Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/0/323830343a343162343a3a2f33322d3332203d3e20323637343531.roa
File:                     323830343a343162343a3a2f33322d3332203d3e20323637343531.roa (raw, json)
Hash identifier:          WuX081b8HBQyVy+T3hPTALAlBn9Jy0+Gj9U0rbCZfCo=
Subject key identifier:   C9:CB:D5:2C:D7:F2:80:CA:7D:D3:7A:71:F4:57:E9:76:31:6B:B4:C2
Certificate issuer:       /CN=9ECE9497765CBFF5ADF188D9EAED33445844495D
Certificate serial:       11D1710990A574F31525F438F62A015F50BD5D62
Authority key identifier: 9E:CE:94:97:76:5C:BF:F5:AD:F1:88:D9:EA:ED:33:44:58:44:49:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9ECE9497765CBFF5ADF188D9EAED33445844495D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/0/323830343a343162343a3a2f33322d3332203d3e20323637343531.roa
Signing time:             Tue 13 Jun 2023 17:24:15 +0000
ROA not before:           Tue 13 Jun 2023 17:19:15 +0000
ROA not after:            Tue 11 Jun 2024 17:24:15 +0000
asID:                     267451
IP address blocks:        2804:41b4::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:d1:71:09:90:a5:74:f3:15:25:f4:38:f6:2a:01:5f:50:bd:5d:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ECE9497765CBFF5ADF188D9EAED33445844495D
        Validity
            Not Before: Jun 13 17:19:15 2023 GMT
            Not After : Jun 11 17:24:15 2024 GMT
        Subject: CN=C9CBD52CD7F280CA7DD37A71F457E976316BB4C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1f:63:21:96:a0:19:3f:3c:dd:50:9b:6b:8b:
                    d4:2e:c5:94:05:d0:78:48:60:c2:60:2e:79:49:47:
                    05:7c:a2:5e:08:20:2c:40:0b:60:36:48:b6:2e:f0:
                    26:94:f8:de:7e:ff:f7:e2:39:9d:03:9b:2f:05:8c:
                    c7:0a:8a:be:84:c9:b9:dd:4c:7c:db:29:ee:4b:51:
                    0f:ab:23:44:37:af:2e:65:c5:17:70:f5:2e:ef:4c:
                    df:9c:35:db:60:ec:c9:36:7a:64:d7:a9:09:33:db:
                    7f:bd:33:c6:1f:0d:1b:2a:a8:b1:b1:8a:7d:af:bd:
                    62:f2:70:3f:96:d0:bc:10:9f:a9:41:ea:bf:a4:83:
                    59:42:21:cc:90:d4:11:c3:90:58:08:1d:5e:fe:13:
                    58:35:fc:a5:11:85:9b:1d:51:fe:23:77:7a:d5:12:
                    d2:5c:23:ea:df:2f:2a:3c:6f:65:50:97:f3:12:54:
                    40:61:1b:64:99:bf:d3:93:51:f6:f1:1a:65:1c:95:
                    14:3f:b9:b9:e8:ff:3f:8f:b8:38:07:10:35:a6:32:
                    b1:9a:e7:50:4e:e7:9b:16:18:8e:f9:b1:3d:6b:4e:
                    0e:ba:75:bb:8a:c1:c3:19:6a:de:03:8e:83:3c:ba:
                    a0:dd:6d:dd:57:d1:f1:ca:4f:4c:2c:d8:29:45:ab:
                    0c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:CB:D5:2C:D7:F2:80:CA:7D:D3:7A:71:F4:57:E9:76:31:6B:B4:C2
            X509v3 Authority Key Identifier:
                keyid:9E:CE:94:97:76:5C:BF:F5:AD:F1:88:D9:EA:ED:33:44:58:44:49:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/0/9ECE9497765CBFF5ADF188D9EAED33445844495D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9ECE9497765CBFF5ADF188D9EAED33445844495D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/0/323830343a343162343a3a2f33322d3332203d3e20323637343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         c7:8e:93:23:c0:31:f4:b4:2d:ce:a1:df:23:7a:8f:c8:f4:c7:
         7e:08:3b:58:04:b5:61:74:31:d6:60:e8:83:b4:b3:2b:20:3e:
         07:3f:f8:73:2d:be:21:d7:73:70:7b:94:51:49:a0:ff:6b:fd:
         c0:bd:5b:25:64:13:dc:c6:3f:3d:a0:c4:2e:64:8f:b1:5d:d2:
         ea:bb:12:8d:39:79:d0:f1:17:97:fd:32:04:c5:62:4d:10:08:
         65:db:ad:2c:b1:14:8b:ee:d4:0f:38:9f:95:aa:19:9b:9c:f0:
         19:c8:d3:e2:35:07:47:04:27:8f:cf:bc:c7:08:4e:d1:30:22:
         b0:4a:7c:ce:4a:a8:0b:f3:fa:12:1d:6d:6a:1b:bb:a1:2b:23:
         1d:17:68:af:2a:4b:92:7a:05:85:2a:0f:b5:bc:a8:12:01:50:
         ce:9d:6a:c2:93:57:df:f6:d2:4a:0b:9d:09:31:02:87:71:9c:
         97:77:52:a0:a9:79:cd:cb:bc:ce:74:44:c2:77:f0:0b:b6:2b:
         76:0a:c9:45:0e:f0:88:70:d4:25:03:23:96:47:4a:a9:54:64:
         29:a2:f1:c1:3a:10:d5:b0:f1:37:d9:69:88:c2:99:2d:18:ce:
         b7:f6:24:7a:bd:a6:9a:f9:80:05:a4:0f:cc:73:3c:5c:a5:62:
         32:9a:58:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:28:28 2025 by rpki-client