Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/323830343a323463633a396330303a3a2f34302d3430203d3e20323634323432.roa
File:                     323830343a323463633a396330303a3a2f34302d3430203d3e20323634323432.roa (raw, json)
Hash identifier:          gCpy8IkMG6fHnlWHqgWjVPpd3dhoyDlb+pQ7GxLMsqA=
Subject key identifier:   9A:5E:2D:A8:B8:1E:55:28:E3:25:1F:B4:5B:16:9B:0E:3A:C8:9E:E5
Certificate issuer:       /CN=7667A81C6781430B80742CE2AD77D59D4D691FEE
Certificate serial:       17B2FAFFC3872481E00899BB7BCF0C2FBB07898B
Authority key identifier: 76:67:A8:1C:67:81:43:0B:80:74:2C:E2:AD:77:D5:9D:4D:69:1F:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7667A81C6781430B80742CE2AD77D59D4D691FEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/323830343a323463633a396330303a3a2f34302d3430203d3e20323634323432.roa
Signing time:             Sat 22 Jul 2023 23:59:26 +0000
ROA not before:           Sat 22 Jul 2023 23:54:26 +0000
ROA not after:            Sat 20 Jul 2024 23:59:26 +0000
asID:                     264242
IP address blocks:        2804:24cc:9c00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:b2:fa:ff:c3:87:24:81:e0:08:99:bb:7b:cf:0c:2f:bb:07:89:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7667A81C6781430B80742CE2AD77D59D4D691FEE
        Validity
            Not Before: Jul 22 23:54:26 2023 GMT
            Not After : Jul 20 23:59:26 2024 GMT
        Subject: CN=9A5E2DA8B81E5528E3251FB45B169B0E3AC89EE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:73:b3:61:b1:4e:6e:da:dc:24:3b:0f:06:e1:
                    67:b8:43:24:9f:b7:17:cb:c8:68:d2:ca:89:e2:58:
                    b3:cc:d1:a2:8e:e6:b5:c5:dc:e5:ef:96:0c:87:c2:
                    15:2e:8b:0f:85:98:8c:ae:4e:b0:f9:39:56:e2:c4:
                    92:2c:6d:ca:3a:be:93:f7:7a:e3:99:f7:60:f9:ab:
                    17:6e:c1:f3:a3:52:84:d3:9a:e7:cd:75:56:46:b8:
                    d8:a3:7e:0b:7a:eb:29:49:6f:03:f7:82:eb:27:af:
                    e2:75:4a:2f:ae:36:b4:35:30:09:7a:f8:a1:5c:e8:
                    38:bb:53:52:f3:eb:dd:0b:a2:ac:30:40:b6:30:01:
                    bd:19:a7:f2:e6:db:3f:9a:cc:67:f1:03:25:a4:7f:
                    da:8d:ac:4f:9b:db:0e:75:d1:42:aa:80:91:06:c9:
                    db:3e:f8:a4:ed:02:c7:5b:13:9e:d4:7f:48:14:99:
                    a6:d3:45:86:42:ca:8f:31:5c:76:56:56:16:6c:dc:
                    25:58:e7:6a:8d:34:d3:76:77:c2:9d:d6:f9:fe:8f:
                    99:62:28:f6:17:d1:ae:0e:39:42:da:99:60:b8:d5:
                    05:f2:ab:21:6a:08:11:94:b4:fa:bf:ff:b0:2d:a3:
                    bd:13:ae:25:17:ad:75:4e:97:40:eb:09:c6:68:31:
                    b2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:5E:2D:A8:B8:1E:55:28:E3:25:1F:B4:5B:16:9B:0E:3A:C8:9E:E5
            X509v3 Authority Key Identifier:
                keyid:76:67:A8:1C:67:81:43:0B:80:74:2C:E2:AD:77:D5:9D:4D:69:1F:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/7667A81C6781430B80742CE2AD77D59D4D691FEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7667A81C6781430B80742CE2AD77D59D4D691FEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/323830343a323463633a396330303a3a2f34302d3430203d3e20323634323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24cc:9c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         8b:27:5d:7b:00:18:93:1d:6c:2a:0a:00:17:05:1a:0a:fb:75:
         0f:e3:01:8c:0a:1b:80:1a:70:94:02:06:a6:b3:2c:1b:f2:cf:
         80:23:44:43:7c:e0:cc:b6:27:56:e7:8d:6e:df:29:d7:e5:22:
         46:cb:a8:81:fe:87:87:12:6e:21:d4:14:73:0b:92:6e:f1:ca:
         36:fb:47:95:4d:0c:e4:04:20:11:89:03:b3:10:91:cd:94:36:
         ba:ff:3a:43:55:12:9c:9c:01:e4:51:cc:8d:b5:06:7f:17:20:
         a9:33:3d:9e:b7:51:06:78:c6:28:f3:25:f3:f5:81:d5:11:8d:
         06:33:5d:bf:40:7e:06:c2:fc:53:98:77:c3:22:bb:67:5d:ae:
         ef:c9:b7:de:44:9a:ea:cc:46:dc:98:34:c4:59:ff:c4:1b:4d:
         56:c9:67:c2:3b:18:61:ba:f9:01:90:6f:79:a5:4a:4b:6a:32:
         f8:1b:cd:90:82:ee:dd:1c:f3:93:72:8d:d8:fe:f1:5e:fc:8b:
         af:8b:37:49:6d:91:ff:d8:99:2f:29:59:6f:17:37:92:9b:3f:
         d5:8e:56:6d:7c:91:9b:4f:1d:0f:94:57:63:49:6a:b1:90:62:
         26:ed:3b:fa:de:7b:cb:1e:b7:45:96:b5:87:3a:b9:c5:17:50:
         0e:e1:c2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:01 2025 by rpki-client