Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/0/323830343a386235383a3a2f33322d3332203d3e20323733373237.roa
File:                     323830343a386235383a3a2f33322d3332203d3e20323733373237.roa (raw, json)
Hash identifier:          hTMv7t5Slt8IDb4YOmVIEpb16Fa2YO6M/hCASxF0VRU=
Subject key identifier:   EE:DF:2C:40:FE:C0:69:0C:2F:85:89:9F:A7:F0:61:3E:73:B1:5F:F6
Certificate issuer:       /CN=0CF0F9CE8AF02C2F7862C7A594CEFD3E44AAB70F
Certificate serial:       26BE3C3E67FA15269ABA817B1BE1D0462C48F22F
Authority key identifier: 0C:F0:F9:CE:8A:F0:2C:2F:78:62:C7:A5:94:CE:FD:3E:44:AA:B7:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CF0F9CE8AF02C2F7862C7A594CEFD3E44AAB70F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/0/323830343a386235383a3a2f33322d3332203d3e20323733373237.roa
Signing time:             Wed 17 May 2023 12:45:22 +0000
ROA not before:           Wed 17 May 2023 12:40:22 +0000
ROA not after:            Wed 15 May 2024 12:45:22 +0000
asID:                     273727
IP address blocks:        2804:8b58::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:be:3c:3e:67:fa:15:26:9a:ba:81:7b:1b:e1:d0:46:2c:48:f2:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CF0F9CE8AF02C2F7862C7A594CEFD3E44AAB70F
        Validity
            Not Before: May 17 12:40:22 2023 GMT
            Not After : May 15 12:45:22 2024 GMT
        Subject: CN=EEDF2C40FEC0690C2F85899FA7F0613E73B15FF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d7:d4:15:e7:24:5d:b9:e0:31:a1:4e:9f:34:
                    82:55:e0:a4:5f:db:95:b5:71:e6:79:bd:4d:ff:24:
                    17:4e:29:42:df:48:cd:11:66:51:99:2f:98:46:72:
                    06:bf:88:ba:73:8a:e5:ea:2b:b8:08:99:8e:83:0c:
                    4d:f6:da:bc:28:26:9e:5a:22:e0:bf:49:2c:6b:b6:
                    6a:1d:29:0d:cc:52:36:1c:03:5a:47:75:b3:d3:4d:
                    5d:6b:24:98:8e:bf:e1:f1:59:18:bf:6b:fc:f7:1b:
                    a9:14:09:cd:83:42:a6:42:68:87:47:ee:4f:11:9e:
                    d3:9d:78:c1:d8:6c:90:74:d1:d3:d2:a2:aa:ac:d5:
                    10:ac:ca:30:0f:76:ee:99:97:63:d8:c0:e6:3c:b0:
                    9e:7b:68:c4:1c:68:39:f0:99:16:57:63:5d:8b:03:
                    d0:27:75:c0:42:86:a9:14:7b:a6:50:cc:23:48:a3:
                    d5:44:44:b2:a7:b9:02:5c:48:f2:95:5a:bf:99:38:
                    1e:fe:a0:8d:61:fb:28:bf:6e:cc:a6:89:b8:ce:aa:
                    f1:37:02:90:14:bb:1e:14:e9:4e:cf:44:37:05:17:
                    f8:d1:37:20:fe:4a:15:ad:a8:63:29:ce:f8:17:7b:
                    a9:97:d4:28:4e:3a:8e:f6:7e:b6:37:5c:a4:0d:54:
                    83:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:DF:2C:40:FE:C0:69:0C:2F:85:89:9F:A7:F0:61:3E:73:B1:5F:F6
            X509v3 Authority Key Identifier:
                keyid:0C:F0:F9:CE:8A:F0:2C:2F:78:62:C7:A5:94:CE:FD:3E:44:AA:B7:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/0/0CF0F9CE8AF02C2F7862C7A594CEFD3E44AAB70F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CF0F9CE8AF02C2F7862C7A594CEFD3E44AAB70F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/0/323830343a386235383a3a2f33322d3332203d3e20323733373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b58::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:1a:f7:b7:00:79:6d:43:ec:cc:9f:54:b2:12:2b:01:13:d0:
         00:37:9e:79:50:f1:65:bf:91:ae:64:e3:e1:99:15:18:1b:03:
         e6:7b:2e:52:8d:70:32:ae:a4:f1:ca:6d:7a:a0:dd:07:55:e9:
         fd:b9:44:16:c0:80:2a:50:7c:b9:bd:16:07:01:67:d1:90:f9:
         a3:d2:a2:df:32:94:0e:40:cb:91:dc:ef:39:96:37:af:76:24:
         ed:b8:d1:09:db:5f:05:ce:d4:0d:f5:07:d9:d6:a7:50:5f:88:
         aa:d2:b8:5a:8d:56:29:3e:64:7a:c0:1f:90:2e:8d:d2:8b:df:
         28:7f:61:1e:26:02:ee:45:c4:e1:43:d8:cd:7a:f6:f2:19:8b:
         24:d5:89:ab:2d:cb:52:9a:6f:a5:83:80:11:00:22:0f:e1:48:
         08:b8:83:2b:47:53:6e:df:f6:66:0f:f9:d6:56:3b:4a:1a:52:
         22:08:44:df:15:74:4a:bd:8d:d0:d0:d5:7b:2b:e6:ea:30:66:
         d0:33:09:8b:d2:1e:b0:14:30:2e:a6:08:63:b0:e4:a1:50:83:
         54:d6:79:a8:b9:22:7f:59:55:2a:47:0f:ee:ee:42:85:f7:bb:
         be:99:a1:58:ba:a0:e9:54:37:10:d6:e8:5b:0b:48:60:58:a4:
         51:1a:93:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:38:42 2025 by rpki-client