Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/323830343a366465633a31303a3a2f34342d3434203d3e203430363736.roa
File:                     323830343a366465633a31303a3a2f34342d3434203d3e203430363736.roa (raw, json)
Hash identifier:          OdMW2Hj5+KQmQhTLqiTFPVcaAB7O9NTcrCAjkeMgJ0w=
Subject key identifier:   29:DB:4C:6D:ED:10:31:A8:69:3F:9C:89:FF:B6:D1:36:00:40:63:01
Certificate issuer:       /CN=B5A13510DBDC20D878560D32887F24F4B857C080
Certificate serial:       2C3FFC956A95E8AA490B268430C6AA24DC0756FD
Authority key identifier: B5:A1:35:10:DB:DC:20:D8:78:56:0D:32:88:7F:24:F4:B8:57:C0:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5A13510DBDC20D878560D32887F24F4B857C080.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/323830343a366465633a31303a3a2f34342d3434203d3e203430363736.roa
Signing time:             Thu 12 Dec 2024 15:27:42 +0000
ROA not before:           Thu 12 Dec 2024 15:22:42 +0000
ROA not after:            Thu 11 Dec 2025 15:27:42 +0000
asID:                     40676
IP address blocks:        2804:6dec:10::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:3f:fc:95:6a:95:e8:aa:49:0b:26:84:30:c6:aa:24:dc:07:56:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5A13510DBDC20D878560D32887F24F4B857C080
        Validity
            Not Before: Dec 12 15:22:42 2024 GMT
            Not After : Dec 11 15:27:42 2025 GMT
        Subject: CN=29DB4C6DED1031A8693F9C89FFB6D13600406301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:da:a5:00:ba:a9:05:64:8d:fc:4e:64:d6:cf:
                    c0:43:f7:94:6c:56:fd:5d:d3:0a:bb:9b:8c:8c:80:
                    8d:72:0d:53:c1:3f:83:cf:b6:95:ff:e8:c4:1c:1c:
                    72:87:eb:02:22:45:e2:4e:a7:73:83:7c:38:61:ad:
                    a9:b8:1f:9d:74:37:e9:fb:9e:d7:ac:d7:ad:25:98:
                    74:ab:ec:aa:c6:35:90:f6:10:9a:51:18:2e:a0:64:
                    4f:5c:01:eb:d0:83:ee:60:79:12:10:25:a0:f5:7d:
                    9c:27:e8:45:fc:a9:28:e6:29:b3:ab:c7:75:4c:3a:
                    11:51:f3:09:0f:27:67:18:f3:4d:f9:5c:6e:4e:79:
                    fd:74:de:15:17:a8:20:fe:08:6a:6b:a3:45:04:68:
                    a1:ec:41:a3:6c:b3:6d:cb:75:06:2d:19:15:5f:f0:
                    a2:9c:54:f1:fc:22:74:e9:7d:82:9e:ed:d9:1a:0c:
                    68:24:85:06:c8:88:74:ab:c8:aa:2e:0a:df:af:58:
                    3d:fc:2c:ff:ae:75:80:a2:7b:72:85:a2:7d:32:88:
                    b8:c4:66:42:a6:d1:f2:ed:0f:66:ff:35:5d:4e:a6:
                    b8:a1:50:00:2a:18:d3:7f:a5:f7:1e:54:bf:59:7d:
                    7c:0a:1b:a5:93:59:be:ae:37:ae:da:13:45:0a:42:
                    72:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:DB:4C:6D:ED:10:31:A8:69:3F:9C:89:FF:B6:D1:36:00:40:63:01
            X509v3 Authority Key Identifier:
                keyid:B5:A1:35:10:DB:DC:20:D8:78:56:0D:32:88:7F:24:F4:B8:57:C0:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/B5A13510DBDC20D878560D32887F24F4B857C080.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5A13510DBDC20D878560D32887F24F4B857C080.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/323830343a366465633a31303a3a2f34342d3434203d3e203430363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6dec:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         a1:fd:c2:6c:f4:93:83:05:77:b9:a1:b0:4e:0d:5b:7d:ef:2a:
         fe:38:98:a2:1b:e2:be:01:34:f6:85:c9:8f:52:58:f8:15:4f:
         45:7e:f0:78:c6:21:fd:7d:51:77:3c:81:fb:14:25:4e:4a:fd:
         2d:e1:df:9e:72:1f:f8:e4:89:54:2c:54:7d:52:e7:66:f2:cf:
         cf:cd:ff:70:09:e5:d7:fe:1f:62:0e:a1:1c:2d:92:cc:75:f0:
         a2:1c:ee:cc:bd:e6:20:89:33:c6:52:b1:18:48:8b:6e:d4:c4:
         f8:67:be:48:14:a3:ad:5d:b0:1d:46:6d:ee:b6:72:9e:16:1d:
         93:df:15:6d:74:36:e4:70:eb:2f:3e:13:f3:ae:8f:ee:3f:ba:
         e0:d3:31:77:1a:37:f8:9e:47:b2:47:e8:97:c2:ed:2d:a5:56:
         c1:d3:e4:03:14:ba:ad:d5:a7:ba:05:f2:a3:9c:97:7b:34:7e:
         ea:4d:98:e7:18:d2:00:a4:95:8f:94:df:d1:28:a0:3f:8f:36:
         f6:ec:75:c2:9b:6d:d3:1d:45:4d:5d:77:90:86:15:60:7c:f4:
         f3:6e:d7:28:17:50:09:75:08:40:18:9e:2b:01:35:8d:93:59:
         19:25:8b:a9:71:bd:8e:72:1b:0b:08:3d:7d:19:2c:07:31:5f:
         d7:68:05:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:12:19 2025 by rpki-client