Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HjuGRtBdqZLV8Pdj1wLcpSzhAUtdJ2jmATU6Z5sSHFCo/0/323830343a373437633a3a2f33322d3332203d3e20323730393834.roa
File:                     323830343a373437633a3a2f33322d3332203d3e20323730393834.roa (raw, json)
Hash identifier:          pdbU0pKxnCZiEgdrhk0b5dhztH76UlR4yxaJ1WGA0ks=
Subject key identifier:   DD:46:E7:1C:E8:BE:F1:9C:0D:20:AA:D1:57:BD:58:A3:69:1B:E9:25
Certificate issuer:       /CN=A5867F518399DDAB33735A7B2492795CCD727428
Certificate serial:       7BFE1B1739C4B418F3BB9A867CB49B8A7F483CD4
Authority key identifier: A5:86:7F:51:83:99:DD:AB:33:73:5A:7B:24:92:79:5C:CD:72:74:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5867F518399DDAB33735A7B2492795CCD727428.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HjuGRtBdqZLV8Pdj1wLcpSzhAUtdJ2jmATU6Z5sSHFCo/0/323830343a373437633a3a2f33322d3332203d3e20323730393834.roa
Signing time:             Sat 02 Sep 2023 22:00:14 +0000
ROA not before:           Sat 02 Sep 2023 21:55:14 +0000
ROA not after:            Sat 31 Aug 2024 22:00:14 +0000
asID:                     270984
IP address blocks:        2804:747c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:fe:1b:17:39:c4:b4:18:f3:bb:9a:86:7c:b4:9b:8a:7f:48:3c:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5867F518399DDAB33735A7B2492795CCD727428
        Validity
            Not Before: Sep  2 21:55:14 2023 GMT
            Not After : Aug 31 22:00:14 2024 GMT
        Subject: CN=DD46E71CE8BEF19C0D20AAD157BD58A3691BE925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:80:fc:d2:fd:79:1f:da:bb:98:d3:eb:cf:83:
                    ce:e2:4a:94:68:9b:6d:a3:03:69:de:cd:20:4b:b1:
                    94:80:10:73:cf:12:93:2a:ab:9c:80:4f:68:79:81:
                    5c:46:0f:f1:c5:a4:0a:6d:96:ac:94:c4:4f:cf:2b:
                    5d:5d:bc:1e:15:44:19:6d:a1:e7:5b:09:fb:c9:ca:
                    a4:89:a2:fd:03:a4:2e:ab:dc:43:7e:a1:79:0b:28:
                    7b:0e:96:8c:c5:0f:b6:ab:63:8b:f2:73:bc:aa:6c:
                    26:22:7e:9d:9c:78:fe:ad:73:fe:e8:d9:fe:35:c2:
                    53:3b:9c:bc:cb:62:d0:32:2f:05:5d:6d:2b:28:b8:
                    46:59:4b:e2:63:f9:7b:07:37:49:51:df:8f:29:e1:
                    da:a8:5b:9c:e4:7b:f4:6c:db:de:61:e1:aa:c7:d5:
                    33:bb:70:a1:41:28:f8:52:c2:a6:2f:6d:ce:d6:59:
                    20:36:ee:7c:ff:e2:98:93:a1:84:0b:85:b4:94:3b:
                    80:c8:1d:d6:65:81:fd:34:61:4c:25:15:e3:ed:61:
                    95:95:5f:21:2b:ae:16:62:e0:41:96:ed:3f:18:f2:
                    99:e2:12:80:52:1a:cc:4d:96:f3:c9:6f:9e:18:81:
                    2c:6e:b5:df:73:a3:23:84:06:09:9e:2a:fe:cb:6a:
                    f7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:46:E7:1C:E8:BE:F1:9C:0D:20:AA:D1:57:BD:58:A3:69:1B:E9:25
            X509v3 Authority Key Identifier:
                keyid:A5:86:7F:51:83:99:DD:AB:33:73:5A:7B:24:92:79:5C:CD:72:74:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HjuGRtBdqZLV8Pdj1wLcpSzhAUtdJ2jmATU6Z5sSHFCo/0/A5867F518399DDAB33735A7B2492795CCD727428.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5867F518399DDAB33735A7B2492795CCD727428.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HjuGRtBdqZLV8Pdj1wLcpSzhAUtdJ2jmATU6Z5sSHFCo/0/323830343a373437633a3a2f33322d3332203d3e20323730393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:747c::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:10:ad:84:6d:0f:92:2e:e7:f6:16:29:0f:9d:10:4b:d3:79:
         f7:99:e5:d7:5a:e1:a1:07:6b:67:b6:35:c6:b0:1a:4a:40:a1:
         bf:5f:f1:51:48:c5:42:4b:db:b5:23:96:45:39:d6:e3:af:21:
         a6:da:84:1e:98:0f:e1:ef:46:6d:f5:9f:d0:1a:07:8f:42:3f:
         f7:3d:2a:84:2a:26:30:0a:95:16:7f:ba:cc:3e:a2:3d:31:84:
         08:b9:a1:1e:4b:d0:82:eb:9d:ee:10:fd:12:11:b1:c3:f2:81:
         89:b9:ba:a4:59:cc:9a:26:6b:23:55:0d:1b:f7:8d:9d:93:8f:
         c2:a5:2a:0f:56:33:9d:00:2f:e0:42:19:87:2f:9b:cd:d8:48:
         71:c4:b8:62:b4:65:73:6b:26:7f:bd:c0:08:fe:a8:3f:62:f1:
         d4:19:58:9f:7a:2f:c0:42:62:1b:f2:96:23:22:d8:b8:e1:a7:
         e9:0a:74:35:24:ea:4c:ae:46:09:a3:27:2d:18:4d:1e:e8:30:
         e4:5a:c7:0d:0e:7e:39:ae:38:76:3f:0e:be:7c:13:91:4d:d2:
         d8:6b:78:1c:d1:d2:a7:06:a6:16:db:92:c1:34:33:a6:55:20:
         34:f3:ca:e2:5e:c5:16:f4:a9:92:b2:af:57:c1:c9:7e:b8:94:
         78:b8:b8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:04:51 2025 by rpki-client