Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/0/323830343a323062343a343030303a3a2f33342d3334203d3e20323634353039.roa
File:                     323830343a323062343a343030303a3a2f33342d3334203d3e20323634353039.roa (raw, json)
Hash identifier:          t5mBDavZo5kSK7rZ9kfMaaMrOy/6Q7Yd5r29t+/4Mm0=
Subject key identifier:   DE:F2:73:A0:57:10:72:3D:BF:8D:24:13:BB:C1:F8:D1:31:36:16:6A
Certificate issuer:       /CN=1425E96015DE13B67E1065F8E62962A71308FD33
Certificate serial:       2451566A20111D4B0A222F38FE156244C3C1B23A
Authority key identifier: 14:25:E9:60:15:DE:13:B6:7E:10:65:F8:E6:29:62:A7:13:08:FD:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1425E96015DE13B67E1065F8E62962A71308FD33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/0/323830343a323062343a343030303a3a2f33342d3334203d3e20323634353039.roa
Signing time:             Tue 02 Jan 2024 12:00:00 +0000
ROA not before:           Tue 02 Jan 2024 11:55:00 +0000
ROA not after:            Tue 31 Dec 2024 12:00:00 +0000
asID:                     264509
IP address blocks:        2804:20b4:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:51:56:6a:20:11:1d:4b:0a:22:2f:38:fe:15:62:44:c3:c1:b2:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1425E96015DE13B67E1065F8E62962A71308FD33
        Validity
            Not Before: Jan  2 11:55:00 2024 GMT
            Not After : Dec 31 12:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2f:5c:de:8c:34:da:89:bf:13:34:2b:d2:5a:
                    d4:ec:5e:7a:58:ad:e0:91:76:3a:68:c6:da:5b:48:
                    bd:2f:86:c4:ca:b8:54:91:50:5a:a1:67:5f:cd:05:
                    97:e1:ba:85:aa:f5:b2:ea:1c:7c:22:e8:ff:92:62:
                    de:e1:24:0f:75:7e:e2:8d:da:ce:d4:de:a5:59:fd:
                    4a:43:b5:d5:20:bf:69:f5:1f:ab:fa:c5:ea:17:4a:
                    06:e6:7c:5d:ff:35:a9:55:fe:ca:36:4d:26:3e:4b:
                    de:25:40:23:b6:27:25:e3:cb:8e:5a:99:60:d1:22:
                    f7:c7:8c:8f:a7:7a:bb:c6:73:59:08:df:61:44:84:
                    32:19:42:9e:fa:f2:05:71:c0:9a:14:67:21:1a:c0:
                    ce:44:95:73:6a:e5:03:a2:74:2a:71:ae:ff:99:ff:
                    d9:0b:6a:7c:3c:ee:86:9a:99:51:85:c3:9a:dc:21:
                    c7:0c:52:f0:c8:c0:62:a5:0d:91:ab:90:a1:29:fa:
                    df:88:a4:51:3a:2e:7e:77:ac:8e:86:d4:14:00:09:
                    14:48:1c:c6:aa:3d:c6:32:b0:0d:81:d5:05:e0:49:
                    ee:03:95:b7:5c:3a:34:95:0c:1b:7b:33:8b:61:c0:
                    16:93:7d:e2:a9:d1:28:52:c0:77:2f:41:01:7c:c8:
                    b6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:F2:73:A0:57:10:72:3D:BF:8D:24:13:BB:C1:F8:D1:31:36:16:6A
            X509v3 Authority Key Identifier:
                keyid:14:25:E9:60:15:DE:13:B6:7E:10:65:F8:E6:29:62:A7:13:08:FD:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/0/1425E96015DE13B67E1065F8E62962A71308FD33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1425E96015DE13B67E1065F8E62962A71308FD33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/0/323830343a323062343a343030303a3a2f33342d3334203d3e20323634353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20b4:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5f:75:fd:82:ed:68:3d:71:46:55:49:39:89:a7:d2:9f:d2:dd:
         90:42:fd:ff:71:ff:2a:b3:37:4f:63:2b:c2:6a:4b:08:c7:8d:
         3d:f1:92:5e:a0:be:72:59:93:e0:93:4c:93:ff:dd:01:44:33:
         91:a0:21:00:e0:6f:38:e4:ba:ea:4f:70:f2:9c:be:b0:bf:32:
         38:bf:f2:3b:fb:9f:8f:52:f1:27:83:8e:e9:a1:8a:92:f8:a0:
         69:3b:cc:79:7c:d7:20:c6:11:31:f9:9a:9f:61:51:67:ac:c6:
         f8:ce:d8:8a:7a:a3:17:d0:97:8b:5d:a7:b3:85:c6:18:89:42:
         57:1c:a0:78:5b:05:42:25:2d:a1:5d:1e:3c:b0:f7:6c:71:d8:
         b1:cb:01:62:25:7c:dc:e7:fa:15:4b:b0:6b:61:17:91:d0:a9:
         c2:37:4c:e7:72:3e:42:1a:57:44:1b:80:24:5f:4c:76:77:34:
         b0:ee:25:7a:af:77:06:46:30:ab:f4:f9:e6:c7:34:0e:96:4a:
         fd:20:12:9e:41:0c:85:79:1b:22:43:6e:12:7a:e2:21:b6:df:
         e7:d5:80:0e:d9:b4:27:ba:80:35:b9:94:87:0d:e6:ff:38:e4:
         81:4d:01:e0:6a:72:fb:56:b4:a5:2b:0f:55:1a:39:56:93:18:
         12:05:9e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:44:58 2025 by rpki-client