Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/323830343a346165343a3232303a3a2f34352d3435203d3e20323637323730.roa
File:                     323830343a346165343a3232303a3a2f34352d3435203d3e20323637323730.roa (raw, json)
Hash identifier:          Bfy6TQ8NntGqSBwR/af4An/l7gBU3buvPabmzQejtBU=
Subject key identifier:   E6:E6:93:A4:5C:12:54:77:3F:9A:A6:85:13:57:C5:9B:0C:46:5D:9A
Certificate issuer:       /CN=81B32A0DFD35A761A0E4773BF209978F18CBA8F9
Certificate serial:       7F7F23EF261A4818768BA8A0553A70BA5AC0E2CD
Authority key identifier: 81:B3:2A:0D:FD:35:A7:61:A0:E4:77:3B:F2:09:97:8F:18:CB:A8:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81B32A0DFD35A761A0E4773BF209978F18CBA8F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/323830343a346165343a3232303a3a2f34352d3435203d3e20323637323730.roa
Signing time:             Wed 16 Aug 2023 18:44:40 +0000
ROA not before:           Wed 16 Aug 2023 18:39:40 +0000
ROA not after:            Wed 14 Aug 2024 18:44:40 +0000
asID:                     267270
IP address blocks:        2804:4ae4:220::/45 maxlen: 45
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:7f:23:ef:26:1a:48:18:76:8b:a8:a0:55:3a:70:ba:5a:c0:e2:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81B32A0DFD35A761A0E4773BF209978F18CBA8F9
        Validity
            Not Before: Aug 16 18:39:40 2023 GMT
            Not After : Aug 14 18:44:40 2024 GMT
        Subject: CN=E6E693A45C1254773F9AA6851357C59B0C465D9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:69:36:66:5b:ba:b8:08:eb:d9:a9:e5:c4:b7:
                    d4:b6:d7:2e:4c:d5:a1:06:f2:5e:21:3b:f7:92:9b:
                    f6:7f:c4:b2:97:47:89:b7:7d:5f:63:cc:3e:aa:a5:
                    dd:c7:ae:23:ad:05:e9:aa:dc:af:0c:72:2d:b6:16:
                    7a:aa:bc:67:02:ff:be:6b:83:5a:58:bf:68:75:c2:
                    26:85:4b:56:90:11:47:34:04:7c:6d:fd:bf:dd:c2:
                    67:d8:20:75:68:de:14:6d:d0:16:c1:57:70:a8:4d:
                    77:22:1b:63:2e:1a:02:57:27:60:af:1e:82:d7:a0:
                    02:fc:2e:c7:08:85:44:30:d7:ed:4f:30:a6:47:15:
                    23:20:58:a5:31:15:bb:6b:0a:06:55:e0:9f:e7:d5:
                    5c:c3:03:bf:a3:4b:e9:9b:69:96:e1:f7:f1:41:98:
                    00:83:e5:20:04:51:d8:7a:bf:fe:e2:b1:6a:70:f8:
                    0f:00:ec:09:6f:67:35:27:db:8c:67:d0:eb:94:9c:
                    d7:63:95:6e:51:59:5d:39:b7:11:75:88:23:cb:69:
                    10:36:a9:a4:19:c5:4a:80:fe:6e:52:bb:31:b0:5c:
                    3b:79:a5:ca:d3:be:84:71:cb:c1:5c:b9:66:b8:4b:
                    cc:9a:7f:48:f0:3f:96:ea:30:b5:f8:67:a3:e3:d2:
                    70:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:E6:93:A4:5C:12:54:77:3F:9A:A6:85:13:57:C5:9B:0C:46:5D:9A
            X509v3 Authority Key Identifier:
                keyid:81:B3:2A:0D:FD:35:A7:61:A0:E4:77:3B:F2:09:97:8F:18:CB:A8:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/81B32A0DFD35A761A0E4773BF209978F18CBA8F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81B32A0DFD35A761A0E4773BF209978F18CBA8F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/323830343a346165343a3232303a3a2f34352d3435203d3e20323637323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4ae4:220::/45

    Signature Algorithm: sha256WithRSAEncryption
         86:23:cc:50:11:f4:bc:47:81:ce:38:10:56:c6:bf:9b:14:8f:
         db:3b:11:18:c2:f2:1d:92:9a:85:7f:8a:ec:d7:3b:22:60:af:
         ac:c4:2e:2e:5a:c1:a8:7b:d3:83:4f:dd:d5:7f:ea:ca:7f:29:
         cb:df:3c:0b:3e:f6:95:a0:4f:1c:54:ac:34:1e:cb:55:cc:58:
         c5:c2:42:e0:f1:3c:2b:3d:e4:e4:ea:f9:03:94:7a:f5:3d:83:
         34:e5:df:82:4a:47:bd:1a:e8:b7:48:d7:c7:2b:85:73:48:3f:
         06:f8:85:f4:1c:3b:e6:ae:dc:d4:99:13:44:f6:73:be:c2:21:
         ce:42:f5:5e:34:b1:0e:a0:f1:46:be:6b:09:10:91:74:e3:10:
         7e:5d:60:c3:e7:5c:37:f5:41:1c:7c:4b:74:05:e2:66:61:3d:
         bd:fd:c4:86:6a:15:3e:39:d8:34:6b:1c:bb:bc:c8:5a:f0:2a:
         d5:2a:30:7d:e1:3d:98:cf:2e:1e:60:4a:56:49:69:56:8c:76:
         da:16:22:2b:0c:27:3b:57:f2:24:13:45:e4:f5:0a:d3:a2:31:
         25:97:70:20:15:6c:60:a9:f4:d0:a9:3f:3c:c3:55:d0:aa:c9:
         08:e7:56:6a:91:38:cc:4a:74:f5:dc:d5:fb:7b:d8:45:75:60:
         99:23:da:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:06:22 2025 by rpki-client