Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/323830343a323463633a396130303a3a2f34302d3430203d3e20323634323432.roa
File:                     323830343a323463633a396130303a3a2f34302d3430203d3e20323634323432.roa (raw, json)
Hash identifier:          q0qjJb6LnFGALgJYXXwraol+ebmixjHgWtogl1QDr78=
Subject key identifier:   49:9E:BA:AD:CF:51:1B:D7:A3:C2:46:49:7C:71:02:12:62:8A:77:2D
Certificate issuer:       /CN=7667A81C6781430B80742CE2AD77D59D4D691FEE
Certificate serial:       0542C543D27B901D4F0ECEAB19FEF30BA926A58A
Authority key identifier: 76:67:A8:1C:67:81:43:0B:80:74:2C:E2:AD:77:D5:9D:4D:69:1F:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7667A81C6781430B80742CE2AD77D59D4D691FEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/323830343a323463633a396130303a3a2f34302d3430203d3e20323634323432.roa
Signing time:             Sun 23 Jul 2023 00:08:22 +0000
ROA not before:           Sun 23 Jul 2023 00:03:22 +0000
ROA not after:            Sun 21 Jul 2024 00:08:22 +0000
asID:                     264242
IP address blocks:        2804:24cc:9a00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:42:c5:43:d2:7b:90:1d:4f:0e:ce:ab:19:fe:f3:0b:a9:26:a5:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7667A81C6781430B80742CE2AD77D59D4D691FEE
        Validity
            Not Before: Jul 23 00:03:22 2023 GMT
            Not After : Jul 21 00:08:22 2024 GMT
        Subject: CN=499EBAADCF511BD7A3C246497C710212628A772D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:bd:4c:bc:c8:50:72:11:f0:fd:bb:2f:2f:41:
                    b2:a6:1f:df:d5:4d:3a:8b:6d:08:3c:13:a0:65:5d:
                    cc:bb:00:44:16:c6:cc:30:27:e3:85:ad:57:6d:3d:
                    1c:cc:f1:f4:5b:f9:38:76:10:cb:18:78:b5:d9:1d:
                    a7:1e:fa:6e:cb:f1:10:c5:c0:44:8b:75:18:f0:13:
                    03:66:4e:50:25:57:31:17:62:af:06:fc:0d:5b:3b:
                    c8:a9:77:c1:71:13:00:13:29:fe:7e:d4:b7:6e:b6:
                    56:3e:98:4e:91:5c:33:3b:4b:07:88:b4:f4:1e:9e:
                    85:71:34:19:a0:41:c4:25:38:a0:98:29:b7:d9:3b:
                    dd:9f:f9:98:4e:80:99:7b:72:98:f4:7e:2d:fc:65:
                    c9:1f:72:57:22:42:56:6b:c7:52:4e:d8:89:46:3c:
                    4d:f1:b3:66:dc:0f:72:21:17:7a:20:d2:e7:cb:7b:
                    ce:46:3b:94:27:dd:5d:e8:ed:8a:ee:35:7e:45:e7:
                    80:15:79:85:4c:94:05:cd:70:66:d2:05:55:47:f9:
                    20:a7:8c:37:a2:fa:c2:fd:81:78:ec:56:82:3a:cf:
                    f0:36:60:6d:47:85:f8:7e:61:e6:5c:c3:fe:28:65:
                    f2:38:cf:78:da:10:69:00:74:63:49:c1:52:60:e8:
                    b3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:9E:BA:AD:CF:51:1B:D7:A3:C2:46:49:7C:71:02:12:62:8A:77:2D
            X509v3 Authority Key Identifier:
                keyid:76:67:A8:1C:67:81:43:0B:80:74:2C:E2:AD:77:D5:9D:4D:69:1F:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/7667A81C6781430B80742CE2AD77D59D4D691FEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7667A81C6781430B80742CE2AD77D59D4D691FEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/323830343a323463633a396130303a3a2f34302d3430203d3e20323634323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24cc:9a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         4d:69:c9:08:3a:36:f7:bc:3d:ce:8b:67:20:6c:8b:8b:b4:f9:
         34:bc:06:10:aa:97:5e:f6:38:e5:18:a9:36:b0:9f:a5:ba:e4:
         29:9e:c3:36:5c:68:2e:be:08:88:68:35:4c:6a:ea:76:2a:83:
         34:17:d3:cf:31:77:40:58:22:ef:04:42:12:88:04:b2:bb:5a:
         f5:b1:c8:d0:4c:f8:5c:1e:58:e2:43:45:cc:ab:f2:4d:0a:d7:
         78:f1:9c:77:10:d4:66:11:e9:94:1a:ad:50:ce:bf:a2:7f:06:
         e3:36:63:2e:5c:fc:e4:f3:79:d9:27:77:0f:5d:52:d4:7d:a8:
         33:44:e9:78:11:5c:e2:d0:f4:02:f0:23:e2:0b:34:d7:c7:58:
         26:f2:a0:70:ea:be:1d:b6:cc:6c:d8:4f:ed:76:fa:c1:d3:c1:
         f8:8d:08:2c:55:6c:eb:e9:69:e2:c4:23:87:75:30:38:84:03:
         53:d2:da:29:24:16:0f:8b:69:de:65:6b:85:59:29:fc:f5:db:
         13:b9:30:b1:91:ca:56:51:10:b7:80:40:5f:67:09:12:33:3b:
         94:7b:58:fc:a0:a3:9f:80:12:72:59:4d:5c:b5:17:53:51:1e:
         d9:38:05:07:7b:3a:c5:63:85:11:58:71:3a:5d:4d:27:5e:93:
         3b:a6:e7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:11 2025 by rpki-client