Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/323830343a373734343a3a2f33332d3333203d3e20323731313636.roa
File:                     323830343a373734343a3a2f33332d3333203d3e20323731313636.roa (raw, json)
Hash identifier:          KxOneA0tAXjqtY/YGhHIl41HN1HWLISDqT8EVD5ISW8=
Subject key identifier:   27:89:F2:A9:8D:DF:87:5D:4F:F4:76:F7:A6:04:9A:AF:80:C0:16:DB
Certificate issuer:       /CN=321E98532E0480CAAC859174555C2E9A5402331D
Certificate serial:       738D13902607F3A50FF7B3A73C923B25CA67C399
Authority key identifier: 32:1E:98:53:2E:04:80:CA:AC:85:91:74:55:5C:2E:9A:54:02:33:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/321E98532E0480CAAC859174555C2E9A5402331D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/323830343a373734343a3a2f33332d3333203d3e20323731313636.roa
Signing time:             Wed 12 Apr 2023 13:02:55 +0000
ROA not before:           Wed 12 Apr 2023 12:57:55 +0000
ROA not after:            Wed 10 Apr 2024 13:02:55 +0000
asID:                     271166
IP address blocks:        2804:7744::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:8d:13:90:26:07:f3:a5:0f:f7:b3:a7:3c:92:3b:25:ca:67:c3:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=321E98532E0480CAAC859174555C2E9A5402331D
        Validity
            Not Before: Apr 12 12:57:55 2023 GMT
            Not After : Apr 10 13:02:55 2024 GMT
        Subject: CN=2789F2A98DDF875D4FF476F7A6049AAF80C016DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e2:de:46:e7:6c:72:45:69:48:d4:40:4c:70:
                    51:4d:b2:08:d1:93:1f:68:34:ff:1f:46:30:d8:b4:
                    65:15:1c:05:1d:4c:35:9f:13:2c:3d:21:9a:da:79:
                    95:ab:eb:08:26:58:a1:0b:d8:64:25:21:6b:c3:85:
                    14:6b:4d:2c:c3:70:78:ba:a6:b5:b5:8b:de:13:44:
                    d8:df:c3:fd:01:3f:a2:44:48:6c:8a:0a:f0:64:25:
                    19:9f:68:a7:d4:ad:fd:c8:8f:5d:92:1d:13:22:cc:
                    1f:ec:8f:db:ee:86:5b:58:0b:20:df:bc:51:ef:48:
                    60:85:5a:9b:98:61:cc:4d:34:0f:72:dd:fe:c8:c0:
                    2b:4c:81:cd:c1:63:7d:38:d2:bd:00:a4:b2:af:74:
                    4b:36:e5:de:c9:4d:cc:ae:a8:d5:94:ab:96:5a:c8:
                    6c:3c:c2:36:2c:ed:91:da:96:0e:cd:07:f9:31:44:
                    98:6a:c2:b3:ef:2c:8a:52:f7:b4:e7:13:23:8e:66:
                    26:df:87:f4:ac:ba:2b:64:1b:af:09:c0:47:da:be:
                    14:7c:66:8d:04:48:76:48:f4:d7:11:7d:97:cb:6d:
                    cd:d4:9b:94:7a:29:08:5a:5d:64:f5:a7:ee:7e:ec:
                    5f:59:88:2b:0b:fe:83:f8:90:4b:46:cc:b2:23:03:
                    f0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:89:F2:A9:8D:DF:87:5D:4F:F4:76:F7:A6:04:9A:AF:80:C0:16:DB
            X509v3 Authority Key Identifier:
                keyid:32:1E:98:53:2E:04:80:CA:AC:85:91:74:55:5C:2E:9A:54:02:33:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/321E98532E0480CAAC859174555C2E9A5402331D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/321E98532E0480CAAC859174555C2E9A5402331D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/323830343a373734343a3a2f33332d3333203d3e20323731313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7744::/33

    Signature Algorithm: sha256WithRSAEncryption
         05:2a:75:f8:b3:60:f3:7f:8c:4f:01:b0:02:53:dc:bd:c5:ae:
         d7:08:f3:db:be:3f:ac:15:6a:dd:7b:66:bf:c6:48:83:4b:39:
         5c:fd:ca:e9:6d:c4:84:6f:82:b0:3a:3c:bf:47:0f:ac:2b:45:
         a4:e8:d6:a8:e0:4f:e3:77:8c:c6:57:d4:4c:87:e8:25:1c:2b:
         05:c8:2c:04:31:f0:70:d5:39:c3:0d:c4:63:0a:32:cc:e6:48:
         69:87:ca:a0:aa:01:65:3e:4d:70:31:46:28:4a:19:da:e1:f3:
         62:6c:1d:6b:d6:b2:30:78:91:3d:48:2b:eb:d5:41:df:b6:59:
         40:98:01:14:a9:c1:1b:85:13:41:9d:0a:c8:c7:72:b5:2f:30:
         74:75:54:d0:21:b6:d3:89:ac:8b:a7:22:b7:09:c0:d0:8e:ed:
         38:4b:aa:f9:37:2f:01:bd:b1:2b:3e:23:a6:e8:9f:92:73:c4:
         59:6b:d6:a3:e8:83:ea:8e:bd:b6:c5:c8:2b:5b:58:93:b6:41:
         ce:29:1c:4b:36:15:da:b5:b1:83:e5:90:c3:38:35:4c:db:09:
         55:f7:08:cc:aa:f1:f4:ea:dd:3a:dc:d6:9b:8c:4a:4d:a6:78:
         69:47:7b:67:20:08:71:f5:8c:36:1c:9c:e6:28:5c:bf:0b:f7:
         dd:b4:f4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:31 2025 by rpki-client