Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/323830343a353765303a3a2f33332d3333203d3e20323638303932.roa
File:                     323830343a353765303a3a2f33332d3333203d3e20323638303932.roa (raw, json)
Hash identifier:          mKJuSmfJGSd8gG4SX1UQuLkc53gLMjyN9m8vvmbLR7Y=
Subject key identifier:   64:4A:FD:BA:78:D3:02:88:0F:FC:9B:FD:D8:8B:F0:8F:8A:23:34:9B
Certificate issuer:       /CN=0C373D8F768B105DA0240C6AEA40CD1AD762EBA4
Certificate serial:       7591F458B93E887A83751F70CE56C919751F7BAF
Authority key identifier: 0C:37:3D:8F:76:8B:10:5D:A0:24:0C:6A:EA:40:CD:1A:D7:62:EB:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/323830343a353765303a3a2f33332d3333203d3e20323638303932.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     268092
IP address blocks:        2804:57e0::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:91:f4:58:b9:3e:88:7a:83:75:1f:70:ce:56:c9:19:75:1f:7b:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C373D8F768B105DA0240C6AEA40CD1AD762EBA4
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=644AFDBA78D302880FFC9BFDD88BF08F8A23349B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:94:18:0c:55:17:21:13:fb:a5:6f:8e:9d:a5:
                    e5:c6:4c:1b:06:05:f1:8b:39:4c:c9:83:8c:7b:b7:
                    9d:9e:3a:69:85:01:a3:3a:3f:30:ef:4a:ae:73:4f:
                    b3:66:fa:8a:c2:d5:30:3d:00:df:f2:c9:56:a8:8a:
                    56:e2:47:a3:0c:14:93:cb:2b:9c:fd:a7:7c:27:4d:
                    ed:f0:0c:14:82:58:77:c9:9f:67:83:75:7b:76:99:
                    9d:3d:18:90:85:41:db:a3:4d:e8:fb:ef:70:66:87:
                    0a:9b:79:d2:ec:37:e2:2f:4c:b8:67:b2:bc:f8:a3:
                    54:4a:65:1e:4c:b5:b7:d3:04:16:aa:3f:99:e8:f8:
                    64:ea:96:89:99:70:65:00:e7:1f:a2:51:d4:3e:ab:
                    4f:69:6b:a5:99:ee:d9:c2:1e:75:bb:84:f9:fe:38:
                    ed:36:75:2c:8a:01:87:ac:d1:41:aa:da:b0:8e:9e:
                    26:89:dc:fe:94:69:35:a4:e4:cf:5d:13:8b:f9:70:
                    7b:40:0c:ad:e0:eb:4d:50:86:0e:30:1f:67:d5:17:
                    3c:92:ae:4f:14:1b:d1:c1:65:32:8c:d5:27:62:e3:
                    22:38:8b:bb:76:8f:ed:86:33:62:c0:cf:14:e5:4e:
                    f1:27:d0:92:b5:a0:57:51:84:7c:26:4c:3f:c4:08:
                    12:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:4A:FD:BA:78:D3:02:88:0F:FC:9B:FD:D8:8B:F0:8F:8A:23:34:9B
            X509v3 Authority Key Identifier:
                keyid:0C:37:3D:8F:76:8B:10:5D:A0:24:0C:6A:EA:40:CD:1A:D7:62:EB:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/323830343a353765303a3a2f33332d3333203d3e20323638303932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:57e0::/33

    Signature Algorithm: sha256WithRSAEncryption
         56:1b:7c:ff:20:5e:ae:1a:ca:c7:5c:26:0e:32:f6:38:fc:36:
         8e:d2:cd:07:52:80:80:84:90:6d:38:fe:7a:0a:63:18:42:3d:
         47:07:8f:b5:31:12:3b:37:46:2f:9e:5a:06:37:1f:36:22:60:
         12:79:d4:f1:4b:35:55:41:73:4b:e0:8f:73:05:b1:f8:60:97:
         ff:8e:7a:40:6c:e1:10:b9:d2:8f:eb:7f:37:2d:fd:d1:83:aa:
         6f:2f:98:4e:2b:b7:19:67:4e:8e:9b:31:8a:fc:2b:6c:63:87:
         1d:45:7b:c2:7b:4a:f1:a4:d5:cc:7f:81:3c:a5:ff:e3:a5:94:
         2e:b7:0f:e1:9c:36:42:59:3f:3b:f4:30:3b:2e:69:cd:36:fc:
         1c:35:bb:ad:80:04:3f:fb:e4:ac:c2:4d:8b:b0:52:03:32:c2:
         c1:73:35:7e:62:7c:53:20:31:77:44:ce:13:3f:3c:83:45:82:
         70:79:9f:b8:ab:bc:dd:0a:85:24:71:d8:29:9d:14:85:6e:f8:
         b2:40:b7:00:3e:a3:16:41:36:00:8f:b1:d8:16:46:ae:75:72:
         7e:b9:47:3c:35:8f:91:fd:d7:71:62:e9:06:33:a5:95:ec:3c:
         a8:ef:dc:b2:a9:c6:2a:fb:1f:43:ae:68:bb:be:08:ab:73:b1:
         5e:55:48:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:53:25 2025 by rpki-client