Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/323830343a323030343a3a2f33322d3438203d3e20323634343630.roa
File:                     323830343a323030343a3a2f33322d3438203d3e20323634343630.roa (raw, json)
Hash identifier:          oD5tAcM46t8wZkj5xrH4HyjU1d5rPCQHtGrJniOPfJI=
Subject key identifier:   7E:DB:7E:63:09:D7:3B:DA:10:1D:72:30:6F:CA:93:31:D4:75:F5:A4
Certificate issuer:       /CN=64DD83F92699F1FE6E92049BB0290C52C8B04D15
Certificate serial:       085AFC0F5F70FD154F28D969A267732E99204FFC
Authority key identifier: 64:DD:83:F9:26:99:F1:FE:6E:92:04:9B:B0:29:0C:52:C8:B0:4D:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64DD83F92699F1FE6E92049BB0290C52C8B04D15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/323830343a323030343a3a2f33322d3438203d3e20323634343630.roa
Signing time:             Mon 16 Dec 2024 17:10:45 +0000
ROA not before:           Mon 16 Dec 2024 17:05:45 +0000
ROA not after:            Mon 15 Dec 2025 17:10:45 +0000
asID:                     264460
IP address blocks:        2804:2004::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:5a:fc:0f:5f:70:fd:15:4f:28:d9:69:a2:67:73:2e:99:20:4f:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64DD83F92699F1FE6E92049BB0290C52C8B04D15
        Validity
            Not Before: Dec 16 17:05:45 2024 GMT
            Not After : Dec 15 17:10:45 2025 GMT
        Subject: CN=7EDB7E6309D73BDA101D72306FCA9331D475F5A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:88:d4:d1:88:fd:84:0c:49:a2:53:43:7b:cb:
                    d3:bc:e7:46:d3:a4:1c:a7:68:51:1b:11:ed:c0:41:
                    2b:a5:6a:1f:0c:9a:aa:0d:bc:60:43:af:35:64:0e:
                    40:80:a0:b9:94:d6:22:fb:3b:d8:d4:75:32:2f:b2:
                    8f:ef:d6:d7:d1:a3:44:8c:51:35:f6:b0:93:47:f8:
                    24:06:a2:1f:ea:e6:91:dd:ce:11:de:c4:33:7c:03:
                    10:36:ea:3c:eb:21:83:8a:84:1a:9f:4a:7e:ac:69:
                    4c:cb:c3:8a:ab:f2:c0:fb:6b:dc:b3:53:39:28:ee:
                    1c:d3:59:68:d3:c3:36:eb:bb:ee:03:b3:72:1e:e2:
                    dd:e5:0a:5e:75:a8:56:d4:9c:bb:ae:de:7d:e7:fd:
                    85:9a:2f:7e:02:58:b9:57:58:70:cd:72:93:38:de:
                    72:c4:30:c4:df:0d:d4:8c:52:7d:cc:8b:b5:49:fc:
                    b4:29:15:90:5f:75:8f:6b:c4:bf:c7:16:5c:a9:23:
                    14:75:33:da:fe:a5:ff:87:68:2e:0e:19:3e:48:fd:
                    f7:88:1e:8e:97:bf:39:1b:98:84:90:18:3f:77:fa:
                    a8:43:a7:ae:a2:99:2c:6b:9a:14:9a:0b:30:8e:6e:
                    dd:cc:42:52:f0:9d:7e:49:b1:9b:1a:52:c9:4c:ca:
                    33:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:DB:7E:63:09:D7:3B:DA:10:1D:72:30:6F:CA:93:31:D4:75:F5:A4
            X509v3 Authority Key Identifier:
                keyid:64:DD:83:F9:26:99:F1:FE:6E:92:04:9B:B0:29:0C:52:C8:B0:4D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/64DD83F92699F1FE6E92049BB0290C52C8B04D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64DD83F92699F1FE6E92049BB0290C52C8B04D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/323830343a323030343a3a2f33322d3438203d3e20323634343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2004::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:21:05:d1:46:1a:bb:13:fe:f3:2b:c0:4a:66:e4:b2:dc:43:
         f9:20:cc:93:57:45:05:29:ea:05:0d:c2:b5:41:78:33:3d:0c:
         f9:fe:90:fa:d0:04:71:8d:b5:ca:9c:eb:0d:f7:bc:d9:20:06:
         54:1f:53:d6:86:d1:63:8d:64:3a:98:10:40:ef:76:b2:df:75:
         1b:e1:d6:02:0e:ad:83:73:92:e8:2c:b2:2f:f6:90:b1:74:f4:
         3b:85:0a:b2:60:70:02:62:14:38:53:18:aa:b5:65:31:ce:a1:
         47:3b:dd:14:ea:3f:e4:aa:29:22:9d:d8:95:29:c2:67:0c:c3:
         b4:e0:99:28:bb:c8:ec:e0:d2:91:49:be:e8:19:dd:ed:9c:dc:
         0d:cd:5d:11:8d:e8:9f:ef:c5:b7:00:ba:59:17:aa:42:31:13:
         d3:98:d2:6b:38:6c:23:69:ac:48:29:cb:91:01:f3:68:f8:d9:
         f7:8d:89:72:30:1b:80:f9:92:05:f3:07:1f:01:42:f8:6e:92:
         5a:6c:5b:2b:8d:48:d4:f6:d3:df:d0:96:1c:b3:c1:e6:54:51:
         26:bc:3e:a8:17:d3:08:73:b5:22:e8:50:40:41:ae:cb:bd:13:
         12:7a:15:fa:2b:fd:9b:9f:3d:30:83:a5:ad:d5:a6:0e:16:4e:
         df:f2:4a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:22:47 2025 by rpki-client