Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EGCCBHBEK7VY54WYRZ1pYzXz836B4zPMFzRhBkUUq2BF/0/323830343a3335343a613162343a3a2f34382d3438203d3e20323632383734.roa
File:                     323830343a3335343a613162343a3a2f34382d3438203d3e20323632383734.roa (raw, json)
Hash identifier:          XVMbWVBBGF887YIym7d/q12E4PYUu8KZifU+hqYTqxk=
Subject key identifier:   7A:40:78:57:21:DB:BF:11:EE:CF:65:50:C3:6A:87:0C:E2:9F:11:17
Certificate issuer:       /CN=1AA6ABECEF4F2FBDF50146B425D07A77D01EA852
Certificate serial:       1080E44789F16F6C01F290F6F99F340CE8229534
Authority key identifier: 1A:A6:AB:EC:EF:4F:2F:BD:F5:01:46:B4:25:D0:7A:77:D0:1E:A8:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1AA6ABECEF4F2FBDF50146B425D07A77D01EA852.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EGCCBHBEK7VY54WYRZ1pYzXz836B4zPMFzRhBkUUq2BF/0/323830343a3335343a613162343a3a2f34382d3438203d3e20323632383734.roa
Signing time:             Mon 05 Dec 2022 14:02:13 +0000
ROA not before:           Mon 05 Dec 2022 13:57:13 +0000
ROA not after:            Mon 04 Dec 2023 14:02:13 +0000
asID:                     262874
IP address blocks:        2804:354:a1b4::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:80:e4:47:89:f1:6f:6c:01:f2:90:f6:f9:9f:34:0c:e8:22:95:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AA6ABECEF4F2FBDF50146B425D07A77D01EA852
        Validity
            Not Before: Dec  5 13:57:13 2022 GMT
            Not After : Dec  4 14:02:13 2023 GMT
        Subject: CN=7A40785721DBBF11EECF6550C36A870CE29F1117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b2:6d:35:01:f9:a4:fc:99:42:fc:89:c3:92:
                    70:36:4c:2a:f4:b2:ae:e9:b9:15:68:3d:aa:96:0e:
                    79:59:d9:09:11:3d:14:5c:50:63:39:03:e6:23:df:
                    6d:c4:4b:b2:c3:ef:40:c5:a1:e5:9a:cf:d0:0e:be:
                    8c:13:77:7f:4a:f3:f4:72:6f:e9:1f:f0:5a:a7:5b:
                    6b:e2:2c:97:dd:4a:3c:27:e2:ae:7b:a2:e7:85:4b:
                    97:cc:71:59:e8:eb:36:1c:3c:a4:8d:c1:e5:4c:71:
                    23:39:d2:59:d9:87:af:46:19:15:96:ba:c9:b8:2a:
                    7c:be:be:d3:65:c7:9b:b8:06:1f:98:67:f8:49:78:
                    8b:85:d3:1d:d7:86:0f:b5:ee:1d:0a:64:59:80:55:
                    84:2a:1f:fe:3b:72:0c:d6:9a:10:95:88:04:1b:8e:
                    5b:d5:85:fe:11:53:fc:19:e4:3f:80:a2:3c:43:79:
                    4c:fe:c1:58:30:5b:68:eb:40:33:99:ec:eb:6e:40:
                    5c:ff:69:10:99:ed:44:90:7a:90:da:e4:46:63:22:
                    a6:58:64:a6:23:21:83:bb:29:8c:3a:c4:e1:11:6c:
                    af:db:eb:c0:79:6c:53:bf:9d:f7:26:4f:f4:ea:5c:
                    17:11:8e:e7:4b:a0:d5:03:29:a8:0a:eb:d7:ae:1e:
                    07:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:40:78:57:21:DB:BF:11:EE:CF:65:50:C3:6A:87:0C:E2:9F:11:17
            X509v3 Authority Key Identifier:
                keyid:1A:A6:AB:EC:EF:4F:2F:BD:F5:01:46:B4:25:D0:7A:77:D0:1E:A8:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EGCCBHBEK7VY54WYRZ1pYzXz836B4zPMFzRhBkUUq2BF/0/1AA6ABECEF4F2FBDF50146B425D07A77D01EA852.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1AA6ABECEF4F2FBDF50146B425D07A77D01EA852.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EGCCBHBEK7VY54WYRZ1pYzXz836B4zPMFzRhBkUUq2BF/0/323830343a3335343a613162343a3a2f34382d3438203d3e20323632383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:354:a1b4::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:38:9c:35:1b:20:3e:74:4d:5f:80:1e:d5:5c:b2:09:e7:0c:
         09:00:43:14:87:4b:cc:52:b8:48:a4:a7:b2:c6:4b:0e:34:28:
         70:7e:c0:92:f1:ec:9a:81:67:83:a3:97:ab:4c:53:cd:4b:39:
         e7:fa:23:e6:7f:80:51:c8:c4:71:45:13:ef:f9:5b:18:cc:d0:
         30:24:bd:6c:89:c4:52:77:50:39:43:75:56:83:ef:65:34:21:
         3c:c0:41:60:98:49:3e:1c:83:50:9a:57:3b:3f:dc:d2:8c:88:
         b8:63:63:a2:5e:31:65:93:56:2e:ea:0f:5d:24:f0:74:cd:80:
         b5:70:60:95:03:a8:3f:4a:54:3a:c2:67:8a:d7:46:a0:14:24:
         53:0b:4f:95:05:8f:d9:51:92:33:5c:fd:91:ee:2e:d5:b9:f9:
         8c:f5:75:b9:c0:a7:c1:11:2a:83:a3:bb:fb:c5:5f:28:97:26:
         e0:4c:34:d7:82:68:8c:21:c6:c6:f5:8a:64:cf:de:60:97:3a:
         15:c8:a8:f3:b7:e7:d3:35:3f:09:c4:a8:65:bf:4f:f3:82:00:
         ac:65:f7:77:42:e3:78:78:4a:0a:06:de:24:62:74:9a:32:ee:
         8a:4a:3e:48:56:8b:6b:a5:43:5f:50:01:44:ab:a9:04:c5:76:
         d6:6d:69:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:55:17 2025 by rpki-client