Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H9gppQYt8hJokKxNVzjiBTRqYQTnWhoJfZszXaei2i6W/0/323830343a366136383a343030303a3a2f33342d3334203d3e20323730333334.roa
File:                     323830343a366136383a343030303a3a2f33342d3334203d3e20323730333334.roa (raw, json)
Hash identifier:          11ezlm5k7YuHSHPXRW/L/xQYdRjkgfCazbjG4pceXKg=
Subject key identifier:   F4:72:D8:29:D1:EF:31:ED:FE:91:69:E9:6A:98:8D:CB:FE:F8:53:61
Certificate issuer:       /CN=03BA31A787BD80FCF2490BD375CCA939046D0F3D
Certificate serial:       211D330C2E8F3A5B32FFE43830CDF72136CFA0FD
Authority key identifier: 03:BA:31:A7:87:BD:80:FC:F2:49:0B:D3:75:CC:A9:39:04:6D:0F:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03BA31A787BD80FCF2490BD375CCA939046D0F3D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H9gppQYt8hJokKxNVzjiBTRqYQTnWhoJfZszXaei2i6W/0/323830343a366136383a343030303a3a2f33342d3334203d3e20323730333334.roa
Signing time:             Mon 10 Oct 2022 18:11:11 +0000
ROA not before:           Mon 10 Oct 2022 18:06:11 +0000
ROA not after:            Mon 09 Oct 2023 18:11:11 +0000
asID:                     270334
IP address blocks:        2804:6a68:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:1d:33:0c:2e:8f:3a:5b:32:ff:e4:38:30:cd:f7:21:36:cf:a0:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03BA31A787BD80FCF2490BD375CCA939046D0F3D
        Validity
            Not Before: Oct 10 18:06:11 2022 GMT
            Not After : Oct  9 18:11:11 2023 GMT
        Subject: CN=F472D829D1EF31EDFE9169E96A988DCBFEF85361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7d:c1:0f:ef:dc:78:c2:07:e2:0e:31:a0:1a:
                    ae:b8:44:b1:e2:46:8e:21:55:8a:60:e4:e5:8a:7e:
                    22:e1:d3:96:d4:f0:55:dd:46:a2:f2:e2:f8:45:00:
                    78:da:32:4b:0e:aa:d5:8a:21:0f:9a:37:ef:9d:4d:
                    30:44:77:e0:21:f4:21:a2:0e:f9:99:dd:cd:dc:35:
                    68:4b:18:97:ff:0c:19:fa:bd:60:52:08:e9:13:f2:
                    7d:3a:e2:2b:6b:41:12:4f:98:27:ba:2b:45:0c:42:
                    52:0b:b0:35:d6:2d:c8:35:57:0c:60:a6:ed:77:f6:
                    89:40:65:64:fe:e3:f7:3c:52:d8:98:72:04:13:5a:
                    6f:71:21:7e:01:36:bd:3f:fe:24:66:c5:2e:14:20:
                    ab:f4:ae:f7:33:0b:c7:39:f7:a3:86:32:24:0a:0d:
                    9f:54:ef:be:79:2a:24:88:bb:44:a2:c6:d4:78:0f:
                    bf:5f:db:e7:34:ba:1e:79:81:c8:f5:6b:e2:2f:57:
                    a5:22:f9:46:6f:7d:84:c2:06:82:dc:ae:f5:d7:4b:
                    ad:54:d7:10:3c:da:60:c2:7f:61:9a:c1:d2:56:76:
                    62:8e:3a:02:18:6f:4f:82:0d:f4:4b:4a:3f:47:cd:
                    85:65:2f:7c:fa:99:2d:b5:f2:a0:f7:a7:db:2b:85:
                    58:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:72:D8:29:D1:EF:31:ED:FE:91:69:E9:6A:98:8D:CB:FE:F8:53:61
            X509v3 Authority Key Identifier:
                keyid:03:BA:31:A7:87:BD:80:FC:F2:49:0B:D3:75:CC:A9:39:04:6D:0F:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H9gppQYt8hJokKxNVzjiBTRqYQTnWhoJfZszXaei2i6W/0/03BA31A787BD80FCF2490BD375CCA939046D0F3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03BA31A787BD80FCF2490BD375CCA939046D0F3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9gppQYt8hJokKxNVzjiBTRqYQTnWhoJfZszXaei2i6W/0/323830343a366136383a343030303a3a2f33342d3334203d3e20323730333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a68:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5d:13:06:08:e7:09:62:f7:11:30:9c:b3:d1:86:23:85:0b:50:
         de:60:12:73:81:39:3a:32:7e:68:16:94:61:5b:a8:2b:ae:65:
         bc:67:2c:5b:f7:87:c0:eb:31:07:54:95:2e:4e:b4:ef:5a:c7:
         14:86:b8:81:65:72:0e:81:b3:52:c8:32:9d:35:4c:6a:25:1a:
         c3:4f:4c:03:18:92:f4:d5:13:8b:9b:89:11:ea:15:f2:fc:d6:
         c1:86:11:11:2c:a0:78:ea:08:e2:78:49:13:9f:35:db:c6:7f:
         06:a8:41:69:bc:70:b6:5d:a7:fd:cf:84:c8:0c:81:7e:1b:06:
         6f:9c:f2:63:a0:26:68:8a:5f:eb:d7:85:44:b8:47:c9:9a:af:
         9f:56:bc:fb:12:b8:a5:59:dc:91:17:ff:46:0f:46:82:9b:19:
         f4:26:13:77:28:81:a8:7b:c6:ba:dc:e4:59:83:a3:88:1c:8c:
         12:cc:94:dd:a9:5a:c2:49:41:57:0c:ae:c9:19:87:3e:3a:c8:
         25:57:62:75:37:7a:1f:c0:66:7a:c9:84:24:8f:0b:ee:96:0b:
         d4:d0:9b:f3:cc:6e:d3:f7:31:e2:99:07:ad:ea:7c:c8:8f:ab:
         b4:47:13:8c:2f:ae:c3:e5:4b:ed:2c:b5:35:d9:57:6b:c7:14:
         20:64:ee:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:40 2025 by rpki-client