Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/323830343a323936633a3a2f33322d3438203d3e20323634303134.roa
File:                     323830343a323936633a3a2f33322d3438203d3e20323634303134.roa (raw, json)
Hash identifier:          3oqMsCmX7B1zpDDdoxBQyBeTrPdk43T/uINnJuov8qY=
Subject key identifier:   2D:A1:FF:E0:A3:83:35:D6:41:6A:77:CA:BB:95:E9:0D:B3:8E:5F:E7
Certificate issuer:       /CN=22EA8D7CB9125D9A6729C2F7D91AE9E0D12FB2D3
Certificate serial:       0E84222C2F881BB9C683CF326E973A043732154F
Authority key identifier: 22:EA:8D:7C:B9:12:5D:9A:67:29:C2:F7:D9:1A:E9:E0:D1:2F:B2:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/22EA8D7CB9125D9A6729C2F7D91AE9E0D12FB2D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/323830343a323936633a3a2f33322d3438203d3e20323634303134.roa
Signing time:             Tue 25 Jul 2023 20:00:00 +0000
ROA not before:           Tue 25 Jul 2023 19:55:00 +0000
ROA not after:            Tue 23 Jul 2024 20:00:00 +0000
asID:                     264014
IP address blocks:        2804:296c::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:84:22:2c:2f:88:1b:b9:c6:83:cf:32:6e:97:3a:04:37:32:15:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22EA8D7CB9125D9A6729C2F7D91AE9E0D12FB2D3
        Validity
            Not Before: Jul 25 19:55:00 2023 GMT
            Not After : Jul 23 20:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3b:e3:2b:4a:db:08:be:c8:22:9b:bb:f7:32:
                    0a:8f:92:05:6a:7e:c6:04:14:de:ab:5b:1e:e0:a8:
                    99:64:bd:b9:14:50:09:7c:23:92:9f:a4:c4:f2:a1:
                    46:bc:58:ad:12:cf:51:74:ef:54:15:f7:03:ae:73:
                    3d:a4:ec:69:e1:b9:79:c7:6b:bb:f8:18:60:ea:fc:
                    6d:2b:35:4d:6b:7e:95:97:d5:38:9e:f0:a9:db:cd:
                    12:5a:4c:aa:7e:bf:04:64:47:cf:24:a9:45:53:1e:
                    de:d6:a5:49:a5:ea:4f:bd:63:d4:dd:5b:d1:d7:86:
                    d9:f7:78:7b:33:96:4f:7f:35:ed:45:7d:a8:1f:a1:
                    2f:4d:4a:66:a9:07:00:ba:1a:51:96:39:8b:cd:3e:
                    d3:0b:4d:ff:58:25:32:12:d3:49:ae:c7:63:35:8d:
                    34:7b:92:1e:6d:db:4b:6f:2e:9a:20:d8:ba:a5:c1:
                    19:df:a6:24:02:37:b3:85:33:59:8f:64:44:1c:c9:
                    61:74:4d:2d:f6:3a:c5:f3:be:20:06:3e:04:b3:b2:
                    3f:5f:26:13:ae:30:36:c0:b7:57:54:1d:c0:db:a3:
                    13:fa:41:3d:0a:0f:a3:40:04:93:80:d0:bb:d6:de:
                    e0:02:2c:34:94:5f:fb:0a:43:e5:6c:9e:dc:af:fc:
                    7c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A1:FF:E0:A3:83:35:D6:41:6A:77:CA:BB:95:E9:0D:B3:8E:5F:E7
            X509v3 Authority Key Identifier:
                keyid:22:EA:8D:7C:B9:12:5D:9A:67:29:C2:F7:D9:1A:E9:E0:D1:2F:B2:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/22EA8D7CB9125D9A6729C2F7D91AE9E0D12FB2D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/22EA8D7CB9125D9A6729C2F7D91AE9E0D12FB2D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/323830343a323936633a3a2f33322d3438203d3e20323634303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:296c::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:90:9e:80:d3:fa:85:80:41:93:c3:f7:44:d0:93:a3:ff:bf:
         01:6d:c9:02:8a:87:c9:83:75:1a:aa:21:be:d3:d5:22:19:20:
         2b:29:0a:39:c6:3a:28:d4:ec:30:e1:27:9b:37:1e:27:9b:7d:
         c8:9f:3d:f8:9e:20:85:d9:0b:95:f6:44:b7:bd:b2:46:a3:d2:
         1d:1b:e3:e7:db:5d:26:bf:cc:03:69:65:af:8e:48:fc:01:1d:
         ee:84:7f:28:9a:90:3b:56:7c:ce:de:af:45:0f:38:95:bc:53:
         e2:7a:af:b7:3b:2d:97:71:1f:f7:3c:03:24:e9:f6:81:a6:7a:
         b7:bc:06:7a:a5:86:63:f4:c5:7d:68:e9:1d:4d:25:76:a5:f0:
         f3:43:d8:45:83:c3:53:e0:28:07:70:2d:ee:35:d8:14:a6:3c:
         5d:dc:15:b6:c1:76:66:2f:07:6b:74:c5:13:2d:02:73:6a:86:
         e3:6e:0d:e3:45:ec:db:d9:dd:0c:bf:25:fd:fc:4c:1a:8d:fb:
         33:4f:74:d8:4d:24:45:0d:1b:98:9e:98:22:2d:5f:d5:02:bf:
         25:20:89:bc:5c:c9:1e:91:69:28:4d:a6:d5:2a:8d:ab:0f:eb:
         8d:27:04:28:9e:34:71:cd:ba:bd:89:97:5c:fc:ea:6c:66:93:
         4f:46:32:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:52 2025 by rpki-client