Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/323830343a3831343a383030303a3a2f33342d3334203d3e20323632373737.roa
File:                     323830343a3831343a383030303a3a2f33342d3334203d3e20323632373737.roa (raw, json)
Hash identifier:          WwfA8eJnJcyOcR7+u/j6p8y+XEwbd6cy/ZOINNUS4R8=
Subject key identifier:   B4:E9:8E:38:FA:92:56:DF:FC:A0:75:D7:D1:B8:3F:98:A4:7B:81:A6
Certificate issuer:       /CN=22D119B99101091409CB2C64663C9A0D0F94DC5F
Certificate serial:       3EB62139D0405E5E133DEB2900EFB6A51A9716CC
Authority key identifier: 22:D1:19:B9:91:01:09:14:09:CB:2C:64:66:3C:9A:0D:0F:94:DC:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/22D119B99101091409CB2C64663C9A0D0F94DC5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/323830343a3831343a383030303a3a2f33342d3334203d3e20323632373737.roa
Signing time:             Thu 06 Oct 2022 07:07:45 +0000
ROA not before:           Thu 06 Oct 2022 07:02:45 +0000
ROA not after:            Thu 05 Oct 2023 07:07:45 +0000
asID:                     262777
IP address blocks:        2804:814:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:b6:21:39:d0:40:5e:5e:13:3d:eb:29:00:ef:b6:a5:1a:97:16:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22D119B99101091409CB2C64663C9A0D0F94DC5F
        Validity
            Not Before: Oct  6 07:02:45 2022 GMT
            Not After : Oct  5 07:07:45 2023 GMT
        Subject: CN=B4E98E38FA9256DFFCA075D7D1B83F98A47B81A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c1:eb:09:dd:df:9a:c7:34:d4:93:7d:42:85:
                    eb:aa:c7:48:f5:e7:95:09:07:93:66:ac:ef:4c:d3:
                    42:03:b2:2f:49:a1:0d:c7:db:c7:7c:1a:7a:84:fc:
                    cd:91:d3:72:f1:3b:af:a3:0c:ae:5b:96:12:7d:53:
                    fe:2c:8c:ba:1c:26:ad:c0:cd:aa:3d:8d:9e:40:3a:
                    a6:fc:ef:16:85:2c:77:5a:b5:f0:6b:d3:d6:62:ab:
                    6b:bb:69:34:a2:ec:6e:39:86:e1:c6:65:1b:de:07:
                    fd:b7:4e:69:2a:91:62:51:74:60:68:01:1b:e4:8d:
                    9d:45:60:39:51:e2:b3:45:95:43:c4:18:3c:a7:7b:
                    c7:6c:a1:40:6d:c1:01:cc:49:c7:3d:54:01:2b:74:
                    2b:84:3b:3b:80:55:85:41:9f:b7:b8:97:b9:15:4e:
                    b1:51:3b:8d:a9:54:2a:25:90:98:45:5d:78:57:17:
                    55:7b:57:cd:62:0a:e6:83:c6:e8:3f:94:db:b6:64:
                    59:8b:5e:0f:9d:8d:78:ac:3c:99:ff:82:e3:b3:ea:
                    a8:7b:a6:79:51:4f:bb:6d:61:a3:68:bd:a8:24:6f:
                    90:58:08:af:05:e4:52:80:8e:e5:06:8f:df:77:76:
                    b5:fe:9e:c9:cc:06:2d:a9:cd:db:a7:46:3b:57:43:
                    b8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:E9:8E:38:FA:92:56:DF:FC:A0:75:D7:D1:B8:3F:98:A4:7B:81:A6
            X509v3 Authority Key Identifier:
                keyid:22:D1:19:B9:91:01:09:14:09:CB:2C:64:66:3C:9A:0D:0F:94:DC:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/22D119B99101091409CB2C64663C9A0D0F94DC5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/22D119B99101091409CB2C64663C9A0D0F94DC5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/323830343a3831343a383030303a3a2f33342d3334203d3e20323632373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:814:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         81:32:df:88:9b:70:e4:47:e8:b7:ad:b2:99:8e:b6:b5:39:1f:
         37:aa:61:05:fa:d4:1c:c9:41:e0:4c:ed:39:ea:22:a5:5f:f9:
         84:02:af:39:05:01:48:5d:6e:f8:50:d7:95:76:72:3b:4d:e6:
         bf:0a:b8:c8:73:cd:8a:f8:19:d1:82:e5:2e:d3:e8:fa:a4:23:
         35:bb:50:53:42:17:70:03:d5:d3:a0:eb:c0:50:45:eb:78:b3:
         63:55:0a:b2:be:9e:e4:29:f8:30:0f:d1:d4:71:82:fb:74:30:
         d4:28:07:c2:b2:60:38:aa:f1:03:8e:c3:8e:92:b2:76:ea:2c:
         9b:6c:c5:a1:7a:3c:ee:cd:e2:bf:ff:69:a6:97:c4:32:e0:48:
         54:32:e2:2d:53:db:c9:6e:d2:c4:44:17:d3:d5:01:c6:49:1d:
         cc:b0:83:7d:c3:3e:29:d4:52:08:77:af:8b:5f:51:0d:a3:8d:
         98:22:d7:73:42:28:96:47:25:c2:72:9e:01:3a:c1:dd:8b:13:
         2e:86:3e:90:4d:5a:97:ff:83:f9:dc:4c:bb:b8:81:54:b4:7e:
         9a:a9:8e:9b:5c:f6:cc:5a:dc:4f:42:be:aa:cb:10:d6:e9:b5:
         53:2e:a3:5d:2b:b3:1c:78:e0:70:f0:0a:87:10:44:96:a6:cd:
         da:f2:7e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:57:59 2025 by rpki-client