Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/323830343a313535343a3a2f33322d3332203d3e20323633333834.roa
File:                     323830343a313535343a3a2f33322d3332203d3e20323633333834.roa (raw, json)
Hash identifier:          nFtS13039M0t4mwhqXzokdp6FpBSBF0z+OkqRFcr7Vw=
Subject key identifier:   23:77:00:CD:23:13:17:41:11:C2:D6:C2:69:B2:49:70:D7:C5:50:FC
Certificate issuer:       /CN=42069E8E68759D7E92CA70711619EA4DC4E27721
Certificate serial:       449B14E04D636ECF305138A7B4FA36C0D4574DC3
Authority key identifier: 42:06:9E:8E:68:75:9D:7E:92:CA:70:71:16:19:EA:4D:C4:E2:77:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42069E8E68759D7E92CA70711619EA4DC4E27721.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/323830343a313535343a3a2f33322d3332203d3e20323633333834.roa
Signing time:             Thu 23 Nov 2023 20:11:12 +0000
ROA not before:           Thu 23 Nov 2023 20:06:12 +0000
ROA not after:            Thu 21 Nov 2024 20:11:12 +0000
asID:                     263384
IP address blocks:        2804:1554::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:9b:14:e0:4d:63:6e:cf:30:51:38:a7:b4:fa:36:c0:d4:57:4d:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42069E8E68759D7E92CA70711619EA4DC4E27721
        Validity
            Not Before: Nov 23 20:06:12 2023 GMT
            Not After : Nov 21 20:11:12 2024 GMT
        Subject: CN=237700CD2313174111C2D6C269B24970D7C550FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3f:30:68:07:3b:08:17:22:86:70:e2:b4:cf:
                    93:94:1d:8e:00:62:72:dc:1f:2d:1d:f0:4e:05:e5:
                    62:72:e9:ad:8e:d8:f2:99:d5:cf:e9:64:27:cb:d9:
                    37:0c:3a:a1:d9:6d:59:f4:55:eb:77:01:d7:a1:17:
                    51:b9:38:31:02:c3:2c:a2:6d:62:1e:ff:c7:ba:9b:
                    d5:87:fa:36:8b:6f:ef:60:f5:b0:44:8c:26:f1:ec:
                    14:0e:4c:ab:c9:ac:b1:dc:6b:19:4c:b0:1d:14:24:
                    99:84:e5:37:cf:50:c9:3f:1b:35:26:ae:53:13:85:
                    b1:2a:55:25:70:ae:75:26:aa:51:4d:96:d9:7c:63:
                    9e:4d:d4:98:bc:97:e5:8b:8e:d8:c9:b6:e8:ee:5f:
                    5d:e2:2c:70:c2:56:d9:fb:92:e6:12:e2:93:a2:6e:
                    96:a8:45:9a:d5:f8:84:4c:43:9a:d9:43:2d:99:98:
                    49:d5:33:85:fb:d1:f5:60:0c:81:23:f8:7b:54:09:
                    e3:ed:3e:18:b1:5d:3a:a1:a1:e3:8e:90:b0:cb:44:
                    d4:98:03:8e:b0:ba:c5:15:05:c9:d0:ff:1f:1c:b7:
                    56:2e:02:21:49:78:9f:ec:64:4e:02:08:5f:e2:84:
                    9e:05:4d:a3:2a:1a:8d:dc:87:9f:bb:4f:1c:e0:4d:
                    3c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:77:00:CD:23:13:17:41:11:C2:D6:C2:69:B2:49:70:D7:C5:50:FC
            X509v3 Authority Key Identifier:
                keyid:42:06:9E:8E:68:75:9D:7E:92:CA:70:71:16:19:EA:4D:C4:E2:77:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/42069E8E68759D7E92CA70711619EA4DC4E27721.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42069E8E68759D7E92CA70711619EA4DC4E27721.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/323830343a313535343a3a2f33322d3332203d3e20323633333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1554::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:f3:f6:6f:e2:1b:1d:e4:7f:cc:06:8e:4f:b7:db:94:07:b1:
         fa:17:e5:cd:13:11:85:44:c5:67:cc:b1:e6:98:70:85:a8:1e:
         e4:f9:29:06:1e:70:1c:61:35:77:5f:24:be:94:be:85:6f:50:
         a1:2c:a5:9e:18:18:0f:74:2d:b6:1d:eb:73:9e:e8:f6:4f:ef:
         35:2f:c3:86:33:7b:bc:0a:94:4f:62:46:42:da:ef:bf:96:9c:
         15:95:b8:75:a3:4d:d6:be:8d:bd:8d:46:ab:58:5d:41:21:fe:
         f4:9e:1c:9f:b0:09:08:ed:9e:e7:0d:0a:dd:5f:2b:04:cf:54:
         73:05:61:a9:d6:13:51:41:4f:27:33:43:6a:89:dd:f1:3a:70:
         38:fb:21:8e:f3:45:87:42:94:6c:94:30:8b:1d:09:15:a7:db:
         00:01:6b:84:08:26:8c:7e:8d:ab:e5:ba:59:23:c8:72:66:fe:
         ba:b3:c1:c1:e7:14:f7:b6:2b:bc:cb:7c:97:1a:10:20:5f:f0:
         97:4e:60:0e:e8:0e:f3:f1:13:d6:28:35:22:e5:fc:47:cb:7e:
         bb:15:47:bf:2f:35:63:23:6a:17:df:d9:26:2c:56:6c:c2:e2:
         6d:b7:ec:47:40:d6:b3:b8:43:20:11:9f:c3:63:42:89:30:d6:
         cb:09:4f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:48:29 2025 by rpki-client