Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a6161303a3a2f34352d3435203d3e20323637343230.roa
File:                     323830343a346433633a6161303a3a2f34352d3435203d3e20323637343230.roa (raw, json)
Hash identifier:          w+k8OJl2/G+vDBk6OwtsaR/7Cul7NkGgVarbJZqxpd8=
Subject key identifier:   A9:C8:16:60:B5:32:1B:EF:5D:93:28:0F:31:64:BC:C5:87:CD:4A:46
Certificate issuer:       /CN=356DB07CF8617314D1E724F86FE180F52E3D1945
Certificate serial:       7F89A0A4AFF4E486331907784B9B394828C7BCC1
Authority key identifier: 35:6D:B0:7C:F8:61:73:14:D1:E7:24:F8:6F:E1:80:F5:2E:3D:19:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/356DB07CF8617314D1E724F86FE180F52E3D1945.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a6161303a3a2f34352d3435203d3e20323637343230.roa
Signing time:             Tue 02 Aug 2022 19:10:59 +0000
ROA not before:           Tue 02 Aug 2022 19:05:59 +0000
ROA not after:            Tue 01 Aug 2023 19:10:59 +0000
asID:                     267420
IP address blocks:        2804:4d3c:aa0::/45 maxlen: 45
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:89:a0:a4:af:f4:e4:86:33:19:07:78:4b:9b:39:48:28:c7:bc:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=356DB07CF8617314D1E724F86FE180F52E3D1945
        Validity
            Not Before: Aug  2 19:05:59 2022 GMT
            Not After : Aug  1 19:10:59 2023 GMT
        Subject: CN=A9C81660B5321BEF5D93280F3164BCC587CD4A46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0f:28:30:b8:20:3f:2b:1e:8b:c9:8a:8d:72:
                    6c:9e:26:a0:79:b1:cd:9a:4b:c4:c0:3e:de:f3:51:
                    aa:86:54:f7:c7:93:b4:2d:fc:97:1b:b3:11:25:58:
                    78:52:5e:ef:24:81:3b:76:f5:64:5f:4f:42:32:ce:
                    93:ee:10:10:29:18:57:f5:51:be:ef:04:7b:91:8d:
                    2b:94:2b:4b:01:77:cf:ee:67:b2:a6:a1:80:14:08:
                    0b:19:32:d2:13:32:1a:26:2f:5e:ea:66:ac:61:bf:
                    be:b2:16:8a:89:76:b4:36:a3:21:f1:06:60:3e:94:
                    b6:8a:a2:64:7d:22:19:ab:5e:c1:56:2f:c4:d1:69:
                    3d:25:60:21:92:c4:cb:d4:f9:e7:34:b1:d6:7a:c7:
                    07:8d:7e:5e:6f:6b:94:d0:3d:b4:94:9d:8a:83:d9:
                    07:66:dd:94:e4:86:be:8c:77:d7:ab:1b:d6:45:9b:
                    fc:cc:b2:af:12:e9:17:5d:2c:b8:0a:95:54:5a:27:
                    c8:f8:e4:f0:55:11:18:18:fd:fe:c7:0e:c4:bc:89:
                    d2:26:c8:12:42:88:b4:fb:02:b0:9d:18:ca:a6:08:
                    3a:cb:97:b0:1a:03:13:51:cd:4a:62:32:a5:67:a7:
                    6f:94:16:92:1c:f0:2d:b7:1b:4c:1c:65:28:15:a5:
                    77:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C8:16:60:B5:32:1B:EF:5D:93:28:0F:31:64:BC:C5:87:CD:4A:46
            X509v3 Authority Key Identifier:
                keyid:35:6D:B0:7C:F8:61:73:14:D1:E7:24:F8:6F:E1:80:F5:2E:3D:19:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/356DB07CF8617314D1E724F86FE180F52E3D1945.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/356DB07CF8617314D1E724F86FE180F52E3D1945.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a6161303a3a2f34352d3435203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d3c:aa0::/45

    Signature Algorithm: sha256WithRSAEncryption
         21:38:44:d3:1b:3b:55:79:08:bf:cf:66:ae:c0:3f:0f:f8:9f:
         84:61:e2:8c:40:db:b2:d0:84:82:03:ed:e9:67:e5:17:c7:b6:
         5f:62:0c:70:f1:85:e9:dc:df:88:24:e6:82:d6:dc:37:78:22:
         e3:5a:4e:7c:86:f2:41:fd:84:98:af:c2:82:ad:58:15:16:15:
         c3:a6:f7:2d:90:23:45:00:67:a5:2c:9b:31:b8:2d:bd:90:1a:
         36:46:d7:9c:01:26:51:0e:a0:17:31:e7:f7:2e:db:bb:9c:66:
         b6:fe:3e:4a:6a:e6:47:7c:02:63:98:13:71:11:5e:78:08:67:
         21:90:64:61:e2:df:7a:4e:4a:90:0f:86:8e:29:b5:97:9a:25:
         a4:32:f7:28:3e:ad:d1:9a:a3:66:57:4e:aa:ed:25:12:79:26:
         8f:52:e9:1f:10:cf:37:dd:f4:4a:a3:4e:de:90:91:55:24:86:
         fb:9a:20:e7:b4:52:dd:f0:20:01:50:6c:f9:6f:f0:83:ea:0f:
         8f:13:d9:52:70:70:f1:e1:6d:e5:2f:62:ec:8f:54:ff:38:6b:
         d4:86:d8:d8:ec:e4:b5:fb:a7:ac:ef:be:6d:6b:b8:c4:3b:53:
         f9:02:c5:bd:06:00:b3:0d:83:bc:d0:74:92:a9:bc:07:b2:5e:
         8b:57:c5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:22:54 2025 by rpki-client