Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/323830343a323062343a3a2f33322d3332203d3e20323634353039.roa
File:                     323830343a323062343a3a2f33322d3332203d3e20323634353039.roa (raw, json)
Hash identifier:          McV3JSAsLC3Z1XEHLEeuUF4ds9A84N47cL56FstHUrs=
Subject key identifier:   A4:ED:C0:54:F9:41:19:C9:A4:0E:CD:32:D4:F8:77:52:EA:7B:3E:2E
Certificate issuer:       /CN=C67FC27679C5C58D1A1904874E35000B74C71E78
Certificate serial:       478C2B778E7C03B0513BA0FDF0B9ACF58ACE7360
Authority key identifier: C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/323830343a323062343a3a2f33322d3332203d3e20323634353039.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     264509
IP address blocks:        2804:20b4::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:8c:2b:77:8e:7c:03:b0:51:3b:a0:fd:f0:b9:ac:f5:8a:ce:73:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67FC27679C5C58D1A1904874E35000B74C71E78
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:41:b1:07:0d:b5:20:4d:de:fe:f5:8f:ca:ce:
                    ac:a1:fa:6d:11:41:3a:5e:e0:1c:92:9f:4d:bf:db:
                    92:60:93:f5:13:fe:42:2e:53:d7:38:a5:25:75:84:
                    ab:9e:34:2c:68:e0:26:e7:84:71:b3:bc:fe:2a:00:
                    74:ef:3e:8f:18:29:04:63:f4:44:91:96:74:34:73:
                    77:ce:8c:ca:71:ea:22:1b:ad:ed:3a:99:55:c7:fb:
                    fc:ad:b2:30:0d:12:b2:07:ee:31:9f:1e:db:7b:12:
                    ec:bc:74:45:05:c1:7d:e4:10:79:95:cc:c8:c8:eb:
                    73:4a:0f:19:06:95:41:fa:a7:2e:3f:2d:e4:60:2e:
                    de:95:90:49:d1:fa:f1:da:86:50:37:cd:2e:6c:21:
                    e0:7e:8d:e5:7d:0d:4d:60:a1:ce:95:6f:c6:95:a3:
                    d8:d7:70:07:82:73:ad:b9:ee:c6:81:1a:b5:7c:31:
                    a8:31:f8:c3:9a:8c:7b:e3:48:e4:e9:96:b6:b5:d0:
                    01:51:9b:d4:fc:89:c0:96:60:1a:71:c8:3e:89:c6:
                    99:f6:55:40:62:4b:d1:06:7e:38:8a:e2:83:86:b3:
                    54:81:ba:d9:b4:95:d4:59:3c:10:51:9f:37:d2:0d:
                    b1:35:7b:b8:3e:5d:26:65:8c:cd:ef:46:aa:7b:a5:
                    2b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:ED:C0:54:F9:41:19:C9:A4:0E:CD:32:D4:F8:77:52:EA:7B:3E:2E
            X509v3 Authority Key Identifier:
                keyid:C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/323830343a323062343a3a2f33322d3332203d3e20323634353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:22:6f:ec:41:92:cb:a4:f4:e0:70:e9:8f:d5:47:48:0b:b0:
         e1:98:4b:d0:42:33:a4:7b:a6:7a:c4:72:bd:9f:61:4c:d2:3d:
         5e:d5:10:75:10:d8:e8:21:b2:97:bc:fa:26:7d:0e:69:80:4b:
         84:9d:aa:4e:69:33:ac:7d:5d:df:f9:d1:52:8a:a2:99:8d:45:
         f7:67:d4:03:60:e7:9d:d5:2b:34:29:a5:de:9e:24:f8:b1:92:
         06:ca:2b:ce:f7:96:eb:63:39:92:9b:31:8e:37:88:af:2b:cc:
         dd:f4:4f:04:88:2d:39:44:66:7e:95:b6:79:01:1a:75:86:51:
         c1:d0:b6:b9:e4:69:af:22:5a:02:82:5c:63:82:4f:cf:75:50:
         7b:8f:46:72:ab:8d:b4:db:d2:cc:74:26:a1:cd:7f:63:8d:67:
         97:fc:19:8c:d1:60:71:96:40:09:07:24:67:31:db:10:99:74:
         5c:f8:e1:98:be:87:64:dc:a0:8f:ef:aa:88:0e:a6:1d:8c:0a:
         25:34:c2:c4:02:7a:3d:ae:e0:ea:e4:ca:25:56:f5:15:9a:d9:
         37:28:8d:75:1d:d6:19:62:76:a4:f7:ad:61:c7:66:5f:0e:c7:
         00:93:eb:4e:ff:fb:32:66:a3:b5:85:bb:b8:a6:fc:f4:c6:aa:
         c9:da:1d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:20:23 2025 by rpki-client