Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/323830343a3235303a633030303a3a2f33342d3334203d3e20323632383033.roa
File:                     323830343a3235303a633030303a3a2f33342d3334203d3e20323632383033.roa (raw, json)
Hash identifier:          UzeAhBBh9v7HHzIqZSLZ2vVp4yxU2+eVVMcDLhXQ47s=
Subject key identifier:   00:C0:4B:64:89:FE:0B:72:65:9A:EF:10:7D:2D:6F:41:E9:C1:A6:BF
Certificate issuer:       /CN=6D48F047E612BDC947C9747FC9B62D281F0796A4
Certificate serial:       4B5C9DA34699B36226420CE36191444790365643
Authority key identifier: 6D:48:F0:47:E6:12:BD:C9:47:C9:74:7F:C9:B6:2D:28:1F:07:96:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D48F047E612BDC947C9747FC9B62D281F0796A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/323830343a3235303a633030303a3a2f33342d3334203d3e20323632383033.roa
Signing time:             Wed 11 Dec 2024 03:00:49 +0000
ROA not before:           Wed 11 Dec 2024 02:55:49 +0000
ROA not after:            Wed 10 Dec 2025 03:00:49 +0000
asID:                     262803
IP address blocks:        2804:250:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:5c:9d:a3:46:99:b3:62:26:42:0c:e3:61:91:44:47:90:36:56:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D48F047E612BDC947C9747FC9B62D281F0796A4
        Validity
            Not Before: Dec 11 02:55:49 2024 GMT
            Not After : Dec 10 03:00:49 2025 GMT
        Subject: CN=00C04B6489FE0B72659AEF107D2D6F41E9C1A6BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3b:0a:d2:23:05:ca:a8:55:1d:f1:46:b3:95:
                    1c:8b:94:a5:3f:dd:4f:4a:dc:8f:e5:9d:82:9a:08:
                    4f:7b:73:1a:ca:b3:dd:43:b3:e9:03:3a:35:4b:9d:
                    bf:26:2e:3a:db:4a:36:11:6a:36:c9:d5:66:64:cd:
                    c8:92:39:f3:66:1a:f0:f5:43:d9:cb:9f:7c:4e:9b:
                    1a:39:cd:ea:bb:f6:ab:21:74:7d:4d:91:53:3a:24:
                    4e:4a:63:e7:c4:75:66:da:8d:59:83:6f:3e:a7:b7:
                    9d:58:fe:aa:d4:ed:b7:b6:7c:7e:cb:e7:7d:30:c8:
                    d0:d3:26:57:6c:59:f7:01:e8:88:7c:68:76:29:d0:
                    db:13:22:07:94:11:cb:e6:56:74:63:97:b5:cf:32:
                    ce:f3:6f:4c:25:17:df:bb:fa:3e:ff:00:d6:5e:c5:
                    80:bd:c2:ae:71:67:a5:ca:86:e8:3d:1f:b4:1d:a1:
                    83:e4:a5:fd:81:70:88:a3:fa:cd:c7:81:08:1b:c1:
                    b4:c2:a3:50:92:37:14:cf:45:a8:d6:d6:a6:9b:b3:
                    26:fb:7d:09:52:ff:f0:9d:a6:af:e7:2d:9c:8a:0f:
                    ec:46:02:44:38:0f:66:e5:67:a7:63:99:96:63:fb:
                    15:18:bd:3a:85:af:64:76:36:af:e0:22:3f:87:7f:
                    23:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C0:4B:64:89:FE:0B:72:65:9A:EF:10:7D:2D:6F:41:E9:C1:A6:BF
            X509v3 Authority Key Identifier:
                keyid:6D:48:F0:47:E6:12:BD:C9:47:C9:74:7F:C9:B6:2D:28:1F:07:96:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/6D48F047E612BDC947C9747FC9B62D281F0796A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D48F047E612BDC947C9747FC9B62D281F0796A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/323830343a3235303a633030303a3a2f33342d3334203d3e20323632383033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:250:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         9c:69:11:b4:c9:44:dd:ab:1c:c9:58:f9:38:9e:e5:b2:b8:b6:
         2f:e0:4f:b4:71:64:fa:fd:5a:b0:53:74:0b:1c:06:94:a0:29:
         4b:9c:92:c1:94:29:67:8c:a1:94:49:6d:7a:d1:39:05:bb:bb:
         eb:68:02:6d:c9:d6:20:20:eb:33:79:73:56:e0:59:c2:aa:21:
         02:2b:3f:88:11:2b:5d:1c:21:83:c2:57:64:cb:77:3c:ed:3e:
         38:3d:9c:8e:6e:50:75:31:36:ad:4d:7c:aa:5e:12:99:34:b9:
         e5:0e:4c:16:14:21:25:aa:09:69:23:85:d8:2d:1f:e4:60:c1:
         12:ed:36:ec:ae:b9:0a:67:21:32:d8:8e:e1:8e:07:65:15:61:
         0b:70:88:37:a4:d1:c9:cc:00:b7:3a:4a:06:d9:2c:a6:14:fa:
         28:93:cd:8b:9d:1b:d6:21:a8:e2:94:2c:dd:27:e9:a1:89:06:
         61:da:39:91:2b:05:e7:78:14:55:98:3b:2b:63:d7:8f:9c:e4:
         82:c7:0a:a8:30:ee:b3:06:c8:25:28:e6:48:fd:35:54:dc:ff:
         bc:4b:e2:f0:93:30:6c:63:47:59:e8:6e:73:c8:54:a4:55:2a:
         1b:66:d3:1f:b5:71:a5:84:21:e5:c6:cb:79:b2:f1:75:a4:42:
         7e:c8:62:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:57:58 2025 by rpki-client