Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2rRoWJwNQ526ciBqTAhCpgznHWwxFRixx1BJ5pn45kRb/0/323830343a333737633a3a2f33322d3438203d3e20323636343138.roa
File:                     323830343a333737633a3a2f33322d3438203d3e20323636343138.roa (raw, json)
Hash identifier:          VrPTnVpis6TakoOqPCakneYkaHqRIwicb1g6Jx4oQrk=
Subject key identifier:   1D:23:FA:2E:BA:9E:23:56:EC:CB:E4:62:1B:73:99:BB:09:90:6A:93
Certificate issuer:       /CN=194C6BCBEB71571D67E92F3EBF24D2D6C94B3853
Certificate serial:       7DA76236C0CA3A12C6422B8945C7396346D5A65A
Authority key identifier: 19:4C:6B:CB:EB:71:57:1D:67:E9:2F:3E:BF:24:D2:D6:C9:4B:38:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/194C6BCBEB71571D67E92F3EBF24D2D6C94B3853.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2rRoWJwNQ526ciBqTAhCpgznHWwxFRixx1BJ5pn45kRb/0/323830343a333737633a3a2f33322d3438203d3e20323636343138.roa
Signing time:             Mon 23 Dec 2024 15:43:38 +0000
ROA not before:           Mon 23 Dec 2024 15:38:38 +0000
ROA not after:            Mon 22 Dec 2025 15:43:38 +0000
asID:                     266418
IP address blocks:        2804:377c::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:a7:62:36:c0:ca:3a:12:c6:42:2b:89:45:c7:39:63:46:d5:a6:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194C6BCBEB71571D67E92F3EBF24D2D6C94B3853
        Validity
            Not Before: Dec 23 15:38:38 2024 GMT
            Not After : Dec 22 15:43:38 2025 GMT
        Subject: CN=1D23FA2EBA9E2356ECCBE4621B7399BB09906A93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6b:41:08:30:0e:8e:37:6c:31:f8:1d:c8:1e:
                    ef:44:68:21:29:12:ed:73:ba:eb:12:5c:a3:e6:ed:
                    4e:ff:c3:e6:15:fe:fb:61:b6:3e:7b:5e:30:31:c6:
                    7c:f3:6c:02:38:33:e2:07:9f:10:7c:17:eb:c2:a3:
                    f1:d1:bb:9c:2e:4e:97:cd:40:dc:34:ac:1b:1e:ce:
                    e3:d4:a5:37:ff:f1:52:d5:59:e1:54:c1:46:5e:56:
                    32:d1:3d:c6:68:93:4f:63:2a:0d:80:b3:47:ef:fd:
                    a2:d6:a5:f0:c0:4b:8b:4d:19:a6:c9:64:54:87:a4:
                    dc:ed:9c:30:3e:34:f2:ec:46:32:3e:28:9d:ca:3d:
                    86:d3:9d:95:45:ad:e0:cc:18:6f:68:ad:a6:44:fd:
                    05:4e:b8:cf:f7:d1:60:95:aa:02:b5:73:4b:44:ea:
                    fe:1f:30:25:00:7e:65:c1:68:18:1d:9f:28:26:1e:
                    13:b0:28:26:08:22:5c:0d:ff:8d:d2:4a:9f:d3:19:
                    e3:97:84:23:2f:20:75:2a:50:1b:2e:83:41:07:de:
                    d6:33:28:54:d1:96:34:82:be:08:63:00:9d:d7:a5:
                    da:2d:b4:75:59:99:9d:f6:1b:58:d4:fa:66:03:6b:
                    43:85:9f:17:44:60:da:1d:c1:7c:3a:16:b5:46:98:
                    25:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:23:FA:2E:BA:9E:23:56:EC:CB:E4:62:1B:73:99:BB:09:90:6A:93
            X509v3 Authority Key Identifier:
                keyid:19:4C:6B:CB:EB:71:57:1D:67:E9:2F:3E:BF:24:D2:D6:C9:4B:38:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2rRoWJwNQ526ciBqTAhCpgznHWwxFRixx1BJ5pn45kRb/0/194C6BCBEB71571D67E92F3EBF24D2D6C94B3853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/194C6BCBEB71571D67E92F3EBF24D2D6C94B3853.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2rRoWJwNQ526ciBqTAhCpgznHWwxFRixx1BJ5pn45kRb/0/323830343a333737633a3a2f33322d3438203d3e20323636343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:377c::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:92:3b:ce:cc:17:0b:23:3c:47:ca:07:82:27:52:52:48:6f:
         db:ff:20:b4:60:b4:4d:14:a6:2d:7c:c8:7a:23:43:3c:27:35:
         ef:4d:13:25:fe:cf:b1:ad:3f:4a:c7:c9:30:2d:39:bf:2d:78:
         20:65:a7:11:85:4a:e8:1a:41:21:20:b1:c9:1a:83:7e:84:69:
         41:f5:27:f3:db:a4:eb:ec:b9:63:fc:f6:29:8a:77:aa:65:ed:
         37:89:61:30:7b:4a:8b:38:ff:d9:23:d3:f8:5a:18:60:3e:78:
         38:af:99:43:4d:01:1b:25:54:8b:8d:b1:f3:3b:cc:e9:22:41:
         12:c9:3d:33:62:57:6d:76:ca:67:34:06:1b:2c:38:e5:95:1e:
         3f:18:b9:be:ea:c4:19:e1:40:f4:2f:57:33:24:5b:8f:d6:98:
         73:82:0d:5e:04:ca:73:0b:5d:10:23:b1:c2:5a:6c:57:bf:e2:
         62:3d:f3:c3:72:4d:b9:f5:7b:fb:64:90:0d:99:0b:b1:66:7b:
         76:bd:d6:2a:47:3a:01:51:1d:71:15:71:6c:5e:4d:d0:3a:ef:
         0e:ad:b7:cf:d2:90:f8:47:15:88:42:f9:85:4b:85:06:52:f4:
         5b:ca:11:f5:9d:8f:4a:90:4e:1d:38:2a:37:f8:45:38:15:c1:
         6b:29:d2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:40:33 2025 by rpki-client