Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/323830343a373734343a383030303a3a2f33342d3334203d3e20323731313636.roa
File:                     323830343a373734343a383030303a3a2f33342d3334203d3e20323731313636.roa (raw, json)
Hash identifier:          PJCecjHW1aNnISB8AgNoUieH/VSAfmiSdoDwjiCqVVk=
Subject key identifier:   D3:94:76:37:C9:5F:4C:8B:26:65:78:72:C9:3E:5C:8C:06:B7:02:29
Certificate issuer:       /CN=321E98532E0480CAAC859174555C2E9A5402331D
Certificate serial:       499ED8F22A5BD4655A91913A148CB7FCB5576A93
Authority key identifier: 32:1E:98:53:2E:04:80:CA:AC:85:91:74:55:5C:2E:9A:54:02:33:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/321E98532E0480CAAC859174555C2E9A5402331D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/323830343a373734343a383030303a3a2f33342d3334203d3e20323731313636.roa
Signing time:             Wed 12 Apr 2023 13:02:54 +0000
ROA not before:           Wed 12 Apr 2023 12:57:54 +0000
ROA not after:            Wed 10 Apr 2024 13:02:54 +0000
asID:                     271166
IP address blocks:        2804:7744:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:9e:d8:f2:2a:5b:d4:65:5a:91:91:3a:14:8c:b7:fc:b5:57:6a:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=321E98532E0480CAAC859174555C2E9A5402331D
        Validity
            Not Before: Apr 12 12:57:54 2023 GMT
            Not After : Apr 10 13:02:54 2024 GMT
        Subject: CN=D3947637C95F4C8B26657872C93E5C8C06B70229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:27:44:65:36:15:9e:dc:27:77:92:a5:39:a0:
                    62:1f:0f:91:41:e4:eb:df:34:e0:7d:b0:87:d1:3f:
                    f3:cc:29:19:a1:9f:8a:29:0d:04:ce:7c:a0:20:5d:
                    07:4d:a9:2c:9a:01:c4:5f:d2:fb:1a:d1:fb:96:65:
                    ce:28:8b:b6:e2:7c:a0:f2:67:16:43:bd:a6:6d:f3:
                    f0:3a:69:8f:34:2c:ca:84:11:7a:52:aa:5b:8e:3e:
                    0b:ee:92:f6:d8:09:ae:f0:57:9d:d3:0b:43:17:54:
                    69:19:34:14:2b:12:2d:5f:9e:c8:85:2e:00:db:06:
                    47:aa:a3:e5:a8:26:9a:50:b1:e4:b9:22:8e:c7:cf:
                    d1:02:b1:96:d1:1e:5b:c3:41:19:b5:5d:e3:2e:72:
                    f2:59:6b:01:fa:8c:27:35:63:78:5c:3a:ff:a3:7a:
                    d3:bd:eb:a0:ac:c6:47:ff:09:1c:12:a4:d3:78:ab:
                    1b:22:11:de:8d:c3:51:47:9e:ec:73:d8:43:8d:5c:
                    79:3e:e0:73:a1:c5:b9:30:ed:e3:3d:ff:47:0c:c9:
                    5d:5c:74:1f:43:fb:53:15:25:9c:f6:84:c1:bb:ff:
                    c8:43:14:48:18:66:88:48:87:1e:45:f6:e2:e8:30:
                    50:5a:5b:6e:38:b2:62:92:13:d1:63:35:c2:94:d4:
                    28:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:94:76:37:C9:5F:4C:8B:26:65:78:72:C9:3E:5C:8C:06:B7:02:29
            X509v3 Authority Key Identifier:
                keyid:32:1E:98:53:2E:04:80:CA:AC:85:91:74:55:5C:2E:9A:54:02:33:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/321E98532E0480CAAC859174555C2E9A5402331D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/321E98532E0480CAAC859174555C2E9A5402331D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/323830343a373734343a383030303a3a2f33342d3334203d3e20323731313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7744:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         44:0e:87:97:0a:59:5b:67:32:bb:1e:82:f3:7b:27:46:67:1a:
         61:16:9f:8c:2c:eb:af:b2:37:3c:11:c0:09:83:55:db:15:f8:
         2b:2a:64:ba:4c:4c:b6:eb:fc:5e:fd:28:45:56:5e:11:98:65:
         e9:d0:0e:0a:35:43:bb:28:bc:2b:2b:87:9d:e4:6c:ef:3c:1e:
         49:e8:9f:66:35:1f:88:8a:2c:40:5a:70:12:6e:60:96:4c:39:
         62:06:f1:9b:4e:6f:04:a9:20:77:7e:0d:8b:7e:29:25:85:c8:
         66:f5:97:bf:b5:e6:37:38:d7:fa:99:85:a7:9e:d2:7e:31:85:
         3f:e0:c6:40:4a:14:48:f5:10:ff:6a:9f:aa:9f:8e:d0:f9:eb:
         b2:94:2f:77:48:8e:bf:17:18:24:69:e1:bc:cc:2b:bb:aa:15:
         d5:9f:a3:07:fe:dd:f1:60:8f:d8:88:b0:56:ba:c7:83:82:8f:
         71:13:79:7b:70:f7:4b:dc:ac:6c:fb:a9:bc:99:c7:9e:46:49:
         c0:6b:4c:8b:c8:4d:40:43:c2:88:7b:8c:3f:6d:2d:9c:c3:ae:
         e8:f1:1d:91:88:24:1e:c0:98:8a:85:23:c9:dc:50:dc:f3:8b:
         e9:15:0c:91:9d:98:26:a9:8c:4c:02:62:23:8b:c5:16:56:3c:
         03:19:a7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:10 2025 by rpki-client