Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/323830343a3831343a383030303a3a2f33332d3333203d3e20323632373737.roa
File:                     323830343a3831343a383030303a3a2f33332d3333203d3e20323632373737.roa (raw, json)
Hash identifier:          gdO8IMPt73x2qG3g5JU/QCDLufxFZ3y1/fv3nizriz4=
Subject key identifier:   C9:48:04:22:9E:1B:69:5C:89:FE:E0:CF:2A:FC:F3:EC:C1:75:A7:23
Certificate issuer:       /CN=22D119B99101091409CB2C64663C9A0D0F94DC5F
Certificate serial:       6283F8B2BA95DC2CD005B1FB5299FC4A031B7D8E
Authority key identifier: 22:D1:19:B9:91:01:09:14:09:CB:2C:64:66:3C:9A:0D:0F:94:DC:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/22D119B99101091409CB2C64663C9A0D0F94DC5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/323830343a3831343a383030303a3a2f33332d3333203d3e20323632373737.roa
Signing time:             Thu 06 Oct 2022 07:07:43 +0000
ROA not before:           Thu 06 Oct 2022 07:02:43 +0000
ROA not after:            Thu 05 Oct 2023 07:07:43 +0000
asID:                     262777
IP address blocks:        2804:814:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:83:f8:b2:ba:95:dc:2c:d0:05:b1:fb:52:99:fc:4a:03:1b:7d:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22D119B99101091409CB2C64663C9A0D0F94DC5F
        Validity
            Not Before: Oct  6 07:02:43 2022 GMT
            Not After : Oct  5 07:07:43 2023 GMT
        Subject: CN=C94804229E1B695C89FEE0CF2AFCF3ECC175A723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a9:98:4b:6e:06:1e:c9:2e:f4:e1:25:8b:40:
                    50:67:14:4b:0d:f5:46:06:92:b5:57:ef:6b:bf:fa:
                    2d:59:3c:ac:a0:10:7e:ae:71:18:4d:36:00:6c:45:
                    41:a1:1d:91:60:46:1d:48:b5:9a:74:92:33:7e:42:
                    0a:6c:cd:35:e3:fb:18:1a:67:b7:8e:72:a4:2e:de:
                    dc:06:21:b7:9e:50:6b:96:3d:7b:b9:e3:cd:cd:60:
                    2a:aa:95:c5:7c:bd:d1:49:7b:8c:b2:0f:fd:8c:47:
                    ae:11:2b:50:f4:19:2a:fe:3f:5a:32:84:04:fc:a7:
                    fa:80:e6:a6:96:96:71:8e:2e:e6:c1:f2:d1:ad:83:
                    a3:91:8f:74:9c:61:eb:d2:63:2c:b7:df:20:47:a5:
                    11:24:6e:f7:25:30:91:1d:35:f0:8d:2b:77:69:82:
                    e3:58:de:fd:8c:15:61:7a:92:4b:1a:a9:a2:40:5d:
                    bb:6f:28:d7:41:62:66:24:83:39:fc:0f:d9:3c:25:
                    7c:2a:11:e1:8f:57:2d:56:17:fd:08:84:bd:3c:22:
                    5b:58:35:5f:58:ff:26:93:fa:fe:fd:be:44:b0:7d:
                    89:48:67:44:da:47:82:4f:b9:47:12:be:c9:56:53:
                    e1:89:35:3e:ca:bc:c7:e2:ac:57:df:00:57:f5:fb:
                    6a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:48:04:22:9E:1B:69:5C:89:FE:E0:CF:2A:FC:F3:EC:C1:75:A7:23
            X509v3 Authority Key Identifier:
                keyid:22:D1:19:B9:91:01:09:14:09:CB:2C:64:66:3C:9A:0D:0F:94:DC:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/22D119B99101091409CB2C64663C9A0D0F94DC5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/22D119B99101091409CB2C64663C9A0D0F94DC5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/323830343a3831343a383030303a3a2f33332d3333203d3e20323632373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:814:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         0e:64:92:49:e6:ce:bb:5e:dd:3a:5c:8f:41:fc:a3:c9:c0:42:
         76:78:df:64:00:26:ce:07:b2:ef:13:fa:9e:0b:fc:05:93:a7:
         4d:b1:f5:91:56:ca:a1:a8:ac:1e:5b:20:23:b4:a3:da:6e:dd:
         e9:76:41:0e:1d:ff:bf:de:85:62:b9:c8:51:e7:44:14:5c:08:
         cf:00:ed:a8:e2:6a:be:41:b8:c9:b0:8f:df:65:72:a8:6b:82:
         66:37:48:a9:a2:80:67:9d:0e:5d:63:17:26:16:66:e3:b2:7d:
         e9:46:7d:eb:8f:6b:0b:1a:e0:bb:94:43:52:4c:24:01:82:a0:
         a2:f7:a8:95:bf:0d:14:ee:6f:6f:9f:b6:62:1f:0c:7a:a4:41:
         8d:48:9d:8d:b8:43:7f:a3:31:94:18:08:43:36:24:3f:80:5f:
         42:40:01:69:c2:d7:0c:cb:9f:9d:47:5e:b1:ba:f1:65:cd:31:
         6f:12:82:8b:2e:23:93:39:19:25:77:34:b6:4b:ae:15:0c:34:
         33:47:1d:f6:9e:6b:56:1a:35:10:36:04:f8:e8:ea:be:57:7a:
         ee:35:9b:f5:a8:6f:fd:d7:e0:f6:78:12:4a:50:c8:b3:5d:af:
         9e:8d:a9:2e:ca:0a:e7:88:80:3b:7c:ef:4d:b1:a3:54:27:b7:
         e6:b1:12:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:16:44 2025 by rpki-client