Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/0/323830343a343162343a383030303a3a2f33362d3336203d3e20323637343531.roa
File:                     323830343a343162343a383030303a3a2f33362d3336203d3e20323637343531.roa (raw, json)
Hash identifier:          cFsdHo+NoRe6iT74pN1y421pifzptTelevO787YDtgk=
Subject key identifier:   0C:9C:A0:E0:93:1C:A0:74:12:48:1F:71:FB:86:52:99:15:07:F7:0C
Certificate issuer:       /CN=9ECE9497765CBFF5ADF188D9EAED33445844495D
Certificate serial:       5FA77B35F998EDA58995BDD9456ACBA000E90066
Authority key identifier: 9E:CE:94:97:76:5C:BF:F5:AD:F1:88:D9:EA:ED:33:44:58:44:49:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9ECE9497765CBFF5ADF188D9EAED33445844495D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/0/323830343a343162343a383030303a3a2f33362d3336203d3e20323637343531.roa
Signing time:             Tue 13 Jun 2023 17:24:49 +0000
ROA not before:           Tue 13 Jun 2023 17:19:49 +0000
ROA not after:            Tue 11 Jun 2024 17:24:49 +0000
asID:                     267451
IP address blocks:        2804:41b4:8000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:a7:7b:35:f9:98:ed:a5:89:95:bd:d9:45:6a:cb:a0:00:e9:00:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ECE9497765CBFF5ADF188D9EAED33445844495D
        Validity
            Not Before: Jun 13 17:19:49 2023 GMT
            Not After : Jun 11 17:24:49 2024 GMT
        Subject: CN=0C9CA0E0931CA07412481F71FB8652991507F70C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a6:f2:e9:d9:8b:69:a6:5f:9d:8c:a7:03:b3:
                    4f:c5:ed:20:d1:48:b4:2b:51:16:13:33:aa:48:1b:
                    b8:3c:8f:7f:fd:6d:03:bd:3b:3c:23:b9:41:b5:40:
                    a3:5f:06:0a:96:ac:d3:ae:d3:4b:a2:b8:7a:2c:09:
                    55:61:df:d5:b9:72:9b:26:ae:c5:98:ec:4f:bb:03:
                    f4:ce:c6:4d:23:19:d5:f5:9a:51:a6:f8:bf:54:2f:
                    c0:e4:8a:16:4c:76:b2:f8:42:98:8c:34:12:f8:12:
                    f1:70:82:2c:98:46:ec:1d:f2:25:fb:c8:c4:76:a7:
                    26:d4:56:44:53:c2:7c:12:c0:05:4a:84:61:f0:ea:
                    2c:1f:96:7e:3e:8e:0e:c5:1f:fc:07:e9:3c:1c:12:
                    7e:52:69:6d:01:4b:34:92:18:17:5e:78:b0:d6:61:
                    18:6c:3f:3f:14:4d:92:4a:4b:19:5a:73:a0:c5:11:
                    a8:c4:f3:99:0c:5c:37:92:82:93:3b:35:5d:71:5b:
                    ff:f5:1f:bd:87:48:4e:89:67:3d:19:43:d0:20:5d:
                    6b:4c:e7:a3:b1:2c:4b:ed:41:65:8a:0f:ea:ba:53:
                    e9:a8:0a:a8:36:8c:a2:03:87:ee:33:cd:c9:3d:a6:
                    92:e4:9f:fc:b4:77:35:e7:34:24:4c:19:bc:84:15:
                    7e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:9C:A0:E0:93:1C:A0:74:12:48:1F:71:FB:86:52:99:15:07:F7:0C
            X509v3 Authority Key Identifier:
                keyid:9E:CE:94:97:76:5C:BF:F5:AD:F1:88:D9:EA:ED:33:44:58:44:49:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/0/9ECE9497765CBFF5ADF188D9EAED33445844495D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9ECE9497765CBFF5ADF188D9EAED33445844495D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/0/323830343a343162343a383030303a3a2f33362d3336203d3e20323637343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41b4:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a5:da:a8:d7:cf:b0:06:4a:f2:68:22:39:7d:bf:e6:7d:5c:3a:
         1c:1c:06:c1:0f:07:db:41:1d:eb:f7:83:67:fd:50:af:c9:ff:
         01:6f:11:27:40:27:c4:0a:a5:21:8c:77:c0:16:8b:c5:dd:a6:
         13:9f:aa:44:82:18:f7:63:46:39:5a:1f:e7:ab:5d:0f:e5:87:
         b9:1f:ec:51:17:0d:49:f5:56:8c:53:d2:a6:fb:62:00:33:3d:
         9f:09:a3:ce:c5:3a:c8:ff:c2:92:de:29:c0:0a:4e:ef:a8:e0:
         7d:2a:c7:5a:1d:af:87:8d:1d:c4:81:ed:21:75:dc:ea:e7:5d:
         25:6f:da:3c:69:82:fc:1f:c4:7c:28:af:ea:39:4e:5c:e7:43:
         a8:59:50:9c:4d:f4:80:d6:57:8a:a3:1a:05:d3:e8:08:07:95:
         56:b1:92:e2:16:61:8b:e9:84:83:e5:4b:82:2b:3e:7f:fd:11:
         e6:f5:31:89:f3:7d:82:7e:40:1d:97:23:0f:4d:4d:73:81:d0:
         2e:74:8a:9f:1d:06:58:fb:0c:20:38:a1:cb:d7:e1:e9:2b:e0:
         36:9b:6f:53:81:e6:c8:c5:89:3f:0b:57:94:e8:d9:de:d8:88:
         14:f9:28:89:44:63:10:d5:dc:15:97:4b:9c:06:a2:f5:f7:50:
         07:47:b7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 06:01:53 2025 by rpki-client