Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/36kVjZs1trcbSWpZ7ayEt1ZgCiJxKbAJhSWX8ZQ2vYpi/0/323830343a356331633a3a2f33322d3335203d3e20323638383838.roa
File:                     323830343a356331633a3a2f33322d3335203d3e20323638383838.roa (raw, json)
Hash identifier:          72h4sG97jS++bJ18Gxs+6NM2I9wg/h1ftjAvgUk0g8I=
Subject key identifier:   6A:27:7E:88:48:09:30:B8:E0:2D:B6:8F:C5:3D:08:1D:7A:8E:0F:8E
Certificate issuer:       /CN=4B3FAAE01655630B846E5A9F1FAFC437948428B5
Certificate serial:       45D3C4D5013B782FBB30A0276D3D82B4E353E520
Authority key identifier: 4B:3F:AA:E0:16:55:63:0B:84:6E:5A:9F:1F:AF:C4:37:94:84:28:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3FAAE01655630B846E5A9F1FAFC437948428B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/36kVjZs1trcbSWpZ7ayEt1ZgCiJxKbAJhSWX8ZQ2vYpi/0/323830343a356331633a3a2f33322d3335203d3e20323638383838.roa
Signing time:             Fri 31 Jan 2025 15:54:52 +0000
ROA not before:           Fri 31 Jan 2025 15:49:52 +0000
ROA not after:            Fri 30 Jan 2026 15:54:52 +0000
asID:                     268888
IP address blocks:        2804:5c1c::/32 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:d3:c4:d5:01:3b:78:2f:bb:30:a0:27:6d:3d:82:b4:e3:53:e5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B3FAAE01655630B846E5A9F1FAFC437948428B5
        Validity
            Not Before: Jan 31 15:49:52 2025 GMT
            Not After : Jan 30 15:54:52 2026 GMT
        Subject: CN=6A277E88480930B8E02DB68FC53D081D7A8E0F8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0d:80:16:6b:45:1b:c5:56:4d:0d:d8:b4:e8:
                    30:61:de:2b:05:10:24:a1:77:f7:4c:85:a3:96:47:
                    21:06:63:92:d2:48:b3:ef:3c:aa:21:82:fd:19:94:
                    03:f1:2f:89:9b:4e:99:87:58:3b:cb:e6:a1:b8:dc:
                    26:a0:a0:c2:8e:a8:cc:2f:91:8d:98:4b:92:8e:4b:
                    23:79:ca:18:0b:6d:c8:9d:97:65:69:c3:45:e0:56:
                    97:7b:1a:96:32:37:1b:70:83:49:6c:30:ed:b9:41:
                    69:ca:47:4e:0a:96:ed:84:8f:7a:4b:c8:b6:55:c4:
                    a0:87:7f:94:46:f3:6c:d8:39:fc:b1:12:53:0f:1d:
                    17:29:67:71:12:e9:42:bd:a1:0f:fd:4a:6b:30:55:
                    e7:68:bd:72:1a:8f:5e:b9:75:77:44:15:7c:34:f9:
                    53:dc:bc:57:ac:08:5c:51:a1:27:30:4e:ee:f4:6d:
                    15:2c:0a:e0:7e:22:c2:b3:f3:d7:f6:ba:e8:20:cc:
                    06:82:8f:2b:73:50:b6:6c:33:f9:0a:7b:a9:4a:9f:
                    fc:50:c7:8a:7e:8d:0a:14:e4:28:ab:c3:96:76:ac:
                    58:ef:b0:6d:01:ce:f9:ea:40:ca:1b:d5:03:28:a8:
                    f0:de:d6:d9:d9:ac:fe:47:c2:65:f7:f2:5d:d9:3c:
                    8f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:27:7E:88:48:09:30:B8:E0:2D:B6:8F:C5:3D:08:1D:7A:8E:0F:8E
            X509v3 Authority Key Identifier:
                keyid:4B:3F:AA:E0:16:55:63:0B:84:6E:5A:9F:1F:AF:C4:37:94:84:28:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/36kVjZs1trcbSWpZ7ayEt1ZgCiJxKbAJhSWX8ZQ2vYpi/0/4B3FAAE01655630B846E5A9F1FAFC437948428B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3FAAE01655630B846E5A9F1FAFC437948428B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/36kVjZs1trcbSWpZ7ayEt1ZgCiJxKbAJhSWX8ZQ2vYpi/0/323830343a356331633a3a2f33322d3335203d3e20323638383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5c1c::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:d0:c9:eb:2a:0e:fd:cb:52:9e:5b:50:6e:bc:be:42:14:c4:
         89:d7:41:3c:b6:5e:79:bb:d8:9d:d0:4f:d1:a5:e0:85:89:2e:
         60:87:56:8e:5e:95:ca:b0:8b:6d:0f:70:b0:57:c8:34:71:18:
         1e:66:a7:b7:66:ef:b7:05:ab:c7:e6:55:cf:c6:dc:1e:ce:0d:
         fb:16:85:20:30:9c:25:2c:95:4c:87:7c:fc:73:a9:11:19:ce:
         75:29:60:78:55:d3:29:04:42:f7:cf:66:05:3a:d8:52:c3:57:
         91:62:52:0a:42:10:31:c4:93:00:e4:24:44:45:6a:6e:ee:42:
         ba:13:2c:1e:00:50:83:ec:4f:e1:c8:57:ba:05:4e:af:1f:17:
         f5:7d:5b:c0:1a:7f:0f:9e:f6:6d:a7:27:12:d6:2d:1f:31:46:
         9e:e0:43:95:8b:f2:78:f3:68:c6:31:64:8c:7d:a1:de:3d:36:
         2a:70:1d:12:36:47:e8:49:a6:3f:e1:fc:4b:72:c5:d5:a5:e2:
         e3:ad:79:45:b4:5a:1e:ad:5d:56:1a:e5:27:86:b4:1f:26:f7:
         3a:0d:d6:98:77:00:46:ff:41:93:98:35:70:60:07:6a:23:11:
         91:ce:10:e8:b0:64:92:a1:c7:ed:68:d3:21:78:86:f9:58:61:
         9d:a3:0e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:51:12 2025 by rpki-client