Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/323830343a346165343a3233303a3a2f34352d3435203d3e20323637323730.roa
File:                     323830343a346165343a3233303a3a2f34352d3435203d3e20323637323730.roa (raw, json)
Hash identifier:          RktODXQTD5yNunX1mXZEcfRxxK0hD89pZa4mx8VIZl0=
Subject key identifier:   86:8E:26:68:8D:4A:C5:68:5D:7A:7A:79:00:87:C8:AE:F1:77:93:C7
Certificate issuer:       /CN=81B32A0DFD35A761A0E4773BF209978F18CBA8F9
Certificate serial:       68BC7D988066D44C0BB2F69876EEF99CBEFE4DF2
Authority key identifier: 81:B3:2A:0D:FD:35:A7:61:A0:E4:77:3B:F2:09:97:8F:18:CB:A8:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81B32A0DFD35A761A0E4773BF209978F18CBA8F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/323830343a346165343a3233303a3a2f34352d3435203d3e20323637323730.roa
Signing time:             Wed 16 Aug 2023 18:44:38 +0000
ROA not before:           Wed 16 Aug 2023 18:39:38 +0000
ROA not after:            Wed 14 Aug 2024 18:44:38 +0000
asID:                     267270
IP address blocks:        2804:4ae4:230::/45 maxlen: 45
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:bc:7d:98:80:66:d4:4c:0b:b2:f6:98:76:ee:f9:9c:be:fe:4d:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81B32A0DFD35A761A0E4773BF209978F18CBA8F9
        Validity
            Not Before: Aug 16 18:39:38 2023 GMT
            Not After : Aug 14 18:44:38 2024 GMT
        Subject: CN=868E26688D4AC5685D7A7A790087C8AEF17793C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:91:e1:98:f7:cb:01:8f:ed:e0:14:6b:fd:89:
                    78:31:12:ff:42:ee:53:b8:c8:1e:0d:db:db:01:da:
                    76:3d:ad:36:8e:72:80:cc:61:85:a5:46:ab:db:9b:
                    ad:38:62:09:71:7d:95:b6:1f:d6:6f:77:36:8f:40:
                    61:89:8a:f3:32:bd:ff:5b:19:a4:4f:54:68:00:fd:
                    f6:f8:8a:c7:f2:c5:2e:15:91:5f:72:64:c6:6c:db:
                    ee:c2:76:b2:be:1b:bb:cc:0c:da:75:74:ba:1d:8f:
                    f4:60:4a:20:e9:06:73:d4:4f:e3:5a:51:f8:ef:1a:
                    68:92:95:d9:7f:01:64:bf:30:67:b3:9e:8a:db:90:
                    ba:07:a1:25:8b:dd:fa:49:80:24:e5:ce:7d:90:f8:
                    44:57:ce:7e:49:51:7a:d2:e3:a0:10:7f:43:b8:ce:
                    e5:0a:37:22:24:58:64:06:0d:39:fc:04:d9:48:a7:
                    81:d6:88:c3:32:ed:34:51:8f:26:28:88:b3:ce:e5:
                    36:42:70:f7:93:87:2c:a3:7d:d0:5b:81:65:21:bc:
                    2b:39:6a:3f:2c:ba:67:4e:43:c1:c1:6c:dd:cd:b5:
                    46:05:d6:22:5f:b5:93:54:0b:e3:55:0d:65:7c:9c:
                    6a:18:11:72:03:cd:9e:e2:16:64:f8:7a:e8:51:73:
                    ff:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:8E:26:68:8D:4A:C5:68:5D:7A:7A:79:00:87:C8:AE:F1:77:93:C7
            X509v3 Authority Key Identifier:
                keyid:81:B3:2A:0D:FD:35:A7:61:A0:E4:77:3B:F2:09:97:8F:18:CB:A8:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/81B32A0DFD35A761A0E4773BF209978F18CBA8F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81B32A0DFD35A761A0E4773BF209978F18CBA8F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/323830343a346165343a3233303a3a2f34352d3435203d3e20323637323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4ae4:230::/45

    Signature Algorithm: sha256WithRSAEncryption
         89:c9:27:73:a5:df:5c:4f:b0:93:16:36:5b:8b:75:b1:5b:54:
         e7:97:89:9b:7f:f9:b1:79:6c:07:71:68:c4:bc:72:ce:4a:dd:
         72:71:b1:dd:d2:38:5f:2f:2f:86:b6:a1:3a:60:35:94:e0:ce:
         7e:fd:d7:2c:22:7a:5f:bb:6d:5f:dd:9e:e2:12:32:df:66:97:
         19:34:87:77:05:a9:5c:93:cd:da:46:ad:fa:ce:7b:ba:f1:84:
         3c:07:9e:6d:85:41:9c:02:0d:6b:5d:42:03:74:c9:35:a2:83:
         f6:d9:ea:fc:ae:0a:9d:a0:0a:ee:d1:41:12:57:ed:e6:d7:3a:
         9b:a6:18:1f:33:26:71:78:08:79:00:e7:10:22:5b:80:65:2e:
         84:11:5e:c9:b8:5a:cc:60:de:cc:29:5f:89:be:6a:38:1d:6a:
         b4:d0:c8:b3:ec:e2:c5:e1:ff:c9:06:3a:95:c5:39:a7:1f:fc:
         3c:12:e9:fa:2b:0f:ec:c4:29:2e:37:d1:1d:b9:be:0c:d1:b2:
         72:19:bc:96:1a:69:41:ea:d8:15:25:0c:25:d9:9b:e8:b6:f4:
         19:9a:94:0d:16:c7:88:d0:41:22:f5:16:11:c5:6d:b1:f9:57:
         4a:77:82:9e:74:96:a1:d1:b1:1e:ac:8c:a0:8d:0d:16:09:7b:
         97:6a:01:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:20:45 2025 by rpki-client