Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E3oBih1ePYHe52iyFoF51jmBAJSdky2UUHx7CewFALGS/0/323830343a363637633a3a2f33342d3334203d3e20323639353633.roa
File:                     323830343a363637633a3a2f33342d3334203d3e20323639353633.roa (raw, json)
Hash identifier:          Ce8SZ/iw+Ok2gM+epkx/ef7l8E5XgmaJD3sZsDqq8fw=
Subject key identifier:   19:52:69:FC:74:8C:3D:C7:B1:8C:96:7D:BB:9B:D8:9C:4B:F0:83:A4
Certificate issuer:       /CN=9DEAA4729E7E5DC67882BE2305F6B8EB86B54D57
Certificate serial:       2F230FE1D6D8DCB3F8AA0E0FABA006736DDDBEFE
Authority key identifier: 9D:EA:A4:72:9E:7E:5D:C6:78:82:BE:23:05:F6:B8:EB:86:B5:4D:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DEAA4729E7E5DC67882BE2305F6B8EB86B54D57.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E3oBih1ePYHe52iyFoF51jmBAJSdky2UUHx7CewFALGS/0/323830343a363637633a3a2f33342d3334203d3e20323639353633.roa
Signing time:             Tue 02 Jan 2024 16:29:45 +0000
ROA not before:           Tue 02 Jan 2024 16:24:45 +0000
ROA not after:            Tue 31 Dec 2024 16:29:45 +0000
asID:                     269563
IP address blocks:        2804:667c::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:23:0f:e1:d6:d8:dc:b3:f8:aa:0e:0f:ab:a0:06:73:6d:dd:be:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DEAA4729E7E5DC67882BE2305F6B8EB86B54D57
        Validity
            Not Before: Jan  2 16:24:45 2024 GMT
            Not After : Dec 31 16:29:45 2024 GMT
        Subject: CN=195269FC748C3DC7B18C967DBB9BD89C4BF083A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:db:7b:57:dc:14:08:3e:7d:6f:48:6d:d6:88:
                    aa:5a:26:90:b6:8a:04:7c:6b:c1:b2:2a:99:a2:52:
                    0b:41:48:e6:e8:7d:e5:41:01:fd:ed:91:3c:74:4a:
                    06:d7:6d:8e:82:bf:78:a2:4b:2b:32:78:b7:b0:f7:
                    63:30:6d:85:67:53:b1:bf:2a:8c:79:d2:af:48:4c:
                    37:2d:ba:7f:b1:f9:76:a2:18:c2:88:91:06:72:14:
                    70:4d:e5:eb:4b:f6:27:9a:f4:d5:83:43:9d:68:44:
                    b3:1c:e5:31:88:0d:2f:b7:e7:9a:2f:6b:7f:a0:6a:
                    70:98:c5:ce:72:56:dc:85:24:12:64:3a:76:0f:8e:
                    c2:cf:2e:a3:f5:5e:02:62:cb:74:1a:73:2d:f4:e9:
                    5f:17:9b:7f:80:82:7c:19:9c:60:32:47:f0:c4:60:
                    52:c1:68:4d:3d:40:16:8e:22:16:e4:a4:25:4f:70:
                    ef:ac:b8:55:68:4d:d4:eb:e4:57:c3:94:8e:b9:e4:
                    f3:f8:67:66:3c:40:86:cf:d8:65:50:96:11:b2:65:
                    50:41:10:04:84:b8:41:4d:99:5d:0e:37:ba:9c:d3:
                    f8:6a:df:55:1f:c1:a2:c0:a9:dc:ce:54:91:66:95:
                    c6:9a:0a:9b:36:67:5d:e3:41:57:ec:a4:a7:b7:80:
                    0f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:52:69:FC:74:8C:3D:C7:B1:8C:96:7D:BB:9B:D8:9C:4B:F0:83:A4
            X509v3 Authority Key Identifier:
                keyid:9D:EA:A4:72:9E:7E:5D:C6:78:82:BE:23:05:F6:B8:EB:86:B5:4D:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E3oBih1ePYHe52iyFoF51jmBAJSdky2UUHx7CewFALGS/0/9DEAA4729E7E5DC67882BE2305F6B8EB86B54D57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DEAA4729E7E5DC67882BE2305F6B8EB86B54D57.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3oBih1ePYHe52iyFoF51jmBAJSdky2UUHx7CewFALGS/0/323830343a363637633a3a2f33342d3334203d3e20323639353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:667c::/34

    Signature Algorithm: sha256WithRSAEncryption
         70:db:b5:75:f2:9c:61:0b:34:b6:2d:25:58:8c:30:da:84:69:
         18:21:9e:35:6c:13:36:78:27:8e:4d:00:7c:24:6c:2f:68:f8:
         27:37:9b:5f:3f:38:0e:ab:1d:14:d2:dc:f8:e0:68:c3:74:b8:
         9b:3b:04:69:d8:2e:de:be:7f:ba:9c:77:c7:d7:f3:ea:86:a0:
         62:5c:31:10:7b:ff:60:e2:00:e8:09:74:f3:68:13:97:d1:24:
         f1:fa:dc:2d:bc:29:0b:48:e3:bb:ac:97:3f:0e:55:be:cc:8f:
         e9:2a:d5:30:d2:b7:5a:1f:81:2e:bd:ca:54:a8:3f:3e:03:ea:
         c1:f7:af:51:7e:78:bd:39:ad:a5:31:e6:71:c2:d4:38:31:2a:
         e3:1c:b3:c6:79:02:36:e5:d9:1a:1e:ee:13:85:bb:1a:6c:2a:
         40:67:25:8b:e2:5d:b0:57:57:92:2f:4e:bd:17:42:22:2b:9d:
         a9:16:6d:d3:19:64:ee:23:62:75:99:d4:bd:37:80:6f:c1:ce:
         24:9f:d9:c5:00:79:a1:25:bb:73:aa:34:b6:59:b7:90:f6:cf:
         c1:20:aa:24:15:80:41:b8:72:9e:d9:37:9b:d0:96:16:62:a2:
         6b:47:3d:11:4f:d4:97:a9:31:46:26:7d:01:b6:3e:40:73:74:
         6c:23:1e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:26:41 2025 by rpki-client