Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/0/323830343a343162343a383030303a3a2f33342d3334203d3e20323637343531.roa
File:                     323830343a343162343a383030303a3a2f33342d3334203d3e20323637343531.roa (raw, json)
Hash identifier:          aAoZgVYaIut4MoBi0sPrY5Wf47UzQc5nw8E/tncDxvc=
Subject key identifier:   2A:FF:29:2F:38:EF:F6:B7:98:C3:06:7F:D3:5C:C7:8D:8E:19:21:DC
Certificate issuer:       /CN=9ECE9497765CBFF5ADF188D9EAED33445844495D
Certificate serial:       7CEB827DC06B5B26415ACEBE66A2D27F7C0AC06E
Authority key identifier: 9E:CE:94:97:76:5C:BF:F5:AD:F1:88:D9:EA:ED:33:44:58:44:49:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9ECE9497765CBFF5ADF188D9EAED33445844495D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/0/323830343a343162343a383030303a3a2f33342d3334203d3e20323637343531.roa
Signing time:             Tue 13 Jun 2023 17:24:45 +0000
ROA not before:           Tue 13 Jun 2023 17:19:45 +0000
ROA not after:            Tue 11 Jun 2024 17:24:45 +0000
asID:                     267451
IP address blocks:        2804:41b4:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:eb:82:7d:c0:6b:5b:26:41:5a:ce:be:66:a2:d2:7f:7c:0a:c0:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ECE9497765CBFF5ADF188D9EAED33445844495D
        Validity
            Not Before: Jun 13 17:19:45 2023 GMT
            Not After : Jun 11 17:24:45 2024 GMT
        Subject: CN=2AFF292F38EFF6B798C3067FD35CC78D8E1921DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:91:4a:89:8a:34:63:d3:6c:67:9c:f5:f6:64:
                    f2:20:10:91:94:35:87:7a:c2:5c:b6:86:90:57:81:
                    2d:be:07:93:10:50:18:fe:a6:39:d6:90:85:4a:c8:
                    5d:23:2d:a5:c5:50:6e:71:ca:48:6b:3f:80:71:9a:
                    23:39:c1:be:12:bd:44:a9:6b:a7:3d:0b:1c:45:7c:
                    91:49:0c:ab:ab:d1:26:cd:4f:39:5d:83:65:a3:f9:
                    c9:e3:7d:a3:30:5f:dd:49:9a:be:2e:20:8d:d2:ce:
                    c4:b5:dd:4e:fa:28:75:22:f4:8a:74:f6:5c:16:a5:
                    1d:df:25:dc:f7:ba:97:e7:2b:1d:a2:a5:ed:0a:15:
                    4c:85:30:a7:b5:16:8f:b4:f4:4f:06:86:86:4c:4c:
                    41:04:42:b7:dc:8b:c6:a2:9f:35:a4:0d:90:16:04:
                    ff:10:bc:56:6c:41:95:b4:0f:77:ce:eb:2b:99:dd:
                    af:16:17:ed:ce:bf:f6:4b:38:4d:82:a9:e6:a9:05:
                    d2:46:5e:cb:58:4d:9a:20:40:af:23:54:48:a7:0f:
                    66:4f:cb:5d:09:a1:88:c3:df:05:b5:d2:47:12:3d:
                    83:4a:de:5e:a5:66:b0:3d:3d:09:bf:35:fa:f0:b4:
                    c0:80:a2:d3:68:76:73:47:dc:c9:be:15:ce:4d:2c:
                    9d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:FF:29:2F:38:EF:F6:B7:98:C3:06:7F:D3:5C:C7:8D:8E:19:21:DC
            X509v3 Authority Key Identifier:
                keyid:9E:CE:94:97:76:5C:BF:F5:AD:F1:88:D9:EA:ED:33:44:58:44:49:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/0/9ECE9497765CBFF5ADF188D9EAED33445844495D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9ECE9497765CBFF5ADF188D9EAED33445844495D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/0/323830343a343162343a383030303a3a2f33342d3334203d3e20323637343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41b4:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         d9:ea:57:fa:33:5b:be:89:cd:90:9d:bf:70:2d:bc:80:98:a5:
         ed:f4:69:52:2b:92:21:44:76:0c:ac:b7:5f:91:17:f9:77:df:
         13:3b:c8:54:12:a3:ac:9c:06:22:f1:c6:c9:ee:60:25:46:bd:
         d5:9b:58:f6:e6:e7:c2:cd:7b:74:57:d8:27:dd:5f:cc:c7:29:
         03:18:a1:ff:5e:72:d6:5f:df:8d:c1:a4:15:e6:a6:f5:f9:27:
         19:20:c1:3c:43:30:55:4c:e5:aa:bc:f2:7f:22:63:b3:d3:be:
         26:e9:0c:dc:12:19:0d:7f:2c:a6:ed:07:1c:b3:30:9f:f4:39:
         30:5a:4b:ab:42:6f:bd:3b:ba:cf:b1:a4:23:52:d5:1c:a1:76:
         e8:1e:2b:35:9d:3f:28:ec:dd:37:ee:b2:ba:b1:4d:db:7b:16:
         77:ee:9d:a8:d4:a4:26:f4:32:4b:5f:ac:55:d6:14:bf:6e:ee:
         2d:50:02:57:6c:ed:93:98:c3:b6:d5:ad:a5:2e:0a:a1:b6:53:
         75:d6:49:03:c0:c4:63:07:69:21:53:c6:aa:23:de:a5:72:0c:
         57:61:3c:1c:c6:6e:c1:50:8c:2c:6d:aa:90:92:d8:13:f9:9f:
         59:66:43:5d:e1:37:43:2c:ee:fc:60:c9:09:32:eb:a1:5c:54:
         ce:d5:b2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:17:15 2025 by rpki-client