Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3JytBtNNmXupZVL381xuJt2NxhU6cUmQqpN8No8VbC2J/0/323830343a343436343a3a2f33322d3434203d3e20323633303333.roa
File:                     323830343a343436343a3a2f33322d3434203d3e20323633303333.roa (raw, json)
Hash identifier:          oT1sRz2R5VPyB/sghK9TRtyFawnxzFd17wSEEIwZVdI=
Subject key identifier:   BA:DC:A9:23:93:3F:AC:58:9B:C2:30:CD:D2:F5:A7:67:65:C7:64:69
Certificate issuer:       /CN=C1107F3AA9659ECBD1DF0576BD7054B4135DD10B
Certificate serial:       40E5067646178604D5ABE475C040478FC569BEE7
Authority key identifier: C1:10:7F:3A:A9:65:9E:CB:D1:DF:05:76:BD:70:54:B4:13:5D:D1:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1107F3AA9659ECBD1DF0576BD7054B4135DD10B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JytBtNNmXupZVL381xuJt2NxhU6cUmQqpN8No8VbC2J/0/323830343a343436343a3a2f33322d3434203d3e20323633303333.roa
Signing time:             Sat 14 Dec 2024 16:46:40 +0000
ROA not before:           Sat 14 Dec 2024 16:41:40 +0000
ROA not after:            Sat 13 Dec 2025 16:46:40 +0000
asID:                     263033
IP address blocks:        2804:4464::/32 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:e5:06:76:46:17:86:04:d5:ab:e4:75:c0:40:47:8f:c5:69:be:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1107F3AA9659ECBD1DF0576BD7054B4135DD10B
        Validity
            Not Before: Dec 14 16:41:40 2024 GMT
            Not After : Dec 13 16:46:40 2025 GMT
        Subject: CN=BADCA923933FAC589BC230CDD2F5A76765C76469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f8:76:6f:60:74:49:b8:21:45:eb:51:d8:eb:
                    8e:95:e5:a2:fe:4c:32:3d:27:a6:5f:66:55:71:57:
                    f6:44:0a:ab:bb:6b:d4:3d:b3:a6:d9:6c:1e:1c:9c:
                    ca:68:16:e3:13:d4:8a:42:0d:94:b7:05:d6:9d:4c:
                    c5:a9:9a:31:5e:cf:d5:b0:c3:63:cb:9d:85:1f:fc:
                    93:66:4d:7c:55:ed:70:ac:aa:50:2e:45:9f:20:82:
                    94:4d:e8:52:61:65:c9:c4:6a:e5:55:30:49:60:f3:
                    88:07:11:fc:6b:f0:f3:3e:cb:a6:f5:6b:91:9e:bb:
                    55:6e:d9:fe:61:6b:09:8a:02:92:bf:f8:97:16:dc:
                    7e:8f:d3:0b:3c:f0:36:9f:75:90:2c:e8:1e:3d:3c:
                    43:2a:12:99:9b:e2:32:18:65:55:4c:95:f5:1e:90:
                    82:83:36:55:ac:27:ee:dd:65:eb:75:e8:9f:21:41:
                    e8:1f:98:0c:0c:f2:96:b3:20:ad:3a:d3:93:f7:fc:
                    30:85:68:f1:60:72:4f:e8:fc:ef:c3:cb:03:89:7e:
                    56:cc:59:ae:75:41:12:fb:c0:a1:06:e2:15:81:d2:
                    03:9c:fa:9d:fc:50:0c:b7:d5:91:1a:b6:e4:9f:3d:
                    d5:9d:09:1b:a5:fb:ae:2b:cf:7e:54:47:0d:b8:8b:
                    f7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:DC:A9:23:93:3F:AC:58:9B:C2:30:CD:D2:F5:A7:67:65:C7:64:69
            X509v3 Authority Key Identifier:
                keyid:C1:10:7F:3A:A9:65:9E:CB:D1:DF:05:76:BD:70:54:B4:13:5D:D1:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JytBtNNmXupZVL381xuJt2NxhU6cUmQqpN8No8VbC2J/0/C1107F3AA9659ECBD1DF0576BD7054B4135DD10B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1107F3AA9659ECBD1DF0576BD7054B4135DD10B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JytBtNNmXupZVL381xuJt2NxhU6cUmQqpN8No8VbC2J/0/323830343a343436343a3a2f33322d3434203d3e20323633303333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4464::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:51:7c:ff:ae:a4:93:e3:28:3e:a3:5c:2b:7a:dc:98:86:fa:
         5a:ed:35:16:66:1b:2b:59:2f:4f:3d:cd:89:62:ac:1b:84:9d:
         e2:f0:7c:02:af:b1:d8:93:b9:b7:23:d1:cf:07:8e:82:da:46:
         fc:0b:56:de:59:46:28:88:51:c3:8c:67:72:9f:f4:20:b2:84:
         f4:72:13:8d:20:7b:34:f3:f9:a5:9b:c8:64:10:62:6e:d3:77:
         3e:ea:c2:7e:f6:8d:a8:39:79:b6:20:6a:fa:cf:9f:f2:95:d2:
         17:f1:64:33:5b:d3:e4:77:56:11:68:7d:79:31:e7:77:54:b9:
         5d:45:ae:91:6c:79:eb:01:6e:3f:7f:20:84:36:74:41:c5:a4:
         df:d4:fb:87:06:97:2a:ac:85:b6:56:86:6c:af:96:6c:c9:f3:
         cf:58:42:f9:65:b2:74:79:a7:d4:fe:41:68:e8:90:21:93:ed:
         1f:81:10:9a:58:7e:d1:de:e5:47:d4:47:9e:b4:76:f8:09:a3:
         27:1f:a4:87:e7:99:e5:02:2d:41:a2:cc:e6:42:14:e4:91:08:
         d1:f9:e4:08:df:66:a9:d4:9d:bd:bc:80:89:bd:c6:35:64:55:
         60:72:05:e2:20:75:1b:27:1c:d7:0b:25:7f:80:d2:33:85:e7:
         eb:4f:3d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:26:27 2025 by rpki-client