Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a373730303a3a2f34312d3431203d3e203631353931.roa
File:                     323830343a323331633a373730303a3a2f34312d3431203d3e203631353931.roa (raw, json)
Hash identifier:          NF0fraKkDLrHyhB14Epht9TUU7ara086q3G074mfyxk=
Subject key identifier:   A3:E4:0E:5B:56:82:B8:22:70:EF:47:5E:D5:82:38:A5:13:44:43:C8
Certificate issuer:       /CN=14490FD591932776F2F5F6CFB3C5431550A04F62
Certificate serial:       5E92FED0EA7FFCC99A45B490A507F531C12EBDAB
Authority key identifier: 14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a373730303a3a2f34312d3431203d3e203631353931.roa
Signing time:             Sat 01 Feb 2025 18:34:30 +0000
ROA not before:           Sat 01 Feb 2025 18:29:30 +0000
ROA not after:            Sat 31 Jan 2026 18:34:30 +0000
asID:                     61591
IP address blocks:        2804:231c:7700::/41 maxlen: 41
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:92:fe:d0:ea:7f:fc:c9:9a:45:b4:90:a5:07:f5:31:c1:2e:bd:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14490FD591932776F2F5F6CFB3C5431550A04F62
        Validity
            Not Before: Feb  1 18:29:30 2025 GMT
            Not After : Jan 31 18:34:30 2026 GMT
        Subject: CN=3082010A0282010100C92A115B91C69036CF36A940AD9A8AE743A7D839BE96268DE2539521220FE78C4AFDE1F7BABF06ECAD5AD54F63E7CFDB0AE7E5902ED4D73863BD81DE4C1340C88C7E853D8C385066B04A500B38F8E54B7EE21D014B413CAD01AC9FB5FAEC4827D6CA98A6792ACB337876146CF0D80770ED39CDCAF33BDEECCFB76DAB8189D04E0B970DB10542C5BE19DDB197966C70D7AF43BA6DF55992123D50491A8FA6A7E3573FB0761FC4B15B5D580A5937C0400D1D578CDFB742BE299F152A1856F947BD5200811358C2AAE534660973169A1C0192F724B91CEC53089DE812BAAC90DE6F85F2CD3115D3896BEB8CCFAFD1CE0FA5E6A24F3D3F1A10002B6B3B277D1A08CF0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2a:11:5b:91:c6:90:36:cf:36:a9:40:ad:9a:
                    8a:e7:43:a7:d8:39:be:96:26:8d:e2:53:95:21:22:
                    0f:e7:8c:4a:fd:e1:f7:ba:bf:06:ec:ad:5a:d5:4f:
                    63:e7:cf:db:0a:e7:e5:90:2e:d4:d7:38:63:bd:81:
                    de:4c:13:40:c8:8c:7e:85:3d:8c:38:50:66:b0:4a:
                    50:0b:38:f8:e5:4b:7e:e2:1d:01:4b:41:3c:ad:01:
                    ac:9f:b5:fa:ec:48:27:d6:ca:98:a6:79:2a:cb:33:
                    78:76:14:6c:f0:d8:07:70:ed:39:cd:ca:f3:3b:de:
                    ec:cf:b7:6d:ab:81:89:d0:4e:0b:97:0d:b1:05:42:
                    c5:be:19:dd:b1:97:96:6c:70:d7:af:43:ba:6d:f5:
                    59:92:12:3d:50:49:1a:8f:a6:a7:e3:57:3f:b0:76:
                    1f:c4:b1:5b:5d:58:0a:59:37:c0:40:0d:1d:57:8c:
                    df:b7:42:be:29:9f:15:2a:18:56:f9:47:bd:52:00:
                    81:13:58:c2:aa:e5:34:66:09:73:16:9a:1c:01:92:
                    f7:24:b9:1c:ec:53:08:9d:e8:12:ba:ac:90:de:6f:
                    85:f2:cd:31:15:d3:89:6b:eb:8c:cf:af:d1:ce:0f:
                    a5:e6:a2:4f:3d:3f:1a:10:00:2b:6b:3b:27:7d:1a:
                    08:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E4:0E:5B:56:82:B8:22:70:EF:47:5E:D5:82:38:A5:13:44:43:C8
            X509v3 Authority Key Identifier:
                keyid:14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a373730303a3a2f34312d3431203d3e203631353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:231c:7700::/41

    Signature Algorithm: sha256WithRSAEncryption
         6b:fe:37:8e:fa:9d:f7:69:30:88:f9:ac:15:bb:db:77:97:97:
         77:06:e9:f5:1e:11:60:b6:f4:a6:3e:e0:90:94:2c:4d:d5:a4:
         e6:a0:99:94:44:f3:16:78:27:23:d2:f0:dc:43:1c:fd:35:3b:
         c8:e7:9a:03:ff:04:52:3f:67:ac:09:2e:2e:4d:f1:7e:dc:ac:
         81:f3:0c:68:73:12:e6:33:e7:e1:9d:0e:a6:27:05:55:4f:be:
         a4:25:b6:b0:4d:f6:6e:92:2f:41:4d:60:e4:7a:37:11:d7:5f:
         1f:da:0b:07:aa:66:1a:7a:2d:85:88:82:5a:be:ee:82:95:fd:
         37:f1:28:48:ca:eb:ca:5e:a3:bc:53:d0:f2:c4:ac:59:57:72:
         64:cd:f4:6a:7c:c7:b3:7a:95:ca:59:ad:7a:97:4c:a4:41:16:
         6b:c1:8a:eb:e7:d8:24:c7:76:4d:ee:98:8d:ab:b0:2a:0e:f9:
         c4:2a:45:15:29:89:73:ff:f0:18:a0:ec:84:2f:b0:52:45:5b:
         7d:d5:08:87:9b:ff:fc:81:7d:88:c7:3b:d4:15:b1:7a:97:fb:
         3a:04:0b:99:99:75:9b:a4:03:56:0b:f8:a1:d8:4e:bb:fe:dc:
         1a:0b:98:74:83:55:00:22:85:38:5f:17:5e:35:2d:16:e1:3c:
         6a:ba:22:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:37:24 2025 by rpki-client