Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/323830343a3831343a633030303a3a2f33342d3334203d3e20323632373737.roa
File:                     323830343a3831343a633030303a3a2f33342d3334203d3e20323632373737.roa (raw, json)
Hash identifier:          Avx5gCztO82FpLCw5VvZgz331fIb9v+2zZ63xSmh8aY=
Subject key identifier:   4A:AC:C8:0A:96:84:73:21:D2:FD:80:66:B0:3E:0C:3D:A8:12:A3:C0
Certificate issuer:       /CN=22D119B99101091409CB2C64663C9A0D0F94DC5F
Certificate serial:       245952BD605B85A5F36409FC228D06A65CA09EE8
Authority key identifier: 22:D1:19:B9:91:01:09:14:09:CB:2C:64:66:3C:9A:0D:0F:94:DC:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/22D119B99101091409CB2C64663C9A0D0F94DC5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/323830343a3831343a633030303a3a2f33342d3334203d3e20323632373737.roa
Signing time:             Thu 06 Oct 2022 07:07:43 +0000
ROA not before:           Thu 06 Oct 2022 07:02:43 +0000
ROA not after:            Thu 05 Oct 2023 07:07:43 +0000
asID:                     262777
IP address blocks:        2804:814:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:59:52:bd:60:5b:85:a5:f3:64:09:fc:22:8d:06:a6:5c:a0:9e:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22D119B99101091409CB2C64663C9A0D0F94DC5F
        Validity
            Not Before: Oct  6 07:02:43 2022 GMT
            Not After : Oct  5 07:07:43 2023 GMT
        Subject: CN=4AACC80A96847321D2FD8066B03E0C3DA812A3C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:96:bd:24:58:60:fc:58:db:d1:0c:49:4e:4b:
                    de:d2:ca:f0:18:d2:90:38:95:3f:f1:6f:3a:97:64:
                    68:e7:57:fe:04:a5:8c:e7:09:52:39:b0:d1:d6:2e:
                    61:1f:a1:4a:e2:b8:66:0b:d2:45:f2:f9:25:37:6d:
                    d6:f5:a2:42:c7:d3:13:62:ec:7c:8d:8f:66:40:09:
                    ae:2e:23:a1:f6:33:b3:9f:6e:a6:78:29:18:a9:76:
                    cd:38:94:d6:12:2a:d4:31:88:64:eb:8a:16:e1:71:
                    4b:5e:40:fd:37:fe:9f:4f:98:69:08:4f:0d:5d:62:
                    db:a6:da:1a:8f:dc:b7:bd:35:18:31:8b:e2:b2:1a:
                    dc:41:a1:95:cf:74:ee:7e:a1:a4:d0:27:7b:9d:83:
                    b4:96:ad:e7:18:c4:27:dd:a3:5e:c0:1f:ba:af:29:
                    23:8c:b1:a0:ab:94:0d:42:5c:df:b6:f2:43:30:7f:
                    26:2f:e9:43:3a:99:ee:9e:46:ad:dc:40:2b:77:57:
                    2a:c6:c8:bf:91:5a:78:de:e5:17:59:71:a0:a0:48:
                    f9:cd:30:91:9b:6c:3b:0c:47:33:f0:a3:d7:12:1b:
                    b8:37:69:a9:cb:fd:9f:21:1b:57:58:60:cc:26:ba:
                    9d:42:c1:61:39:74:1c:12:fd:6e:78:67:e3:c3:6c:
                    84:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:AC:C8:0A:96:84:73:21:D2:FD:80:66:B0:3E:0C:3D:A8:12:A3:C0
            X509v3 Authority Key Identifier:
                keyid:22:D1:19:B9:91:01:09:14:09:CB:2C:64:66:3C:9A:0D:0F:94:DC:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/22D119B99101091409CB2C64663C9A0D0F94DC5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/22D119B99101091409CB2C64663C9A0D0F94DC5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/323830343a3831343a633030303a3a2f33342d3334203d3e20323632373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:814:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         04:76:64:06:70:a7:e8:8c:52:88:6b:b6:3d:23:43:59:26:9c:
         38:3e:72:0a:ef:69:d1:a4:a1:c0:dd:2c:d2:f0:99:36:e4:56:
         3e:85:b8:43:95:7f:f8:32:5b:00:b6:6d:67:f4:2f:b8:50:e5:
         75:07:81:78:70:ef:c2:f6:de:3f:44:29:09:97:16:ce:81:f4:
         ab:9e:97:4d:56:17:16:2b:38:f2:b0:a2:c1:d4:c8:57:3b:52:
         28:00:11:00:45:69:60:c5:79:f8:84:cb:1f:71:f0:65:29:bc:
         6e:3e:fe:36:73:5b:13:db:fa:c0:b6:0b:aa:a8:83:57:b4:9e:
         78:12:4d:8e:56:71:53:e7:68:ad:94:6f:89:50:d5:68:3e:c8:
         44:77:a2:6b:5c:cb:b9:99:3f:22:02:1d:99:59:c6:02:78:4c:
         c5:07:c8:10:a6:65:4d:65:70:fc:46:c1:dc:53:05:21:ad:c5:
         68:37:ff:12:24:72:2d:e4:5c:ff:85:1b:7a:5c:78:ae:47:05:
         c1:a5:b2:c5:e2:50:b6:bb:a1:d5:62:9d:c1:8a:db:51:cc:de:
         3f:46:ab:ae:4d:03:fe:88:bc:e0:e8:76:6b:0a:83:18:a8:0e:
         eb:ea:e3:d1:77:e1:d2:18:0a:80:de:7c:5a:a6:b3:88:98:cd:
         74:9b:5a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:00:18 2025 by rpki-client