Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/323830343a353134633a3a2f33322d3332203d3e20323638343434.roa
File:                     323830343a353134633a3a2f33322d3332203d3e20323638343434.roa (raw, json)
Hash identifier:          2SJ7G0oHd5IgdRgblT9D6MkN14Ef9Lmio3AmjiJijNA=
Subject key identifier:   11:77:7A:17:09:97:19:77:EA:C5:84:F3:D2:41:2F:55:F9:9C:8C:1F
Certificate issuer:       /CN=AC5CA9D35BF56C0DC5B065F448B0585AD07F7F25
Certificate serial:       143F54A10158512BDDA669EB1DA6B3AE6F420B76
Authority key identifier: AC:5C:A9:D3:5B:F5:6C:0D:C5:B0:65:F4:48:B0:58:5A:D0:7F:7F:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC5CA9D35BF56C0DC5B065F448B0585AD07F7F25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/323830343a353134633a3a2f33322d3332203d3e20323638343434.roa
Signing time:             Mon 08 Jan 2024 16:45:42 +0000
ROA not before:           Mon 08 Jan 2024 16:40:42 +0000
ROA not after:            Mon 06 Jan 2025 16:45:42 +0000
asID:                     268444
IP address blocks:        2804:514c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:3f:54:a1:01:58:51:2b:dd:a6:69:eb:1d:a6:b3:ae:6f:42:0b:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC5CA9D35BF56C0DC5B065F448B0585AD07F7F25
        Validity
            Not Before: Jan  8 16:40:42 2024 GMT
            Not After : Jan  6 16:45:42 2025 GMT
        Subject: CN=11777A1709971977EAC584F3D2412F55F99C8C1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c2:37:bc:90:5c:73:31:7d:0c:25:ea:23:71:
                    63:41:6a:be:d6:70:49:f1:12:29:0a:a5:df:c7:0b:
                    28:c9:65:4a:8a:83:4b:5f:d8:29:c1:65:71:0b:9b:
                    b9:98:2f:18:ca:1f:46:a3:94:40:6b:13:ee:d0:d3:
                    57:30:8d:39:3e:18:e0:15:56:14:dc:dd:98:6d:68:
                    53:a2:a0:25:04:e1:99:70:46:5b:1d:8f:be:f4:41:
                    f1:c4:f3:7b:14:ed:3d:3e:97:25:d8:52:8c:d4:93:
                    9f:4c:b2:b4:1e:32:b7:76:ed:bd:da:19:68:38:d9:
                    86:5e:ae:d0:11:8f:0d:6c:9a:17:16:a0:e4:77:9a:
                    96:32:dc:99:f6:f0:56:a0:83:a5:61:a8:3d:08:0e:
                    7d:d2:7d:46:af:e4:ba:f5:25:3f:2a:27:e0:4a:8b:
                    40:ab:60:4f:ca:91:8c:f2:74:7b:9f:bd:8e:96:d2:
                    89:e0:49:3f:3b:8e:16:1e:c1:d9:05:91:74:cf:f6:
                    48:fa:b2:08:74:b5:a7:6c:d9:52:25:95:5b:49:c5:
                    e6:16:10:6e:99:44:58:9a:0e:6a:93:11:b9:69:00:
                    92:b7:54:8d:78:cf:fd:83:73:d9:ec:3a:3e:4b:11:
                    da:eb:85:d9:39:4d:77:51:83:04:fc:5c:d2:7a:26:
                    da:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:77:7A:17:09:97:19:77:EA:C5:84:F3:D2:41:2F:55:F9:9C:8C:1F
            X509v3 Authority Key Identifier:
                keyid:AC:5C:A9:D3:5B:F5:6C:0D:C5:B0:65:F4:48:B0:58:5A:D0:7F:7F:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/AC5CA9D35BF56C0DC5B065F448B0585AD07F7F25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC5CA9D35BF56C0DC5B065F448B0585AD07F7F25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/323830343a353134633a3a2f33322d3332203d3e20323638343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:514c::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:a4:1b:4b:2a:9e:c0:ce:ec:f3:7c:a2:7b:9a:26:00:39:c2:
         e6:a4:d5:2a:58:ea:1c:5a:8f:d4:8e:cf:19:5b:e9:0b:46:ee:
         5e:e5:de:3c:b5:6a:96:5e:a5:85:50:e7:22:d9:6d:44:1e:bd:
         e9:e3:3a:91:e4:aa:19:5f:cf:c1:da:0a:c4:96:27:77:ec:c9:
         69:65:4f:d8:af:c6:07:25:61:1a:a1:71:d6:00:12:ed:d0:9d:
         18:57:c5:cd:bc:1c:24:b3:b0:0e:3b:66:10:ac:0e:62:30:c8:
         c4:7d:f3:64:9d:0f:85:3c:f7:b8:d4:17:9e:a6:62:56:fa:ab:
         36:e3:d9:f2:73:47:d2:77:b6:4c:52:3f:e3:23:78:64:ba:c3:
         29:2c:0f:05:d9:41:8e:69:b9:78:fe:41:d0:08:62:8a:1f:51:
         fc:33:7b:43:2f:61:b3:29:3c:cb:0f:0a:f2:17:5b:30:54:53:
         75:74:5d:a9:bd:8e:7f:20:62:36:0d:e3:c3:32:41:3a:5a:68:
         25:d8:5f:f2:68:99:d4:a2:c0:d6:a8:eb:23:8b:7f:b9:1f:8e:
         19:51:23:31:4c:2c:20:16:c7:75:0a:e5:d8:32:ed:8f:c3:4c:
         45:64:f9:a1:32:b8:1e:e5:2d:46:9a:ca:44:c8:8a:96:6c:3b:
         03:8f:61:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:57:36 2025 by rpki-client