Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/323830343a333831303a3a2f33322d313238203d3e20323033.roa
File:                     323830343a333831303a3a2f33322d313238203d3e20323033.roa (raw, json)
Hash identifier:          iYLmbaum2qeUsJJVAsdURywNrG/K/jvu/vMdlwAxPv0=
Subject key identifier:   0B:2A:B6:06:B1:5B:37:FD:AD:A0:86:09:01:C2:48:DC:92:D6:40:1A
Certificate issuer:       /CN=548D6970267EF22027E90B3D68AB2E122A2BA170
Certificate serial:       4B9FDCEEE5633E18E2B2B97D1860A3D2F49B23E9
Authority key identifier: 54:8D:69:70:26:7E:F2:20:27:E9:0B:3D:68:AB:2E:12:2A:2B:A1:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/548D6970267EF22027E90B3D68AB2E122A2BA170.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/323830343a333831303a3a2f33322d313238203d3e20323033.roa
Signing time:             Thu 22 Feb 2024 13:16:26 +0000
ROA not before:           Thu 22 Feb 2024 13:11:26 +0000
ROA not after:            Thu 20 Feb 2025 13:16:26 +0000
asID:                     203
IP address blocks:        2804:3810::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:9f:dc:ee:e5:63:3e:18:e2:b2:b9:7d:18:60:a3:d2:f4:9b:23:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=548D6970267EF22027E90B3D68AB2E122A2BA170
        Validity
            Not Before: Feb 22 13:11:26 2024 GMT
            Not After : Feb 20 13:16:26 2025 GMT
        Subject: CN=0B2AB606B15B37FDADA0860901C248DC92D6401A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:69:79:90:c3:f0:ef:81:53:ef:57:bb:27:8b:
                    e3:f2:53:74:40:40:f5:62:4d:9e:11:43:85:1b:58:
                    4f:dc:b4:8d:2c:fd:97:cf:6a:7b:d4:37:83:6e:5f:
                    52:d2:3b:8a:55:a4:32:60:7d:18:6a:d5:dc:9e:20:
                    69:0f:cd:4d:fe:95:2c:de:43:91:df:81:67:1b:c1:
                    6c:e5:d6:ec:6c:48:fc:95:0b:fb:7c:45:4f:75:7e:
                    bf:d9:74:04:62:d6:5e:50:fa:dc:38:70:7c:bf:69:
                    d6:c5:d1:b3:d9:7a:97:12:e3:d6:3f:2b:52:3f:33:
                    2b:17:99:83:ae:dd:64:b9:1e:cb:3e:89:dc:b2:6c:
                    9a:81:6f:ac:f2:e9:d2:2f:d6:b3:e0:0b:06:04:3d:
                    d1:c0:19:e6:0d:a5:a1:b0:ba:69:03:67:9f:7d:3b:
                    73:1e:e1:10:5d:78:91:52:a4:a9:55:a8:ce:c3:a0:
                    5d:37:73:82:39:1c:92:bb:08:91:1f:8b:5f:d8:aa:
                    88:14:59:d3:8d:d2:78:48:34:49:84:0f:eb:fc:6e:
                    75:b8:e8:af:27:7c:a2:2c:02:93:71:2e:77:00:45:
                    d5:f3:68:93:23:80:40:e7:09:7c:9d:9c:5f:7c:50:
                    60:b5:0b:93:44:b9:f7:0d:22:f9:c5:ca:9f:c3:8e:
                    02:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:2A:B6:06:B1:5B:37:FD:AD:A0:86:09:01:C2:48:DC:92:D6:40:1A
            X509v3 Authority Key Identifier:
                keyid:54:8D:69:70:26:7E:F2:20:27:E9:0B:3D:68:AB:2E:12:2A:2B:A1:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/548D6970267EF22027E90B3D68AB2E122A2BA170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/548D6970267EF22027E90B3D68AB2E122A2BA170.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/323830343a333831303a3a2f33322d313238203d3e20323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3810::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:a8:94:bc:76:56:e8:8a:90:7e:3f:87:07:d8:5f:b3:fd:28:
         2e:b4:6f:fd:61:27:31:cf:5a:56:cf:f9:5a:a8:be:47:0c:34:
         51:e0:6e:60:88:9e:bc:11:1b:90:4a:3e:33:dd:66:13:0d:c8:
         57:30:25:2b:a5:84:2e:45:45:3c:a4:fc:0e:62:48:ac:71:d1:
         62:ad:af:08:76:f3:33:e4:3c:3c:eb:0d:83:56:84:9b:2f:4f:
         b5:79:cb:54:22:5d:be:19:d0:15:d0:bc:8c:2c:42:7f:9d:8d:
         d1:3d:f1:a8:2e:1d:be:80:2e:49:03:c3:75:96:04:e7:e1:3d:
         71:a3:0f:50:21:ca:a0:5c:22:8c:33:33:4a:11:d8:75:bf:68:
         9c:6c:07:77:16:0d:0f:46:99:39:56:79:a4:e6:67:b3:f1:eb:
         40:5b:52:7a:17:d2:a1:e5:b2:be:b0:00:53:47:f6:00:6d:f2:
         74:65:4e:b9:92:54:05:7e:aa:e1:10:48:75:a6:4f:eb:47:88:
         40:e8:84:d2:52:6a:8d:50:52:85:fb:b6:ec:78:f3:e0:84:d6:
         53:cb:a9:18:df:97:03:19:d3:14:9d:4a:54:39:e0:a7:7c:4e:
         d1:77:00:b4:bf:41:96:ce:77:08:e9:f7:73:61:cf:3c:16:93:
         5c:f2:99:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:17 2025 by rpki-client