Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/1/323830343a3963343a3a2f33322d3438203d3e203533303535.roa
File:                     323830343a3963343a3a2f33322d3438203d3e203533303535.roa (raw, json)
Hash identifier:          lnBnTgOcf9oX/C5/SEImnZHmpUYW8JUiOYx+d2TeKEM=
Subject key identifier:   9C:D7:E9:BD:98:2F:7B:24:3E:57:A2:00:29:46:25:FA:13:36:CE:B3
Certificate issuer:       /CN=B6D3534752C456D9A8A7375C9AFAF12186FD1828
Certificate serial:       6271D2CD97CC286A4C1C9639EB7EAB8C8933DBEC
Authority key identifier: B6:D3:53:47:52:C4:56:D9:A8:A7:37:5C:9A:FA:F1:21:86:FD:18:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B6D3534752C456D9A8A7375C9AFAF12186FD1828.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/1/323830343a3963343a3a2f33322d3438203d3e203533303535.roa
Signing time:             Tue 23 Aug 2022 12:56:13 +0000
ROA not before:           Tue 23 Aug 2022 12:51:13 +0000
ROA not after:            Tue 22 Aug 2023 12:56:13 +0000
asID:                     53055
IP address blocks:        2804:9c4::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:71:d2:cd:97:cc:28:6a:4c:1c:96:39:eb:7e:ab:8c:89:33:db:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6D3534752C456D9A8A7375C9AFAF12186FD1828
        Validity
            Not Before: Aug 23 12:51:13 2022 GMT
            Not After : Aug 22 12:56:13 2023 GMT
        Subject: CN=9CD7E9BD982F7B243E57A200294625FA1336CEB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d1:f5:86:6c:58:d8:3b:44:57:b3:91:b0:27:
                    f4:80:93:00:55:87:b9:1b:d1:02:0f:73:2e:f9:5a:
                    17:7e:a3:10:b4:e5:3b:88:fb:95:bd:ce:6b:3d:69:
                    13:25:18:85:83:2b:2b:e0:5f:a0:a6:c8:b8:fd:31:
                    65:c9:54:aa:a7:33:c1:63:6f:a6:a4:a7:26:f1:3d:
                    88:12:db:e5:53:78:97:ff:21:89:b7:b0:df:20:a8:
                    8d:cf:d8:e3:15:ba:c2:80:af:65:8b:43:44:4d:54:
                    8e:84:9b:e0:a8:b9:78:71:b4:b4:ed:ab:09:06:4e:
                    4c:ef:0c:a9:b1:b1:49:e8:7b:81:f7:f1:ad:be:87:
                    92:45:4b:4a:45:62:dc:44:35:ef:2c:2d:c9:7b:03:
                    56:fa:7b:32:fa:3f:e4:41:64:fc:2c:13:b3:96:ee:
                    22:68:49:e6:66:a0:49:0c:99:36:fe:09:cf:f2:e6:
                    77:b6:60:cf:e5:ff:25:b3:fd:eb:65:d5:66:5a:f3:
                    13:7e:18:f8:7a:81:c0:30:85:5a:b6:68:d8:8d:7f:
                    72:8f:bf:dd:cf:92:3e:c3:d3:f7:4b:9b:c1:22:d5:
                    05:44:b6:10:d7:4f:f1:83:fd:be:43:9e:95:12:98:
                    9f:28:b8:c4:85:69:6f:1a:20:fb:bd:0d:1e:84:ee:
                    2d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D7:E9:BD:98:2F:7B:24:3E:57:A2:00:29:46:25:FA:13:36:CE:B3
            X509v3 Authority Key Identifier:
                keyid:B6:D3:53:47:52:C4:56:D9:A8:A7:37:5C:9A:FA:F1:21:86:FD:18:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/1/B6D3534752C456D9A8A7375C9AFAF12186FD1828.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B6D3534752C456D9A8A7375C9AFAF12186FD1828.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/1/323830343a3963343a3a2f33322d3438203d3e203533303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:d2:99:d4:80:e0:57:0f:91:85:02:de:1a:f3:9e:32:ea:a6:
         5c:0c:33:8c:f7:a3:8f:32:d2:d1:85:87:e6:53:5c:d2:de:b3:
         b1:ba:02:a9:7a:42:1c:4c:89:34:9c:45:99:2c:ad:82:78:24:
         de:b4:b6:e8:e3:bd:b6:f9:88:56:b4:76:2c:0c:79:0a:65:38:
         ee:d3:68:3c:a6:79:e8:79:b6:16:13:72:8b:a6:12:9b:c8:3a:
         ed:c4:0d:8e:1d:ac:67:b7:90:35:2f:09:cf:6f:a6:cc:14:e0:
         9d:e6:43:02:0d:95:dc:6d:37:84:68:04:a8:9c:df:04:aa:ab:
         fe:f6:6f:a6:d7:63:b1:b7:61:da:9e:8f:f2:8b:2d:a2:0a:7d:
         39:a0:53:4c:34:6a:3a:a7:cd:f3:54:9c:21:f9:ec:e4:04:57:
         7d:eb:8b:65:02:14:76:c8:19:1a:e4:84:48:dd:ac:b3:c2:b6:
         15:64:52:c1:f0:7b:eb:4c:5b:3f:ff:f0:35:5c:12:06:bc:58:
         11:2f:ba:c6:36:48:ae:51:24:f8:7f:e9:25:fb:72:ef:a9:dd:
         a5:cd:ca:43:4a:a1:99:42:e9:80:ee:8c:ea:0f:cf:b8:44:3b:
         4b:88:91:a1:c3:af:ef:bb:a1:47:10:82:1c:04:51:ab:93:87:
         7f:d9:9f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 10:11:33 2025 by rpki-client