Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HP51F1TsMzz1t2mjpPXU5U5U3Ton4Vycp2BeJh8LMoEa/0/323830343a373966633a3a2f33322d3438203d3e20323731333430.roa
File:                     323830343a373966633a3a2f33322d3438203d3e20323731333430.roa (raw, json)
Hash identifier:          NRDIjaLGRBSNqhAcIfLzm/QpkKfVIraKhQNReH/9NHI=
Subject key identifier:   96:9D:62:63:3C:71:05:0F:6B:C2:0C:DC:14:2C:E9:08:35:60:47:A4
Certificate issuer:       /CN=CDEAD2D7900A41EC490915BA9CD6696DBA72C940
Certificate serial:       6B031A16208E304E5DF59B492183DBAA986CDF8C
Authority key identifier: CD:EA:D2:D7:90:0A:41:EC:49:09:15:BA:9C:D6:69:6D:BA:72:C9:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDEAD2D7900A41EC490915BA9CD6696DBA72C940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HP51F1TsMzz1t2mjpPXU5U5U3Ton4Vycp2BeJh8LMoEa/0/323830343a373966633a3a2f33322d3438203d3e20323731333430.roa
Signing time:             Thu 20 Apr 2023 18:58:14 +0000
ROA not before:           Thu 20 Apr 2023 18:53:14 +0000
ROA not after:            Thu 18 Apr 2024 18:58:14 +0000
asID:                     271340
IP address blocks:        2804:79fc::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:03:1a:16:20:8e:30:4e:5d:f5:9b:49:21:83:db:aa:98:6c:df:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDEAD2D7900A41EC490915BA9CD6696DBA72C940
        Validity
            Not Before: Apr 20 18:53:14 2023 GMT
            Not After : Apr 18 18:58:14 2024 GMT
        Subject: CN=969D62633C71050F6BC20CDC142CE908356047A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5c:aa:59:58:7f:0f:7e:32:ec:d7:b1:f2:81:
                    ec:06:c3:6f:52:12:5e:89:3e:55:0e:d3:e7:b1:b3:
                    ed:43:80:42:f8:6b:5a:8f:23:2f:8b:df:df:45:97:
                    11:8b:9e:aa:ed:1d:f2:a7:fe:84:14:67:42:22:81:
                    13:fe:db:9f:67:af:89:d6:69:3d:a4:07:ed:cc:97:
                    6b:ef:aa:a5:0b:78:78:de:09:9d:53:2d:42:5f:bb:
                    1b:d2:f4:c4:fa:cd:d8:3d:75:75:7c:f0:05:b7:5d:
                    fa:57:14:28:ec:a6:1e:e1:2e:61:a7:14:df:ad:0c:
                    f5:e4:48:44:2a:6e:e0:60:b6:4e:1b:25:b7:a8:40:
                    ef:1e:86:36:e3:a7:48:58:bb:fc:03:d5:d9:ac:fa:
                    42:7a:32:ab:b0:88:ca:16:4f:b1:9c:be:73:84:13:
                    7f:56:95:bb:a4:35:ba:26:72:89:98:af:b7:44:67:
                    5c:51:03:63:22:b9:aa:aa:95:13:25:13:38:c3:0c:
                    fd:f4:8b:71:6e:6b:a1:8e:32:49:42:bc:b3:d6:5c:
                    cf:18:5b:32:17:ef:ca:b0:a6:55:39:36:84:0a:16:
                    98:2a:3a:9e:27:47:ac:80:85:66:b2:21:e4:5b:b8:
                    02:a7:88:40:a1:5f:7b:63:b8:c1:d7:89:32:29:7b:
                    33:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:9D:62:63:3C:71:05:0F:6B:C2:0C:DC:14:2C:E9:08:35:60:47:A4
            X509v3 Authority Key Identifier:
                keyid:CD:EA:D2:D7:90:0A:41:EC:49:09:15:BA:9C:D6:69:6D:BA:72:C9:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HP51F1TsMzz1t2mjpPXU5U5U3Ton4Vycp2BeJh8LMoEa/0/CDEAD2D7900A41EC490915BA9CD6696DBA72C940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDEAD2D7900A41EC490915BA9CD6696DBA72C940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HP51F1TsMzz1t2mjpPXU5U5U3Ton4Vycp2BeJh8LMoEa/0/323830343a373966633a3a2f33322d3438203d3e20323731333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:79fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:24:a1:d8:43:73:e0:42:fa:62:de:1f:61:8a:d1:a0:17:e8:
         e0:f0:ae:d6:88:e6:69:b0:af:f4:bd:d8:28:0f:46:31:0a:8b:
         02:56:0d:a2:b2:4a:d5:63:aa:b9:e0:4f:d5:54:3c:d2:fe:88:
         9a:d3:39:bf:a2:f1:04:cb:c1:13:86:20:e2:2a:db:63:54:11:
         ce:56:98:ed:78:3a:67:14:3c:cb:0a:6e:06:f6:e0:c0:19:ed:
         f9:a6:67:dc:6e:c9:4b:12:c6:de:12:5c:59:b5:24:a1:25:1a:
         46:ce:be:09:a2:c3:11:53:ef:6f:b6:84:34:6f:bb:a4:47:7f:
         43:83:2c:8e:4a:0d:5d:d9:5b:06:e6:0b:a3:f2:ce:7b:39:1f:
         78:89:50:1d:7a:87:5e:c2:51:0f:ae:09:5e:da:fe:45:35:94:
         2d:ae:7c:08:02:a2:e8:d7:2b:79:3b:ad:82:e7:d6:80:35:3c:
         ce:d4:0a:04:6f:dd:03:b0:6e:73:ee:ca:5d:9f:3c:90:8a:2e:
         4b:39:50:e1:32:ab:c3:2d:4e:eb:8c:9f:48:4e:b5:82:71:8d:
         6f:34:62:07:fa:71:23:7b:2d:8a:be:d3:1b:35:4a:cf:81:f9:
         21:37:de:20:8e:f3:2d:99:90:d7:58:4e:a8:38:01:4a:93:79:
         58:5c:a4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:29 2025 by rpki-client