Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/323830343a313064633a3a2f33332d3333203d3e20323633363532.roa
File:                     323830343a313064633a3a2f33332d3333203d3e20323633363532.roa (raw, json)
Hash identifier:          LWH8sPmZetHV1EGFSbN5IEBLF41k3dmy62qNe6KRQog=
Subject key identifier:   90:7C:7C:BF:F6:41:F1:35:6D:36:BB:30:80:03:27:8F:66:96:17:8C
Certificate issuer:       /CN=96F3E99149446CE908CDA1678FD9180CD4020D16
Certificate serial:       7A782D76B89F71AEDF6CC34A76F07B8D439CE7E9
Authority key identifier: 96:F3:E9:91:49:44:6C:E9:08:CD:A1:67:8F:D9:18:0C:D4:02:0D:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96F3E99149446CE908CDA1678FD9180CD4020D16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/323830343a313064633a3a2f33332d3333203d3e20323633363532.roa
Signing time:             Tue 03 Dec 2024 18:42:36 +0000
ROA not before:           Tue 03 Dec 2024 18:37:36 +0000
ROA not after:            Tue 02 Dec 2025 18:42:36 +0000
asID:                     263652
IP address blocks:        2804:10dc::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:78:2d:76:b8:9f:71:ae:df:6c:c3:4a:76:f0:7b:8d:43:9c:e7:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F3E99149446CE908CDA1678FD9180CD4020D16
        Validity
            Not Before: Dec  3 18:37:36 2024 GMT
            Not After : Dec  2 18:42:36 2025 GMT
        Subject: CN=907C7CBFF641F1356D36BB308003278F6696178C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a2:21:36:98:91:4e:7f:d6:e8:1a:ae:13:8b:
                    85:96:9c:b1:93:67:23:84:18:28:ee:06:8d:b2:d5:
                    b7:c8:98:fd:23:4d:e9:2e:14:5d:83:bd:d7:76:9b:
                    9b:6a:fd:27:19:39:7f:97:ad:b4:65:ca:1f:c9:db:
                    9a:dd:b6:d8:01:bb:11:1f:01:62:6d:bb:95:44:0f:
                    23:4d:75:e9:93:9f:c4:76:b4:cb:5c:26:db:e8:ad:
                    0c:32:ce:13:c8:5f:62:ba:65:5d:25:54:81:19:c3:
                    b4:c7:1e:94:52:2c:05:2b:e0:b4:cb:07:7c:50:e6:
                    54:ed:b3:f3:78:ca:62:66:35:87:30:e3:14:d6:bd:
                    09:33:86:86:93:13:8c:b4:01:34:53:a9:39:fe:ef:
                    46:f8:58:a6:2c:93:55:28:c8:c5:e0:79:d1:37:0a:
                    fb:bc:85:c5:4c:06:7a:48:b9:4f:56:16:4a:4e:f5:
                    e4:81:98:c2:b0:ee:cd:91:77:ce:78:04:c6:ab:aa:
                    38:ae:1a:7b:cb:0c:29:f7:ba:bc:b9:b2:cf:64:92:
                    d7:80:21:c4:86:f2:33:78:ad:bd:f8:bc:92:3c:44:
                    83:dc:1e:01:34:a6:3b:e1:f4:05:70:ae:3f:8d:d8:
                    95:dd:d8:ee:39:43:43:90:5b:c0:85:b2:c6:d5:ba:
                    e5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:7C:7C:BF:F6:41:F1:35:6D:36:BB:30:80:03:27:8F:66:96:17:8C
            X509v3 Authority Key Identifier:
                keyid:96:F3:E9:91:49:44:6C:E9:08:CD:A1:67:8F:D9:18:0C:D4:02:0D:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/96F3E99149446CE908CDA1678FD9180CD4020D16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96F3E99149446CE908CDA1678FD9180CD4020D16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/323830343a313064633a3a2f33332d3333203d3e20323633363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:10dc::/33

    Signature Algorithm: sha256WithRSAEncryption
         05:90:ed:0c:02:dd:4c:f6:d2:48:72:af:ad:c7:8f:89:40:e1:
         2a:6f:e0:a2:16:ea:62:61:b0:82:f1:9a:72:d2:cc:34:e3:83:
         d4:45:5c:ac:45:02:7d:85:08:24:2a:98:61:34:2b:b9:f7:95:
         5f:46:e5:5c:7d:51:14:1f:e9:42:88:67:27:fd:16:fb:46:31:
         ea:c4:13:ac:36:60:2c:56:a9:7e:85:92:6d:09:8b:80:8a:2d:
         2f:83:55:f9:9e:6a:df:31:32:56:d6:c9:bb:e0:0d:ea:7c:6b:
         11:a0:1f:1a:51:b4:1a:b4:16:0c:2c:31:85:86:45:ce:b4:eb:
         0a:7c:8e:1b:99:d6:63:1b:83:e2:bc:35:f4:0a:bc:8d:d6:7b:
         dd:b8:0e:50:50:95:7b:d2:1f:4b:f2:95:7e:be:91:16:5b:f8:
         4a:d0:f3:b2:f9:4d:e9:16:6f:c5:e0:ff:c8:ef:34:4f:cf:e6:
         4e:e1:c3:18:19:de:50:36:20:40:00:3f:1b:6f:e1:f5:5f:2a:
         75:f9:e2:64:15:7e:c5:6a:f8:dd:c4:c6:57:85:d5:9f:24:63:
         2f:de:bb:38:39:f1:e8:2f:fa:53:e8:0d:de:e4:43:00:f8:69:
         80:21:32:ca:a1:1c:27:27:74:8f:52:01:6f:ee:6e:40:a5:af:
         b9:db:1f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 15:10:41 2025 by rpki-client