Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FwQW8Fp2n17RQF2tmhNjY9KdLyGDFezWDC2fphRUqxYa/0/323830343a313062633a3a2f33322d3438203d3e20323633363436.roa
File:                     323830343a313062633a3a2f33322d3438203d3e20323633363436.roa (raw, json)
Hash identifier:          PVor4hMN4s2hx2d+WFOLQ50Xu+Gjrh6giSGg5Tnm0F0=
Subject key identifier:   D7:82:34:C4:55:77:5D:1E:16:0E:98:9E:9E:09:C6:41:C2:1B:1D:BA
Certificate issuer:       /CN=19664A43D08FC5C1667B502608579B90F5D7A2EF
Certificate serial:       4999004DEA9179CD5CD77EC689560A4EA60FB2EB
Authority key identifier: 19:66:4A:43:D0:8F:C5:C1:66:7B:50:26:08:57:9B:90:F5:D7:A2:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/19664A43D08FC5C1667B502608579B90F5D7A2EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FwQW8Fp2n17RQF2tmhNjY9KdLyGDFezWDC2fphRUqxYa/0/323830343a313062633a3a2f33322d3438203d3e20323633363436.roa
Signing time:             Fri 14 Jan 2022 23:40:15 +0000
ROA not before:           Fri 14 Jan 2022 23:35:15 +0000
ROA not after:            Fri 13 Jan 2023 23:40:15 +0000
asID:                     263646
IP address blocks:        2804:10bc::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:99:00:4d:ea:91:79:cd:5c:d7:7e:c6:89:56:0a:4e:a6:0f:b2:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19664A43D08FC5C1667B502608579B90F5D7A2EF
        Validity
            Not Before: Jan 14 23:35:15 2022 GMT
            Not After : Jan 13 23:40:15 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:33:56:ec:30:a7:f1:f0:81:d3:09:ab:b8:19:
                    2e:51:74:ed:31:65:e0:09:62:ca:80:65:b6:64:32:
                    a3:1a:db:90:c5:28:6c:e5:1e:ff:80:08:c8:d7:5f:
                    a4:39:5b:90:88:0c:ae:73:f5:cd:a5:b3:29:38:17:
                    40:1d:2c:3d:00:6b:77:d0:06:51:89:0e:15:f4:19:
                    e2:9b:af:da:79:74:75:69:16:c8:3d:f4:f8:4f:e6:
                    fc:32:76:7c:0f:63:5a:58:8d:e1:ee:ae:96:1d:28:
                    08:02:dc:85:a9:f9:c5:5d:7a:60:d4:99:1d:bc:6e:
                    c4:4b:21:6c:4e:8f:fb:07:c0:d9:32:b7:c0:b1:ce:
                    0e:e6:99:09:fd:5e:be:35:a9:1b:11:67:b6:14:11:
                    64:01:90:67:64:d8:37:59:05:97:c4:1b:ac:1c:9a:
                    07:16:71:09:b0:2b:96:50:0c:c9:21:a4:b6:cd:9e:
                    74:48:ba:df:0d:74:dc:aa:a0:cb:2c:22:ca:87:27:
                    74:e7:21:ac:93:b1:89:3a:46:1f:d9:fd:4a:6a:86:
                    59:bf:33:3d:97:a4:76:be:41:5b:90:0c:0f:5e:1d:
                    57:f7:a8:28:c0:3b:cc:56:fb:b4:7f:b2:cd:d7:b8:
                    0c:9a:86:5c:3e:67:32:7d:08:c9:7c:20:db:11:75:
                    e0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:82:34:C4:55:77:5D:1E:16:0E:98:9E:9E:09:C6:41:C2:1B:1D:BA
            X509v3 Authority Key Identifier:
                keyid:19:66:4A:43:D0:8F:C5:C1:66:7B:50:26:08:57:9B:90:F5:D7:A2:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FwQW8Fp2n17RQF2tmhNjY9KdLyGDFezWDC2fphRUqxYa/0/19664A43D08FC5C1667B502608579B90F5D7A2EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/19664A43D08FC5C1667B502608579B90F5D7A2EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FwQW8Fp2n17RQF2tmhNjY9KdLyGDFezWDC2fphRUqxYa/0/323830343a313062633a3a2f33322d3438203d3e20323633363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:10bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:7e:ca:41:6b:ec:dd:4f:b3:50:f3:74:a1:7c:41:60:19:c8:
         f8:07:4e:cb:a6:32:52:65:5a:63:4e:09:ab:92:65:91:fa:30:
         a0:2d:4a:15:b2:ad:81:a2:43:45:0b:20:04:a4:db:86:09:30:
         51:0d:35:70:ce:1c:71:bd:63:e6:08:83:0b:3d:a2:84:7d:39:
         6b:d1:1e:48:30:27:c6:b2:bb:17:87:ad:5a:e2:21:3a:1c:67:
         d1:80:cd:0b:a0:25:0e:af:6d:da:22:b6:fc:83:df:d6:d5:29:
         40:e0:1a:be:10:f5:6d:f7:da:fe:b1:a2:3c:9b:1b:94:46:9c:
         30:e0:77:d5:51:66:95:70:50:10:5c:2c:97:c2:25:8a:e4:49:
         29:41:e9:b9:61:0b:85:c6:4c:66:c2:ad:15:c4:c0:a4:0a:6f:
         0c:6b:8f:91:c9:37:14:cf:11:98:6f:e5:72:f9:7d:46:b9:f8:
         4d:ba:b2:f6:60:b0:23:b7:7a:51:cf:bc:8f:d6:60:b5:ae:45:
         65:e1:10:51:60:28:27:d0:a4:ad:1b:73:49:1c:c7:ff:39:ea:
         6f:fe:4f:10:35:b5:42:8a:1b:7a:f0:b4:88:23:5c:54:a3:66:
         3b:2b:08:88:01:33:9d:e6:b2:36:dd:5a:6a:72:78:1b:08:71:
         b4:32:7d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:18 2025 by rpki-client