee:16:7a:0e:7a:ef:5c:da:
         8c:77:88:60:29:5f:ce:9f:a1:0f:03:17:48:ce:3b:12:d1:2e:
         7f:f1:2f:35:ed:d1:9b:3e:cf:1e:28:35:3d:74:54:44:46:a1:
         84:8f:a3:91:a0:31:0e:a0:ce:29:64:e0:2c:2c:54:18:53:d8:
         37:c3:b5:bb:f6:cf:96:df:0c:c2:13:47:96:4f:cf:74:a9:61:
         46:2f:e2:6b:2d:35:6e:7c:9d:f0:1e:57:e7:d5:ff:6d:8a:20:
         ce:12:68:c2:6f:a8:c6:40:d3:33:5c:c3:27:84:bd:36:3e:40:
         be:0d:10:fd:c0:32:ca:e5:43:1b:b0:6f:b4:07:6c:10:42:b1:
         f0:e3:6e:97:5a:8e:37:92:52:57:e1:d3:e0:b7:dc:be:81:42:
         02:16:b7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:20:44 2025 by rpki-client