Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GVoG4r2YrCLZo871SjKVUbMpctHV32ideKV4CiEGyTi1/0/323830343a366238303a3a2f33322d313238203d3e20323730343034.roa
File:                     323830343a366238303a3a2f33322d313238203d3e20323730343034.roa (raw, json)
Hash identifier:          J+nmdkpGnHCZEcBIBXc/L/WjPmxOp/u67PXx1EbMF2M=
Subject key identifier:   E9:D4:4B:57:8D:21:CC:4B:45:3D:52:D0:90:0E:90:DB:8E:96:68:B7
Certificate issuer:       /CN=9D0109BCB2508720AD7A2EA1B508AA247A2D7BE1
Certificate serial:       2B3E2E49CD341C857EFF03654657E05D57332F9A
Authority key identifier: 9D:01:09:BC:B2:50:87:20:AD:7A:2E:A1:B5:08:AA:24:7A:2D:7B:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D0109BCB2508720AD7A2EA1B508AA247A2D7BE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVoG4r2YrCLZo871SjKVUbMpctHV32ideKV4CiEGyTi1/0/323830343a366238303a3a2f33322d313238203d3e20323730343034.roa
Signing time:             Mon 30 Sep 2024 23:04:28 +0000
ROA not before:           Mon 30 Sep 2024 22:59:28 +0000
ROA not after:            Mon 29 Sep 2025 23:04:28 +0000
asID:                     270404
IP address blocks:        2804:6b80::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:3e:2e:49:cd:34:1c:85:7e:ff:03:65:46:57:e0:5d:57:33:2f:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D0109BCB2508720AD7A2EA1B508AA247A2D7BE1
        Validity
            Not Before: Sep 30 22:59:28 2024 GMT
            Not After : Sep 29 23:04:28 2025 GMT
        Subject: CN=E9D44B578D21CC4B453D52D0900E90DB8E9668B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7e:1a:63:4f:a2:ca:26:00:fe:5d:3f:3f:18:
                    d1:6d:c4:25:68:a9:6c:91:fd:51:27:d7:03:81:bb:
                    29:c2:e5:99:1a:93:94:7a:88:06:ec:fb:6e:fc:5c:
                    68:33:60:83:1d:5e:38:4d:63:b6:73:3b:33:d1:fa:
                    0f:63:10:18:78:9e:9e:ec:21:f0:1d:df:07:f9:0a:
                    f1:97:8d:0c:e3:c9:60:a9:4f:3d:85:f3:44:52:0a:
                    88:52:41:8f:58:40:e8:d1:31:af:da:97:5d:11:5a:
                    6d:17:dd:2d:18:38:63:9f:7f:01:e8:11:cc:f2:f3:
                    b0:ed:23:35:ca:4f:ae:ac:3e:b0:15:5d:52:9d:14:
                    42:64:2f:83:83:87:77:dc:0d:a3:1a:0e:92:ea:60:
                    56:31:fc:3d:8a:9c:cb:9c:c8:62:f1:62:46:2f:b6:
                    c9:46:99:fd:3b:81:7d:af:8d:25:9e:3a:55:5c:a6:
                    46:eb:cb:3c:8b:66:4d:0a:1d:80:c8:75:b8:2d:e5:
                    14:2a:93:11:c1:c0:1d:49:cb:76:e3:da:f4:01:98:
                    c1:09:03:ec:6a:90:78:2b:a7:ff:ee:9a:51:0a:bf:
                    23:42:76:24:8a:0b:8a:a2:f5:54:bf:be:23:ce:72:
                    e9:05:4f:0e:d7:93:06:84:38:8a:6c:be:29:08:92:
                    9d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D4:4B:57:8D:21:CC:4B:45:3D:52:D0:90:0E:90:DB:8E:96:68:B7
            X509v3 Authority Key Identifier:
                keyid:9D:01:09:BC:B2:50:87:20:AD:7A:2E:A1:B5:08:AA:24:7A:2D:7B:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVoG4r2YrCLZo871SjKVUbMpctHV32ideKV4CiEGyTi1/0/9D0109BCB2508720AD7A2EA1B508AA247A2D7BE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D0109BCB2508720AD7A2EA1B508AA247A2D7BE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVoG4r2YrCLZo871SjKVUbMpctHV32ideKV4CiEGyTi1/0/323830343a366238303a3a2f33322d313238203d3e20323730343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6b80::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:63:bc:15:1a:16:fd:a1:91:cd:65:04:59:d6:27:d5:51:0d:
         22:6f:a3:c0:7d:4d:89:87:98:5b:f6:44:81:96:23:f2:8d:94:
         6b:34:41:75:13:5b:85:d3:e7:2b:53:ed:28:42:01:09:99:d5:
         18:bc:e7:b1:04:17:c8:de:c8:65:51:b9:58:6a:b4:ff:d9:11:
         60:68:33:34:13:ca:26:2d:9a:da:88:6a:6d:80:73:00:5b:21:
         d1:bf:f4:4d:0b:bf:97:2f:e9:e7:9c:36:b2:88:d1:e3:47:26:
         fa:db:1c:22:e2:2b:f1:84:60:8a:5a:e8:8c:4a:57:2b:fa:b8:
         34:87:30:cc:fa:b8:0a:15:93:cc:40:7e:ff:58:75:1a:e3:8e:
         12:79:4f:e2:9a:18:10:41:cf:f4:4a:a9:f7:01:61:fb:1c:3b:
         1f:05:1e:e2:49:67:26:65:49:62:ba:02:aa:12:1b:04:f2:66:
         2a:86:58:8f:c8:36:f2:84:48:f7:be:4b:50:d1:10:69:21:1a:
         de:56:77:b3:d1:b5:e4:95:be:e6:66:89:cd:b4:75:d5:87:24:
         e7:26:88:26:5c:64:de:56:72:d5:91:b0:08:f5:9e:56:a8:f8:
         9b:c5:0d:06:9c:73:da:5d:13:b6:a6:2a:4b:f3:19:8f:2a:0a:
         18:7f:84:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 08:03:24 2025 by rpki-client