Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/323830343a363830343a3a2f33332d3333203d3e20323639363635.roa
File:                     323830343a363830343a3a2f33332d3333203d3e20323639363635.roa (raw, json)
Hash identifier:          AeRRoTHd9sTpN+Jok0k0DhGRERdMAig02ygp2hLxpFw=
Subject key identifier:   AC:39:26:12:5A:C5:96:CB:9A:3B:47:7D:9C:B9:AC:BF:0A:AB:EB:73
Certificate issuer:       /CN=01E1936D951009EDC365E2731189930C5096C583
Certificate serial:       39F9E683D73A3F7F97F8043B18DA21BC56B4826F
Authority key identifier: 01:E1:93:6D:95:10:09:ED:C3:65:E2:73:11:89:93:0C:50:96:C5:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01E1936D951009EDC365E2731189930C5096C583.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/323830343a363830343a3a2f33332d3333203d3e20323639363635.roa
Signing time:             Mon 04 Sep 2023 17:50:51 +0000
ROA not before:           Mon 04 Sep 2023 17:45:51 +0000
ROA not after:            Mon 02 Sep 2024 17:50:51 +0000
asID:                     269665
IP address blocks:        2804:6804::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:f9:e6:83:d7:3a:3f:7f:97:f8:04:3b:18:da:21:bc:56:b4:82:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01E1936D951009EDC365E2731189930C5096C583
        Validity
            Not Before: Sep  4 17:45:51 2023 GMT
            Not After : Sep  2 17:50:51 2024 GMT
        Subject: CN=AC3926125AC596CB9A3B477D9CB9ACBF0AABEB73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fa:28:95:f3:3d:44:0b:20:1e:0a:59:b9:11:
                    1c:86:f5:d5:54:20:45:5f:40:b6:35:17:d4:af:5b:
                    bd:7c:d5:ba:42:ce:df:db:5d:d3:a0:1a:33:59:42:
                    2c:13:c1:b9:ea:f5:33:ba:9a:5d:93:79:2d:26:73:
                    dd:e1:7d:da:4a:fe:c0:93:bc:31:f8:6b:31:96:2d:
                    69:99:23:e5:de:0a:da:c8:4c:af:ee:0d:90:cf:27:
                    d6:fd:5d:ff:2d:f5:06:e0:08:fe:64:05:08:90:bf:
                    72:bf:a9:a6:0d:13:db:6a:90:bd:8b:95:2c:8b:27:
                    f2:12:89:4e:37:50:b9:d9:be:9f:65:af:29:21:98:
                    e3:06:0e:75:95:29:57:b5:c8:98:14:43:85:cd:01:
                    28:47:66:56:0e:46:04:ba:b4:26:2c:65:ca:7c:d2:
                    b9:6a:56:26:32:58:88:d5:ae:83:01:f3:45:0f:80:
                    ab:ba:4f:6d:79:e9:44:66:2e:6c:01:45:be:74:34:
                    20:e5:d2:df:4c:3d:c2:e9:8d:e2:86:ab:a2:b6:97:
                    ef:5b:5c:6e:a8:1a:6b:76:a9:8b:12:ed:17:2c:a5:
                    2e:00:b7:d0:e4:e2:06:fe:93:62:16:00:1e:be:ff:
                    84:bb:05:49:65:c3:17:75:c3:e6:47:52:1a:4e:5c:
                    ec:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:39:26:12:5A:C5:96:CB:9A:3B:47:7D:9C:B9:AC:BF:0A:AB:EB:73
            X509v3 Authority Key Identifier:
                keyid:01:E1:93:6D:95:10:09:ED:C3:65:E2:73:11:89:93:0C:50:96:C5:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/01E1936D951009EDC365E2731189930C5096C583.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01E1936D951009EDC365E2731189930C5096C583.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/323830343a363830343a3a2f33332d3333203d3e20323639363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6804::/33

    Signature Algorithm: sha256WithRSAEncryption
         15:ab:91:15:7c:cc:f8:25:21:31:7f:ab:88:4e:49:72:87:c5:
         f9:cd:08:c4:d8:60:13:33:31:ef:48:f3:b7:3d:62:97:a5:9f:
         88:21:15:04:68:fd:66:44:89:c2:2f:4e:20:63:a8:0d:c8:5e:
         d2:2a:c4:b5:b8:3c:a7:50:30:c4:eb:c7:29:43:74:9c:f2:c9:
         27:95:7f:a8:c4:8e:ef:4e:c4:1a:be:2d:fa:f9:53:f8:6d:87:
         ae:f0:8f:5d:15:b0:bc:9f:49:db:83:a1:9e:49:e8:68:b9:81:
         46:db:2f:8c:3b:b2:4c:99:56:63:ac:14:6d:6a:9e:a8:62:15:
         d3:6f:28:c0:6a:e5:dc:39:17:22:03:3e:1a:dd:db:6b:3b:69:
         fb:38:27:c6:c1:d2:a1:77:64:e1:14:30:87:b2:8e:87:b0:b0:
         83:74:b9:fb:f1:b0:88:7f:eb:7b:1c:b3:8b:35:d8:4e:f2:83:
         b8:fa:6b:ea:1a:c9:0c:90:42:1f:70:d0:a6:e1:85:11:c5:f5:
         fe:c9:b7:d4:12:b4:9e:6f:8a:7b:33:c2:9d:33:39:7c:13:b8:
         6b:32:e1:a9:e7:aa:09:d4:51:e6:f1:61:12:91:1f:70:12:2f:
         18:85:17:12:6a:32:ab:32:3d:31:21:33:4a:59:83:40:65:75:
         ee:8b:81:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:15:44 2025 by rpki-client