Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a3862383a3a2f34352d3435203d3e20323637343230.roa
File:                     323830343a346433633a3862383a3a2f34352d3435203d3e20323637343230.roa (raw, json)
Hash identifier:          dguo290/OEQe9dUqzEbZCyUwYhVmp4gxP4q7wG6pbAU=
Subject key identifier:   BB:00:7A:04:7D:CA:C7:5B:72:CD:03:3B:EE:3A:06:DD:D2:7B:5F:A4
Certificate issuer:       /CN=C9993E4E7A469482F48DE6C557C1BE415E192A34
Certificate serial:       6362BB3E4800A5D32309498F3D46F19800CDBEA1
Authority key identifier: C9:99:3E:4E:7A:46:94:82:F4:8D:E6:C5:57:C1:BE:41:5E:19:2A:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a3862383a3a2f34352d3435203d3e20323637343230.roa
Signing time:             Wed 28 Feb 2024 13:53:08 +0000
ROA not before:           Wed 28 Feb 2024 13:48:08 +0000
ROA not after:            Wed 26 Feb 2025 13:53:08 +0000
asID:                     267420
IP address blocks:        2804:4d3c:8b8::/45 maxlen: 45
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:62:bb:3e:48:00:a5:d3:23:09:49:8f:3d:46:f1:98:00:cd:be:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9993E4E7A469482F48DE6C557C1BE415E192A34
        Validity
            Not Before: Feb 28 13:48:08 2024 GMT
            Not After : Feb 26 13:53:08 2025 GMT
        Subject: CN=BB007A047DCAC75B72CD033BEE3A06DDD27B5FA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:40:91:c0:99:39:2c:01:56:5c:d1:00:89:a4:
                    34:3a:7f:d7:07:51:8c:63:fc:d1:b7:4d:8f:c4:80:
                    7d:c3:56:92:f3:11:02:51:24:74:cc:48:dc:a1:8e:
                    c7:17:85:36:c2:9f:15:8e:f4:d2:44:ee:ad:9e:d9:
                    fa:d1:ee:c7:2a:b6:b1:3d:cc:4f:a6:a2:df:49:99:
                    03:4a:0f:e1:a6:24:d7:45:f2:7b:bc:aa:56:5f:4e:
                    b2:01:66:f0:98:5f:91:05:94:c9:9e:e3:72:34:05:
                    3e:cf:6d:01:10:ea:92:83:8e:ae:24:f5:17:c7:4f:
                    9b:31:c9:d5:65:ff:f3:fb:fe:ca:e9:28:a2:0a:9f:
                    a4:97:4e:f8:d2:d2:ba:4b:33:f4:d7:b1:b6:bf:f0:
                    06:d6:b2:7e:6d:90:2b:fa:5b:e5:da:8b:20:0f:e0:
                    fb:fe:7c:52:97:95:28:52:ef:61:f8:35:b2:5d:43:
                    0f:15:ad:8c:10:e7:ba:95:ab:51:6c:0c:5f:d8:f8:
                    1c:ef:da:5f:48:d8:6d:fe:00:b0:a8:d4:bf:70:3e:
                    42:f2:16:2e:d0:6a:1a:c2:2b:d4:7d:8c:f5:25:ea:
                    ee:b0:09:d1:81:fe:38:e4:39:0d:19:5d:a4:dc:dc:
                    66:4d:5b:87:30:82:93:86:89:a2:ad:c8:cd:bf:85:
                    47:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:00:7A:04:7D:CA:C7:5B:72:CD:03:3B:EE:3A:06:DD:D2:7B:5F:A4
            X509v3 Authority Key Identifier:
                keyid:C9:99:3E:4E:7A:46:94:82:F4:8D:E6:C5:57:C1:BE:41:5E:19:2A:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a3862383a3a2f34352d3435203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d3c:8b8::/45

    Signature Algorithm: sha256WithRSAEncryption
         65:84:aa:c4:53:2c:5b:ef:da:58:c1:7c:2e:8e:30:1c:bb:4e:
         d2:9f:91:4f:f4:47:25:47:fe:2b:e0:3a:33:94:e5:27:bd:8e:
         b2:87:4e:d2:0d:d4:f8:4b:f5:90:26:39:cd:b0:23:4a:f4:bd:
         f9:dc:32:b0:bf:33:3f:04:d5:ed:f3:e2:86:8c:77:e5:c9:a6:
         60:8a:6f:48:75:28:99:b7:56:ed:16:e9:27:8e:35:a0:8a:90:
         02:5e:20:13:a2:df:ad:89:15:e7:cb:af:4b:bb:af:95:83:98:
         6b:d4:29:06:47:b6:8e:18:f5:84:65:67:bc:56:8b:ae:41:37:
         7c:02:ef:c4:70:2c:12:67:b0:d4:61:a5:8b:b6:ed:d5:a9:0c:
         4f:7d:b2:d8:60:e5:ff:1e:a8:47:0a:b2:93:5e:b7:c6:5d:f6:
         28:68:78:9e:d4:0a:73:9b:b0:32:7e:0a:d2:9c:e6:83:38:d0:
         ab:e9:bb:7f:1a:ea:c0:d4:22:66:99:8c:11:2d:af:f6:8c:fa:
         de:b1:70:7f:73:8f:aa:0f:2c:56:60:b1:e6:16:29:b0:58:48:
         ad:da:ac:a8:cc:e2:6e:b4:13:7b:2c:03:9e:8c:5a:e7:bd:1f:
         4c:4e:6a:20:b6:d7:06:0c:ef:59:f2:9d:6c:37:b7:49:5e:1a:
         92:6e:ad:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:56:44 2025 by rpki-client