Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/1/323830343a333933633a343030303a3a2f3334203d3e20323636303230.roa
File:                     323830343a333933633a343030303a3a2f3334203d3e20323636303230.roa (raw, json)
Hash identifier:          odM8FQiy44+LSCkszcDQHhL27CqT7Vr+h/Qe3FwPebA=
Subject key identifier:   8E:B6:7C:B5:21:60:2B:40:20:BF:A1:8A:91:17:57:E4:B4:41:98:E8
Certificate issuer:       /CN=5149D310606046FDF83A78E8E9D89374FD1D0EF3
Certificate serial:       64AAFB2A6E460BED57BACD25C456EA5309FE7BF5
Authority key identifier: 51:49:D3:10:60:60:46:FD:F8:3A:78:E8:E9:D8:93:74:FD:1D:0E:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5149D310606046FDF83A78E8E9D89374FD1D0EF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/1/323830343a333933633a343030303a3a2f3334203d3e20323636303230.roa
Signing time:             Wed 03 Apr 2024 19:00:03 +0000
ROA not before:           Wed 03 Apr 2024 18:55:03 +0000
ROA not after:            Thu 03 Apr 2025 19:00:03 +0000
asID:                     266020
IP address blocks:        2804:393c:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:aa:fb:2a:6e:46:0b:ed:57:ba:cd:25:c4:56:ea:53:09:fe:7b:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5149D310606046FDF83A78E8E9D89374FD1D0EF3
        Validity
            Not Before: Apr  3 18:55:03 2024 GMT
            Not After : Apr  3 19:00:03 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:17:32:70:cd:c1:8b:78:57:78:ab:4e:f2:84:
                    92:f9:3f:0c:3e:f9:46:b7:e8:50:79:a3:0c:09:1d:
                    87:c3:c8:8a:ac:02:7b:97:a1:07:d8:a4:33:66:f6:
                    9a:8e:3f:ec:73:4b:50:dd:29:e4:03:b8:69:87:de:
                    55:1a:26:c6:a2:99:ad:cc:18:bb:38:a7:03:ee:b7:
                    cb:68:9f:f3:e5:2b:90:f0:63:94:f6:9b:a1:3b:e8:
                    27:85:f1:fa:1b:2e:02:c6:fc:e3:7f:07:45:cf:4a:
                    61:77:ed:45:d5:00:29:20:03:d9:0b:84:8d:e6:47:
                    5b:f7:e1:7e:80:61:97:3d:fa:ed:16:f7:c8:fc:e8:
                    87:6d:34:a9:b8:af:10:80:bb:cf:1a:55:d9:02:2c:
                    cc:cc:a7:ed:fd:c3:c6:b7:db:fb:83:4a:22:61:f7:
                    42:b5:e3:46:2d:fb:81:02:58:5b:4a:79:2b:68:c7:
                    79:97:0d:f9:76:18:fe:ca:c5:8a:73:4a:a9:83:4c:
                    68:09:df:85:29:61:38:b1:4d:c6:fa:ac:09:a5:e9:
                    4d:7b:e3:17:08:19:86:58:45:65:a6:ff:a8:79:1d:
                    9c:cb:5b:2e:80:23:98:c2:b1:27:28:e4:31:7b:92:
                    bf:e6:2f:d5:35:47:2b:2e:c8:da:dc:31:dc:e3:f6:
                    19:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B6:7C:B5:21:60:2B:40:20:BF:A1:8A:91:17:57:E4:B4:41:98:E8
            X509v3 Authority Key Identifier:
                keyid:51:49:D3:10:60:60:46:FD:F8:3A:78:E8:E9:D8:93:74:FD:1D:0E:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/1/5149D310606046FDF83A78E8E9D89374FD1D0EF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5149D310606046FDF83A78E8E9D89374FD1D0EF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/1/323830343a333933633a343030303a3a2f3334203d3e20323636303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:393c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         4b:f5:f4:94:b6:46:01:89:3f:60:fb:f4:6d:0a:e7:a3:f0:08:
         7a:fa:49:47:8a:d2:c2:ed:8c:aa:e8:eb:17:d4:7d:dd:75:07:
         c4:c6:fd:82:d4:c5:d3:0d:30:fe:7e:d2:4a:01:7b:39:1d:22:
         c7:76:eb:f6:9a:b6:7d:e1:9f:3e:08:bc:91:e0:07:0a:a9:cd:
         8f:01:03:bb:e4:4a:40:64:e7:59:39:06:94:f0:68:25:83:f8:
         5c:95:30:49:08:7d:25:43:d9:b8:89:5d:80:36:3c:1e:ed:e5:
         3a:99:be:87:6b:c4:60:d0:73:0c:d2:a0:d6:f2:22:df:b0:cf:
         7a:f2:a1:a3:2f:02:7e:1f:b2:ef:57:00:c0:e2:14:b4:3d:21:
         84:26:0e:53:61:40:34:89:a8:09:82:87:6a:d5:d9:68:22:a7:
         84:07:22:b3:3e:9e:04:97:d0:be:8d:22:3c:6c:17:4f:9a:82:
         44:b5:95:9d:4a:56:f4:a5:be:42:b2:71:56:67:5b:44:d7:b9:
         6e:96:7b:4a:5a:89:a4:36:a2:94:22:76:89:4c:2e:68:5f:6b:
         fc:3e:3d:32:4a:e5:1c:0b:cd:bb:c1:da:e2:a7:2a:04:01:f4:
         64:7b:fb:b0:e6:fb:24:ec:7d:c0:7f:4e:bf:b3:13:6e:58:11:
         d7:f9:59:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 05:53:03 2025 by rpki-client