Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/323830343a333137633a3a2f33322d313238203d3e20323635303138.roa
File:                     323830343a333137633a3a2f33322d313238203d3e20323635303138.roa (raw, json)
Hash identifier:          TdQWmA3g5KcnnKGG7lojxeBCJ6mCdiNRqCdI6kwddto=
Subject key identifier:   1F:74:F3:E8:BB:BB:26:23:E1:5D:2D:27:C0:D6:BD:8A:91:BF:1C:5C
Certificate issuer:       /CN=C378CD017B458D4E80A237183E25D737947748E3
Certificate serial:       2ED1EFE6A771EF8A0BECCF47A9204B73A8D22AC6
Authority key identifier: C3:78:CD:01:7B:45:8D:4E:80:A2:37:18:3E:25:D7:37:94:77:48:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C378CD017B458D4E80A237183E25D737947748E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/323830343a333137633a3a2f33322d313238203d3e20323635303138.roa
Signing time:             Thu 15 Feb 2024 05:13:22 +0000
ROA not before:           Thu 15 Feb 2024 05:08:22 +0000
ROA not after:            Thu 13 Feb 2025 05:13:22 +0000
asID:                     265018
IP address blocks:        2804:317c::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:d1:ef:e6:a7:71:ef:8a:0b:ec:cf:47:a9:20:4b:73:a8:d2:2a:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C378CD017B458D4E80A237183E25D737947748E3
        Validity
            Not Before: Feb 15 05:08:22 2024 GMT
            Not After : Feb 13 05:13:22 2025 GMT
        Subject: CN=1F74F3E8BBBB2623E15D2D27C0D6BD8A91BF1C5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1b:10:a8:69:78:cf:37:b0:49:b7:17:12:fe:
                    1c:d6:e0:f7:2b:2a:01:db:d5:8b:ea:2b:8a:83:09:
                    9f:97:f3:d9:e1:ac:c6:74:6a:f8:1f:ad:11:ab:71:
                    53:64:44:09:e3:95:9b:c6:fd:36:0a:d9:75:76:9d:
                    03:47:e5:3e:3b:62:66:05:0a:d1:46:4d:09:d4:ca:
                    9c:47:d7:2f:24:c8:1d:95:18:f8:4f:53:34:16:08:
                    d6:ba:95:d3:7b:aa:28:78:e5:da:ba:d5:74:06:6f:
                    05:64:a8:b5:ea:4b:a3:72:f2:70:79:a9:b8:64:89:
                    61:f6:76:33:8a:01:d7:5b:96:4c:8a:a2:cb:e6:5e:
                    04:bc:43:41:e2:a7:19:f7:42:d7:33:21:b6:ae:b3:
                    ca:ba:11:9d:92:41:9a:75:22:a6:1e:1c:83:fc:90:
                    96:2a:a5:c7:f2:ef:ed:eb:8b:da:99:ed:29:d0:28:
                    b9:61:23:5d:8e:d1:c9:d9:18:81:25:b8:cb:bd:ca:
                    e8:4f:ac:85:e2:7d:2e:40:fb:fe:57:54:4a:32:08:
                    ab:5c:9d:ee:c3:1b:a8:02:bc:62:45:4f:9d:e3:4f:
                    75:b2:10:4c:55:61:8a:c9:f6:eb:14:5e:cc:0f:74:
                    f5:0a:d6:05:ac:55:68:85:96:f1:a8:a7:77:c4:81:
                    c2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:74:F3:E8:BB:BB:26:23:E1:5D:2D:27:C0:D6:BD:8A:91:BF:1C:5C
            X509v3 Authority Key Identifier:
                keyid:C3:78:CD:01:7B:45:8D:4E:80:A2:37:18:3E:25:D7:37:94:77:48:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/C378CD017B458D4E80A237183E25D737947748E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C378CD017B458D4E80A237183E25D737947748E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/323830343a333137633a3a2f33322d313238203d3e20323635303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:317c::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:d3:bd:ac:2b:5e:2d:a9:36:07:c2:04:b8:ab:23:07:b9:05:
         8b:08:9f:12:a3:07:46:41:bc:2d:9c:ce:9a:6d:ad:a4:d0:82:
         0d:52:ad:75:65:4a:d1:b8:d7:0c:29:70:03:61:7e:ae:4b:39:
         04:41:d3:57:3c:73:35:f4:c8:d9:2d:6a:ea:15:7b:05:b2:45:
         cb:49:70:03:05:43:25:12:5a:8f:67:4d:51:b4:a2:98:a4:20:
         25:83:5b:0f:0e:c5:75:56:aa:7d:0b:3b:bb:f2:48:3d:fd:95:
         ae:9e:ac:5f:e6:71:81:00:13:86:2b:c2:2a:3b:39:43:5d:d8:
         7c:83:01:3f:9d:40:99:61:88:3a:54:24:02:fb:ec:f4:ef:dc:
         de:de:e8:1a:3e:eb:b5:b5:e9:a0:26:ee:69:17:a8:46:8b:a3:
         a5:0c:03:dd:bc:f3:68:b7:46:7e:3e:88:8b:ac:47:51:b0:77:
         89:61:ba:b5:e3:a0:07:20:c1:e7:8f:6b:0b:2c:f2:52:4f:e1:
         fc:13:35:01:e1:68:40:8f:9a:7a:b6:75:c5:58:6e:60:61:08:
         3b:5f:eb:c3:49:27:05:33:99:fc:11:cb:da:8c:6a:ac:70:76:
         37:7b:b9:ee:05:3b:bc:56:3f:e4:48:97:b2:08:5b:d5:ea:ea:
         53:5b:ef:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:58:07 2025 by rpki-client