Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a6134303a3a2f34352d3435203d3e20323637343230.roa
File:                     323830343a346433633a6134303a3a2f34352d3435203d3e20323637343230.roa (raw, json)
Hash identifier:          qSycncs8ko3HX+PquINBo4rO5m7yb746kOU/YYvETVY=
Subject key identifier:   19:C2:3E:AD:23:AB:56:68:32:8E:4D:A1:AF:9A:7E:55:67:08:84:12
Certificate issuer:       /CN=B2F685BA3B817D927E5EC7B38BBE08A5BD45EB47
Certificate serial:       1F759E58C89589E94231985C057BA898BD07208B
Authority key identifier: B2:F6:85:BA:3B:81:7D:92:7E:5E:C7:B3:8B:BE:08:A5:BD:45:EB:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2F685BA3B817D927E5EC7B38BBE08A5BD45EB47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a6134303a3a2f34352d3435203d3e20323637343230.roa
Signing time:             Tue 02 May 2023 21:42:11 +0000
ROA not before:           Tue 02 May 2023 21:37:11 +0000
ROA not after:            Tue 30 Apr 2024 21:42:11 +0000
asID:                     267420
IP address blocks:        2804:4d3c:a40::/45 maxlen: 45
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:75:9e:58:c8:95:89:e9:42:31:98:5c:05:7b:a8:98:bd:07:20:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2F685BA3B817D927E5EC7B38BBE08A5BD45EB47
        Validity
            Not Before: May  2 21:37:11 2023 GMT
            Not After : Apr 30 21:42:11 2024 GMT
        Subject: CN=19C23EAD23AB5668328E4DA1AF9A7E5567088412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e4:73:2f:87:8c:ff:8d:89:be:98:17:a2:8e:
                    81:c5:cd:79:49:e6:ce:91:84:54:7f:29:9b:6a:84:
                    f0:d8:22:bb:46:6c:ab:af:59:6d:71:4d:3c:25:3e:
                    1b:7d:97:96:93:ae:6b:e7:ff:cc:25:f6:19:21:43:
                    c6:c5:92:cd:ca:e5:e4:fb:0c:04:fd:71:5c:11:60:
                    af:6f:d4:61:72:a4:d7:c2:f0:74:f4:9e:03:4f:25:
                    e2:04:9f:b1:c0:c3:6a:1b:f5:2a:fb:ad:88:68:07:
                    36:53:4d:74:a2:bd:67:bd:e4:8c:b7:67:f8:33:f7:
                    75:4e:7d:72:d8:01:88:b0:84:c1:2c:b6:02:ea:f8:
                    36:90:29:42:af:66:a1:41:b1:77:df:da:71:a7:06:
                    d9:22:0b:29:d5:b2:5c:b7:47:03:96:72:20:f4:34:
                    47:38:40:4b:15:6a:62:c8:e8:a6:2e:ef:0e:8c:a3:
                    87:da:cc:fd:bd:61:49:d4:bf:58:6a:92:df:52:24:
                    a3:17:d3:7e:d2:25:a3:e9:ca:87:e0:e2:5c:3e:37:
                    3a:24:50:a2:e9:d8:82:a9:a6:3f:64:25:b7:24:9b:
                    ab:b2:63:de:32:b0:a6:7a:d5:be:81:91:b0:74:8d:
                    2f:1c:64:01:26:1c:f9:8e:25:a8:af:5f:89:73:8e:
                    20:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C2:3E:AD:23:AB:56:68:32:8E:4D:A1:AF:9A:7E:55:67:08:84:12
            X509v3 Authority Key Identifier:
                keyid:B2:F6:85:BA:3B:81:7D:92:7E:5E:C7:B3:8B:BE:08:A5:BD:45:EB:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/B2F685BA3B817D927E5EC7B38BBE08A5BD45EB47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2F685BA3B817D927E5EC7B38BBE08A5BD45EB47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a6134303a3a2f34352d3435203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d3c:a40::/45

    Signature Algorithm: sha256WithRSAEncryption
         6e:d0:6e:2f:df:78:ab:22:db:57:da:76:20:23:02:75:b4:bf:
         29:52:0c:c4:ee:ea:bc:8c:e2:a3:4c:e4:4c:51:bd:5f:d9:fe:
         da:f0:a6:60:1b:f6:70:21:3d:18:5f:ef:e2:56:d1:a4:37:93:
         1a:a1:9a:7c:3a:bd:98:61:77:49:61:a9:42:d0:58:8d:dc:96:
         21:35:6b:11:5d:4f:05:45:7a:a0:d8:d0:dc:90:03:ce:23:46:
         55:09:e3:d8:88:a5:92:ad:ba:03:b0:4c:6d:90:7e:51:c8:44:
         b9:b1:c7:24:e1:86:a4:0a:1a:3b:db:60:31:d2:10:12:17:4e:
         5f:af:d9:e2:e4:ab:bf:92:55:b3:11:f2:59:a7:1e:0a:f2:9e:
         6b:90:5c:73:de:f5:fc:e7:65:2a:4c:29:05:c1:ff:63:0e:7d:
         db:5d:b3:0a:4e:06:bd:3b:57:c6:c9:bb:b1:bb:60:a1:c1:84:
         06:e2:91:c5:0b:1e:c3:d1:ed:35:91:46:98:05:3f:93:08:a7:
         c1:f4:fe:df:13:03:71:16:82:fd:26:c9:0b:d8:f4:db:47:bc:
         87:d5:b9:0d:ef:20:21:89:70:f7:16:fc:b2:54:9c:f7:31:e9:
         68:8c:ee:a9:db:00:36:eb:62:f2:91:e8:37:02:f7:c2:cf:ab:
         40:d8:3a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:47:51 2025 by rpki-client