Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/323830343a363830343a343030303a3a2f33342d3334203d3e20323639363635.roa
File:                     323830343a363830343a343030303a3a2f33342d3334203d3e20323639363635.roa (raw, json)
Hash identifier:          nJveLtOap1owR/NYGmrppg0jyxnyjj4dOY+a4J/YWvA=
Subject key identifier:   B9:2C:6B:77:FD:D3:3B:D0:E1:07:68:05:DB:07:C3:D0:B3:4A:1F:4F
Certificate issuer:       /CN=01E1936D951009EDC365E2731189930C5096C583
Certificate serial:       61E7B048E687AD6C1D51174582C885630E9DC8CE
Authority key identifier: 01:E1:93:6D:95:10:09:ED:C3:65:E2:73:11:89:93:0C:50:96:C5:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01E1936D951009EDC365E2731189930C5096C583.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/323830343a363830343a343030303a3a2f33342d3334203d3e20323639363635.roa
Signing time:             Mon 04 Sep 2023 17:50:58 +0000
ROA not before:           Mon 04 Sep 2023 17:45:58 +0000
ROA not after:            Mon 02 Sep 2024 17:50:58 +0000
asID:                     269665
IP address blocks:        2804:6804:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:e7:b0:48:e6:87:ad:6c:1d:51:17:45:82:c8:85:63:0e:9d:c8:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01E1936D951009EDC365E2731189930C5096C583
        Validity
            Not Before: Sep  4 17:45:58 2023 GMT
            Not After : Sep  2 17:50:58 2024 GMT
        Subject: CN=B92C6B77FDD33BD0E1076805DB07C3D0B34A1F4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:61:e9:80:a9:5f:64:02:ad:50:a8:85:79:c8:
                    5d:7f:6f:ff:24:78:dc:88:8e:b3:c3:3f:51:22:75:
                    49:0e:b1:c7:18:7b:8e:ab:6c:e0:ef:4a:d1:d0:fe:
                    4a:b9:bf:6e:7c:7f:e3:37:88:c4:00:21:16:37:d5:
                    1f:40:03:01:f5:15:d7:4a:78:7d:15:6c:95:e0:a3:
                    56:fd:57:9e:6a:8f:4c:b9:9d:d5:76:5c:25:cb:d8:
                    50:26:14:61:bf:7e:d8:2e:38:0b:53:46:20:31:41:
                    40:7d:31:89:ea:91:26:a9:11:2d:4a:03:78:7a:57:
                    ad:81:66:ff:90:f7:7f:e8:20:01:1b:8f:ab:ed:57:
                    94:f0:28:a8:90:9b:04:21:3a:79:7d:9e:1a:2c:e4:
                    2b:8c:f7:1d:eb:f8:50:07:8c:73:76:ce:2c:7f:70:
                    b6:3f:34:93:dc:8d:b6:18:b1:0c:66:7a:65:dd:1a:
                    35:ed:1b:7b:44:e4:4e:55:39:27:da:eb:f0:57:46:
                    08:bf:ce:ce:79:78:ac:cf:9c:8a:97:eb:ce:76:a1:
                    52:91:25:48:30:9e:ba:dd:3e:78:c2:8e:2f:f2:c7:
                    47:5b:55:d9:19:66:40:a0:33:70:b3:f9:fd:42:22:
                    7e:ce:e6:d6:77:77:c3:c4:02:36:b1:65:a3:0b:b7:
                    76:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:2C:6B:77:FD:D3:3B:D0:E1:07:68:05:DB:07:C3:D0:B3:4A:1F:4F
            X509v3 Authority Key Identifier:
                keyid:01:E1:93:6D:95:10:09:ED:C3:65:E2:73:11:89:93:0C:50:96:C5:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/01E1936D951009EDC365E2731189930C5096C583.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01E1936D951009EDC365E2731189930C5096C583.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/323830343a363830343a343030303a3a2f33342d3334203d3e20323639363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6804:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3b:e7:83:93:43:b4:87:06:c4:9c:09:21:70:a5:c6:54:4e:44:
         af:8e:26:69:fe:41:fd:ce:99:1d:ea:12:56:a9:88:28:68:20:
         85:6c:5c:78:83:51:b6:1a:f9:4d:28:b3:8b:11:2e:e9:4f:9f:
         5f:0e:9f:c4:fa:7a:6a:58:6d:0a:eb:e1:d6:cb:04:75:c6:88:
         ad:a0:15:20:d9:f9:a1:f5:c0:2d:9f:4a:12:32:31:ec:64:a0:
         54:00:d4:c4:bb:15:d4:08:4e:85:f3:98:0e:1f:12:71:c5:44:
         cf:a2:27:2e:82:1e:df:dd:88:d5:26:8f:89:35:a9:3f:38:6c:
         e6:0c:cc:8b:e8:f5:ed:69:9c:fb:bc:68:90:69:f1:28:65:07:
         1f:e9:f8:12:19:85:1a:13:90:71:2b:d3:31:4f:26:92:83:2a:
         9b:7a:c6:5a:37:d2:c7:38:31:70:ce:80:e2:87:77:d5:d7:e8:
         ea:7f:fd:f7:d2:02:4b:15:8c:3b:81:40:cc:69:3b:ac:9a:e5:
         d0:39:e5:4f:9d:28:01:cd:2b:0c:f7:dc:a2:fa:2c:ac:70:a6:
         50:2a:59:46:81:d1:1a:15:d0:41:a4:9a:78:84:90:18:4d:26:
         45:e5:ad:52:c6:e7:5a:72:cc:16:04:a6:e6:15:77:c8:fd:24:
         c7:07:23:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:42:14 2025 by rpki-client