Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EGCCBHBEK7VY54WYRZ1pYzXz836B4zPMFzRhBkUUq2BF/0/323830343a3335343a613162333a3a2f34382d3438203d3e20323632383734.roa
File:                     323830343a3335343a613162333a3a2f34382d3438203d3e20323632383734.roa (raw, json)
Hash identifier:          ySMGTJ0Rw04VeUt9ZLdBcX4lliml4qP12wi/p11NXiU=
Subject key identifier:   AD:03:2C:6E:A5:07:A2:85:A2:CF:4C:CF:62:01:07:89:1A:7A:A3:50
Certificate issuer:       /CN=1AA6ABECEF4F2FBDF50146B425D07A77D01EA852
Certificate serial:       1836C512ADFFDE9725BBD465DE646840751A5DA2
Authority key identifier: 1A:A6:AB:EC:EF:4F:2F:BD:F5:01:46:B4:25:D0:7A:77:D0:1E:A8:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1AA6ABECEF4F2FBDF50146B425D07A77D01EA852.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EGCCBHBEK7VY54WYRZ1pYzXz836B4zPMFzRhBkUUq2BF/0/323830343a3335343a613162333a3a2f34382d3438203d3e20323632383734.roa
Signing time:             Mon 05 Dec 2022 14:02:13 +0000
ROA not before:           Mon 05 Dec 2022 13:57:13 +0000
ROA not after:            Mon 04 Dec 2023 14:02:13 +0000
asID:                     262874
IP address blocks:        2804:354:a1b3::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:36:c5:12:ad:ff:de:97:25:bb:d4:65:de:64:68:40:75:1a:5d:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AA6ABECEF4F2FBDF50146B425D07A77D01EA852
        Validity
            Not Before: Dec  5 13:57:13 2022 GMT
            Not After : Dec  4 14:02:13 2023 GMT
        Subject: CN=AD032C6EA507A285A2CF4CCF620107891A7AA350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b2:26:51:14:35:97:b7:ed:e2:94:a8:e7:24:
                    19:0b:47:64:c8:ee:98:d3:07:52:49:19:72:88:43:
                    8c:6b:c8:8c:05:f5:75:67:02:1e:1f:00:48:09:5d:
                    e5:17:36:e9:b4:19:2d:ea:08:68:0e:a4:43:dc:1e:
                    28:42:0a:85:f5:32:0a:5c:38:8b:5c:cd:2b:77:95:
                    e3:b9:07:2d:0d:65:86:89:94:17:cc:e6:ae:36:69:
                    44:0a:1d:18:9d:27:75:28:28:d1:36:f5:ac:c2:82:
                    4f:df:69:49:8c:e6:4a:a2:8c:92:2f:9f:0a:86:f3:
                    d6:a9:44:a5:dd:b2:9c:2e:60:3e:8e:3a:58:38:fc:
                    ef:55:52:3d:21:c9:cd:b1:09:5e:3c:ae:ef:2c:55:
                    69:60:67:9e:7a:52:7c:b7:f3:aa:24:68:09:6c:3b:
                    5d:1e:c5:82:1e:a7:f5:66:dc:1b:4b:64:87:5f:c5:
                    27:9b:9a:e6:ad:c8:87:15:c8:e4:4c:60:e2:8f:d2:
                    29:5f:7f:fb:42:24:2d:19:8c:28:17:fb:97:67:d5:
                    2d:56:d8:01:c1:b2:b8:cd:3a:7b:1a:ee:79:f7:4d:
                    b1:91:a3:40:4a:fa:ba:72:00:5e:75:a4:ac:ad:0c:
                    bb:33:68:cb:bf:61:d2:55:57:e0:be:97:6a:c1:b7:
                    8e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:03:2C:6E:A5:07:A2:85:A2:CF:4C:CF:62:01:07:89:1A:7A:A3:50
            X509v3 Authority Key Identifier:
                keyid:1A:A6:AB:EC:EF:4F:2F:BD:F5:01:46:B4:25:D0:7A:77:D0:1E:A8:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EGCCBHBEK7VY54WYRZ1pYzXz836B4zPMFzRhBkUUq2BF/0/1AA6ABECEF4F2FBDF50146B425D07A77D01EA852.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1AA6ABECEF4F2FBDF50146B425D07A77D01EA852.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EGCCBHBEK7VY54WYRZ1pYzXz836B4zPMFzRhBkUUq2BF/0/323830343a3335343a613162333a3a2f34382d3438203d3e20323632383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:354:a1b3::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:13:d7:06:9a:e8:fe:68:88:7c:dc:19:8a:30:4f:80:59:32:
         40:f4:45:1e:c2:aa:f0:ad:49:ed:6f:f5:31:a5:09:79:91:25:
         2d:dc:88:f6:ba:42:89:b2:95:10:97:8d:42:b0:a8:67:fc:16:
         6d:a2:04:f7:ba:5c:5a:87:7a:1f:45:14:7a:d3:44:b0:cf:ad:
         75:30:ae:b6:bb:3e:6a:f0:0d:47:83:31:04:d8:d1:4b:19:ac:
         29:8f:e4:ab:ed:13:53:29:82:10:3d:bd:ab:cd:df:21:b0:a5:
         7f:33:88:14:cf:06:55:a2:59:29:01:d0:c8:46:30:da:5c:9b:
         95:d6:e9:8a:20:8f:4b:dd:29:14:4d:ac:3e:99:f2:b2:2a:89:
         0e:cd:9a:1d:3b:4b:f9:a9:09:60:40:4e:60:57:f7:bd:1d:2c:
         8d:6b:27:f3:b0:2c:07:a8:a0:63:8c:8e:4e:41:b5:fe:a9:c4:
         31:76:6d:5c:e6:5b:3d:0c:65:8f:98:aa:4c:27:07:37:8f:6d:
         04:18:40:34:9d:8e:b2:91:15:ae:a3:c0:a1:70:13:6c:a4:c5:
         28:fb:41:dd:f4:f5:68:36:9e:1f:cd:31:49:b5:05:82:60:54:
         be:e6:d9:4b:65:d1:af:d9:99:57:da:79:5a:40:98:b9:a1:e5:
         01:aa:58:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:25:25 2025 by rpki-client