Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3iwJ43iiGh2k1abPhtSsHAeB9tuxdj4XzbGDmWc1TLsh/0/323830343a343264303a3a2f33322d313238203d3e20323637353239.roa
File:                     323830343a343264303a3a2f33322d313238203d3e20323637353239.roa (raw, json)
Hash identifier:          op4Lp8HkiQ/Of6Q5vnQem0SlTYvetcZx2s5FkFQtx8k=
Subject key identifier:   A1:AB:76:CD:D9:06:B8:28:89:FB:C5:B0:0B:AA:24:B4:48:B3:33:D5
Certificate issuer:       /CN=F55B47FE525467E8D348FF8827EDEB15DDC430A2
Certificate serial:       0550B1D2245E6DC0B7192105B20930772596A269
Authority key identifier: F5:5B:47:FE:52:54:67:E8:D3:48:FF:88:27:ED:EB:15:DD:C4:30:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F55B47FE525467E8D348FF8827EDEB15DDC430A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3iwJ43iiGh2k1abPhtSsHAeB9tuxdj4XzbGDmWc1TLsh/0/323830343a343264303a3a2f33322d313238203d3e20323637353239.roa
Signing time:             Wed 17 Apr 2024 22:02:46 +0000
ROA not before:           Wed 17 Apr 2024 21:57:46 +0000
ROA not after:            Wed 16 Apr 2025 22:02:46 +0000
asID:                     267529
IP address blocks:        2804:42d0::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:50:b1:d2:24:5e:6d:c0:b7:19:21:05:b2:09:30:77:25:96:a2:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F55B47FE525467E8D348FF8827EDEB15DDC430A2
        Validity
            Not Before: Apr 17 21:57:46 2024 GMT
            Not After : Apr 16 22:02:46 2025 GMT
        Subject: CN=A1AB76CDD906B82889FBC5B00BAA24B448B333D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:35:f6:fa:15:88:71:e6:ad:c0:05:79:1f:ea:
                    bd:ae:20:58:0e:d8:35:01:05:3c:75:a0:97:bb:3c:
                    be:b2:b9:f0:2e:47:00:64:2f:75:04:7f:97:3e:78:
                    9e:c7:f4:79:8b:9f:19:8d:aa:c8:3d:d1:83:6c:ea:
                    1b:43:d5:00:ce:e1:9b:ce:53:0b:70:fc:3b:d0:e2:
                    e3:14:2a:4d:54:d2:a9:d5:1c:98:9c:9e:c1:60:f5:
                    d9:a0:48:e8:96:68:82:88:a5:ea:72:a2:59:2f:be:
                    b7:d3:6e:d2:fb:3f:37:81:d8:19:a3:f7:98:70:9f:
                    5a:83:61:65:75:e6:9d:2c:5c:b7:5f:0b:31:a4:62:
                    81:b3:23:57:2f:db:89:b6:24:33:25:53:fb:02:8e:
                    e5:20:eb:61:8e:8a:a8:93:e0:5b:d6:88:08:64:eb:
                    6f:75:54:95:32:36:74:73:5c:07:26:8a:8c:64:16:
                    92:9c:b9:be:66:0e:5b:ad:d8:19:a5:95:f5:71:a5:
                    e6:ae:97:86:0c:6d:1c:a5:b3:04:42:4d:44:c5:75:
                    79:0e:9b:17:55:ca:68:74:b1:77:49:b0:9f:54:b1:
                    de:28:45:d4:a1:1f:64:79:0e:f9:eb:c1:de:7b:38:
                    46:03:09:ce:5e:84:28:ca:d3:2b:b5:bb:13:ec:6a:
                    02:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:AB:76:CD:D9:06:B8:28:89:FB:C5:B0:0B:AA:24:B4:48:B3:33:D5
            X509v3 Authority Key Identifier:
                keyid:F5:5B:47:FE:52:54:67:E8:D3:48:FF:88:27:ED:EB:15:DD:C4:30:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3iwJ43iiGh2k1abPhtSsHAeB9tuxdj4XzbGDmWc1TLsh/0/F55B47FE525467E8D348FF8827EDEB15DDC430A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F55B47FE525467E8D348FF8827EDEB15DDC430A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3iwJ43iiGh2k1abPhtSsHAeB9tuxdj4XzbGDmWc1TLsh/0/323830343a343264303a3a2f33322d313238203d3e20323637353239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:42d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:3a:40:76:8c:c8:0d:d1:0d:78:35:0e:8e:da:6e:89:80:04:
         70:7a:04:3a:25:69:76:71:1b:3b:c5:b7:11:2d:30:dd:f1:4e:
         8b:56:78:c8:ad:f4:53:53:b5:ed:66:83:bf:95:86:94:3c:8b:
         f8:ef:30:fe:c0:dd:df:8e:7c:26:be:04:5a:55:19:e3:68:fd:
         ab:85:2f:90:88:6a:f7:da:68:72:04:d5:9b:ed:48:2a:a2:ca:
         93:5d:24:bb:d6:34:d0:8e:9d:40:09:8b:35:00:e8:a3:8d:b0:
         95:2b:65:5f:aa:43:09:ec:99:74:af:52:aa:a9:62:80:b5:70:
         e7:87:d6:13:de:a2:80:16:94:f7:e7:64:8c:be:55:70:47:82:
         a4:89:d4:a8:38:5d:2f:28:65:cb:68:5b:79:13:d4:8b:e1:19:
         da:fa:dd:bf:1e:c9:56:36:a6:98:35:9a:2d:d9:59:a0:ef:00:
         35:34:e9:bb:79:92:49:cf:d2:17:a8:57:12:13:b6:80:db:df:
         e2:98:b2:57:4f:8b:46:b0:86:49:72:2d:c9:94:79:fa:3b:68:
         75:e2:e9:e2:f9:52:d1:1e:e6:1d:61:0f:ad:a2:17:d1:d6:dd:
         d1:01:0f:ce:eb:a0:6f:1c:c7:bd:b6:13:23:d8:a0:76:c3:c1:
         15:53:8c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:49:42 2025 by rpki-client