Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hg1Mn8SJ2PxjG7cehRwwQkLsNe9cRFybtjUdoByiDv36/0/323830343a346638383a3a2f33322d3332203d3e20323638333332.roa
File:                     323830343a346638383a3a2f33322d3332203d3e20323638333332.roa (raw, json)
Hash identifier:          gWH49e6SAtnEGWHC9oZ4DRLaV+lxdA3mA91f49nt9xo=
Subject key identifier:   4A:64:73:4A:89:10:38:58:06:C9:6A:FE:81:CF:62:70:1D:5B:F2:1F
Certificate issuer:       /CN=7C19C22F731585C7724C9B00FC1C4A09184909FF
Certificate serial:       0AC3D65F8288B0525D9A9C2D60E17EA8A06AE276
Authority key identifier: 7C:19:C2:2F:73:15:85:C7:72:4C:9B:00:FC:1C:4A:09:18:49:09:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C19C22F731585C7724C9B00FC1C4A09184909FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hg1Mn8SJ2PxjG7cehRwwQkLsNe9cRFybtjUdoByiDv36/0/323830343a346638383a3a2f33322d3332203d3e20323638333332.roa
Signing time:             Mon 27 May 2024 18:46:12 +0000
ROA not before:           Mon 27 May 2024 18:41:12 +0000
ROA not after:            Mon 26 May 2025 18:46:12 +0000
asID:                     268332
IP address blocks:        2804:4f88::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:c3:d6:5f:82:88:b0:52:5d:9a:9c:2d:60:e1:7e:a8:a0:6a:e2:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C19C22F731585C7724C9B00FC1C4A09184909FF
        Validity
            Not Before: May 27 18:41:12 2024 GMT
            Not After : May 26 18:46:12 2025 GMT
        Subject: CN=4A64734A8910385806C96AFE81CF62701D5BF21F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:61:9e:13:b6:6d:6a:12:f5:a9:f1:87:0b:dd:
                    5d:b2:fc:4d:8b:0c:66:31:04:b1:56:21:f4:29:2e:
                    38:ed:64:ba:61:85:02:d5:fc:5f:fa:3f:b6:e7:28:
                    78:8c:ef:b7:34:d3:cd:dd:85:a7:0c:0c:70:9c:4c:
                    02:5b:9b:07:34:34:27:0e:2f:c9:7e:85:a2:bc:ef:
                    1b:d5:6d:54:a5:76:0e:f0:57:dd:42:a9:d3:53:15:
                    7a:20:d7:63:f2:79:5c:f7:99:19:03:29:f4:4a:a0:
                    b2:f0:72:1a:b0:c4:9f:bb:d8:14:f0:1f:12:f1:c8:
                    76:20:22:5e:42:f3:e3:ab:5d:a4:57:f6:86:50:34:
                    42:d5:10:68:89:bc:f4:52:36:90:0a:7a:7b:91:cc:
                    ee:30:e1:0f:41:af:ce:85:bb:4a:c0:26:e8:d4:fa:
                    35:de:93:a3:d4:4c:6b:af:19:ec:8a:4b:98:ca:ff:
                    70:ec:cf:d1:94:61:65:47:df:82:3a:6a:69:42:a4:
                    eb:77:96:e6:af:63:09:be:b9:26:40:55:4b:be:e1:
                    ee:c2:f9:d7:d5:90:b3:fd:59:97:65:72:f4:95:b7:
                    66:71:bf:95:b8:b1:ef:d7:95:9f:5b:3e:e1:ac:32:
                    97:c6:43:41:3d:98:2f:6f:9c:1e:44:dd:1c:41:be:
                    9f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:64:73:4A:89:10:38:58:06:C9:6A:FE:81:CF:62:70:1D:5B:F2:1F
            X509v3 Authority Key Identifier:
                keyid:7C:19:C2:2F:73:15:85:C7:72:4C:9B:00:FC:1C:4A:09:18:49:09:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hg1Mn8SJ2PxjG7cehRwwQkLsNe9cRFybtjUdoByiDv36/0/7C19C22F731585C7724C9B00FC1C4A09184909FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C19C22F731585C7724C9B00FC1C4A09184909FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hg1Mn8SJ2PxjG7cehRwwQkLsNe9cRFybtjUdoByiDv36/0/323830343a346638383a3a2f33322d3332203d3e20323638333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f88::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:b4:43:da:4d:d6:61:b2:2d:8d:43:85:56:bf:e6:ed:cf:bd:
         60:03:e7:2b:b2:61:fe:a9:1a:6b:8b:8d:59:3e:6b:97:5f:6a:
         3c:76:32:0f:78:3e:54:eb:f0:43:23:38:a1:53:d6:51:73:44:
         c1:36:58:1f:98:bc:04:e0:51:c6:1f:1a:4b:de:13:ee:46:51:
         0c:df:15:76:41:c7:69:ff:b6:c5:54:4c:10:3c:3b:15:16:f1:
         33:09:cf:2b:43:2c:31:ea:d3:1b:81:41:8d:cb:7e:7f:3d:cd:
         91:5e:ed:cc:cc:b2:e8:c8:ef:f3:6d:52:a9:9c:24:b2:d0:4d:
         29:ee:b1:15:b4:15:30:c2:89:68:d8:08:31:d4:17:aa:53:f4:
         5f:c2:2d:88:bb:d9:38:56:5e:98:b4:82:bf:d5:a1:88:1e:00:
         e7:b5:ec:59:6a:cf:33:23:81:bb:f3:10:ca:f0:1e:54:1e:3b:
         9c:a1:1a:54:d3:ee:27:7f:ac:13:66:ab:dd:6e:5b:23:c0:e5:
         a4:82:2e:e2:07:ff:f0:e3:ae:7a:5b:3e:aa:23:02:b8:83:d6:
         4b:15:79:36:c2:98:6f:26:6a:af:55:b6:61:c8:41:ae:48:75:
         1b:46:d9:01:66:79:f1:d5:6a:7f:58:e6:0a:b6:d2:77:d1:52:
         80:b3:ac:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 02:36:32 2025 by rpki-client