Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/1/323830343a363462383a633030303a3a2f33342d3334203d3e20323639343434.roa
File:                     323830343a363462383a633030303a3a2f33342d3334203d3e20323639343434.roa (raw, json)
Hash identifier:          L6IWlhUD1G0b0pxo4grzhvQy53Cz+gs+akw5GfP1MEo=
Subject key identifier:   99:F7:EA:54:1C:ED:C0:63:A4:87:EC:37:4E:3C:6D:4C:2D:27:AF:AD
Certificate issuer:       /CN=93E9F7EA4AE4449B26A75D2A43E883E46AA5AA8E
Certificate serial:       63B27BBB2BAA3EF1866AD2CBACB3681E41F2D283
Authority key identifier: 93:E9:F7:EA:4A:E4:44:9B:26:A7:5D:2A:43:E8:83:E4:6A:A5:AA:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93E9F7EA4AE4449B26A75D2A43E883E46AA5AA8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/1/323830343a363462383a633030303a3a2f33342d3334203d3e20323639343434.roa
Signing time:             Wed 20 Dec 2023 17:25:54 +0000
ROA not before:           Wed 20 Dec 2023 17:20:54 +0000
ROA not after:            Wed 18 Dec 2024 17:25:54 +0000
asID:                     269444
IP address blocks:        2804:64b8:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:b2:7b:bb:2b:aa:3e:f1:86:6a:d2:cb:ac:b3:68:1e:41:f2:d2:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93E9F7EA4AE4449B26A75D2A43E883E46AA5AA8E
        Validity
            Not Before: Dec 20 17:20:54 2023 GMT
            Not After : Dec 18 17:25:54 2024 GMT
        Subject: CN=99F7EA541CEDC063A487EC374E3C6D4C2D27AFAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7c:45:35:26:13:13:c8:2a:9f:2a:f0:09:1f:
                    7c:52:28:d5:65:b7:b9:f9:63:c6:c7:02:ff:a6:65:
                    3a:eb:d6:6e:a4:a8:42:f9:21:c2:d7:c7:22:8d:b1:
                    41:ac:d0:75:37:17:e8:d3:62:22:29:3b:27:c0:91:
                    78:db:b1:9c:47:79:92:78:10:30:13:be:31:1c:62:
                    8c:74:b8:19:80:e5:49:d0:63:f7:81:bd:96:b3:7b:
                    27:37:80:22:e2:df:36:10:03:b4:74:22:f5:f7:b3:
                    31:cd:d7:1c:b5:f9:2a:3a:08:ac:1a:df:b2:0b:75:
                    8d:c4:23:d0:5e:0c:96:50:d5:65:d1:3c:7e:f4:0c:
                    42:e3:7d:00:7c:fc:8c:d8:0a:3b:af:10:df:93:3e:
                    31:ea:c7:b9:d3:95:43:8a:a7:5e:fc:75:a6:af:3d:
                    8f:5a:5c:e2:6d:bf:5c:b1:ba:d9:c8:55:29:3e:e1:
                    d3:cb:4a:8c:61:cf:30:f6:4a:4e:aa:d9:c4:48:e6:
                    82:10:4e:bc:31:97:c2:0c:fb:d6:83:a6:87:6d:35:
                    37:b4:9b:3b:59:9d:c5:d8:d6:e2:3b:16:c3:46:a9:
                    8f:9a:05:d2:c6:b8:07:3d:fa:29:eb:38:6f:db:b0:
                    07:d8:88:08:9c:0f:58:a0:02:f1:47:ce:95:b5:36:
                    32:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F7:EA:54:1C:ED:C0:63:A4:87:EC:37:4E:3C:6D:4C:2D:27:AF:AD
            X509v3 Authority Key Identifier:
                keyid:93:E9:F7:EA:4A:E4:44:9B:26:A7:5D:2A:43:E8:83:E4:6A:A5:AA:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/1/93E9F7EA4AE4449B26A75D2A43E883E46AA5AA8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93E9F7EA4AE4449B26A75D2A43E883E46AA5AA8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/1/323830343a363462383a633030303a3a2f33342d3334203d3e20323639343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:64b8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         0a:52:68:f4:70:5f:d8:f7:f2:82:0e:ce:90:f0:c6:bb:a2:59:
         4a:72:b0:03:e8:c8:72:ab:e6:4b:d9:38:02:40:b6:57:19:23:
         7c:86:38:3d:59:66:f0:df:c6:d7:22:55:83:42:7c:c4:34:d4:
         d9:5f:b0:1f:ef:7f:6f:ff:a3:f1:0c:52:cc:98:97:15:0b:a5:
         41:ea:0b:a7:a7:f5:1e:f2:4a:2e:b9:2d:fb:0e:e4:f8:4e:1f:
         01:16:34:71:86:ac:a8:09:91:e0:5e:81:a9:fe:f8:7d:11:e5:
         e5:f5:2a:32:28:64:6d:bc:03:3d:81:10:15:5d:fc:9a:e3:57:
         a8:82:29:22:8f:80:d8:16:95:d8:ad:5b:3d:67:10:0a:a6:0d:
         4f:8d:fd:c3:a1:1d:87:8b:2d:77:50:ae:71:18:96:2c:ce:3c:
         79:05:5d:9b:12:d4:80:bd:dc:f1:4d:e8:d8:85:a9:18:58:82:
         5e:9f:3a:77:24:6b:c8:67:c2:85:ee:be:56:19:26:54:f7:20:
         0b:6d:e5:6e:0f:53:65:cb:77:5c:68:7f:59:98:e7:aa:ee:00:
         d2:92:7e:36:3c:d5:33:91:91:0d:32:ca:98:11:40:3f:25:f0:
         b0:b0:c5:62:b8:32:74:62:75:36:64:59:48:bc:7d:1a:49:c1:
         0e:cb:ba:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 00:29:04 2025 by rpki-client