Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tiTeGW5HGXv8EvyLZd1UN9ytCb5AC5uHfLecuoKCSKN/0/323830343a343234383a3a2f33322d3332203d3e20323637343930.roa
File:                     323830343a343234383a3a2f33322d3332203d3e20323637343930.roa (raw, json)
Hash identifier:          LfSd2rznInZHECUGt3aibj4m5UCO62tkzCH0HVFVYDs=
Subject key identifier:   1F:68:CD:8E:06:03:1E:59:9F:A8:D3:85:8F:69:A2:49:2E:45:2F:E8
Certificate issuer:       /CN=43BEC321D6E1EF3DFD15CA67C170ECF9A94425B6
Certificate serial:       0CD746D1DB771EF55FB04C7DD6D3AC8E3DA7871A
Authority key identifier: 43:BE:C3:21:D6:E1:EF:3D:FD:15:CA:67:C1:70:EC:F9:A9:44:25:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43BEC321D6E1EF3DFD15CA67C170ECF9A94425B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tiTeGW5HGXv8EvyLZd1UN9ytCb5AC5uHfLecuoKCSKN/0/323830343a343234383a3a2f33322d3332203d3e20323637343930.roa
Signing time:             Sat 04 May 2024 04:52:28 +0000
ROA not before:           Sat 04 May 2024 04:47:28 +0000
ROA not after:            Sat 03 May 2025 04:52:28 +0000
asID:                     267490
IP address blocks:        2804:4248::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:d7:46:d1:db:77:1e:f5:5f:b0:4c:7d:d6:d3:ac:8e:3d:a7:87:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43BEC321D6E1EF3DFD15CA67C170ECF9A94425B6
        Validity
            Not Before: May  4 04:47:28 2024 GMT
            Not After : May  3 04:52:28 2025 GMT
        Subject: CN=1F68CD8E06031E599FA8D3858F69A2492E452FE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:72:dc:08:14:75:58:25:c2:f6:2e:99:31:56:
                    b4:da:34:ff:ec:b0:71:2b:7b:c3:53:04:83:24:3d:
                    15:ba:3a:b3:ab:97:4d:f2:8a:7f:9c:94:4a:dd:ce:
                    6e:3d:50:1b:f4:1e:6d:b6:68:0d:f9:51:05:2a:c9:
                    9b:74:40:dc:78:8f:89:3e:f4:fc:a5:7a:ec:02:e4:
                    10:0e:4b:5f:75:9e:57:47:0f:51:41:4d:17:f7:43:
                    a3:0e:a5:49:45:21:91:b1:96:08:57:97:4e:fb:30:
                    ca:b8:2c:53:b1:b3:55:cf:03:e6:b2:e6:e8:2f:32:
                    bd:70:7f:cb:07:46:0b:5c:ee:6c:78:4c:dc:d8:59:
                    48:dc:a0:31:4d:a9:e5:d1:04:77:0d:b6:68:bd:2c:
                    fb:fc:8f:da:10:4c:09:fe:f8:64:20:db:2d:f8:25:
                    09:3d:df:a7:38:36:6f:3c:71:8c:3a:cc:4c:91:83:
                    af:58:70:09:60:09:f4:3f:4d:b4:ed:0f:ca:79:af:
                    2b:48:07:47:b6:1e:27:ff:4b:09:b8:ee:6e:70:17:
                    8b:7d:9c:04:ba:2f:21:13:15:2c:17:d5:b8:2d:63:
                    c4:b5:02:66:10:c6:9c:71:61:fc:ee:f6:26:27:37:
                    d1:ff:aa:1e:e0:0b:4e:a4:c6:2f:b0:b8:39:c9:85:
                    13:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:68:CD:8E:06:03:1E:59:9F:A8:D3:85:8F:69:A2:49:2E:45:2F:E8
            X509v3 Authority Key Identifier:
                keyid:43:BE:C3:21:D6:E1:EF:3D:FD:15:CA:67:C1:70:EC:F9:A9:44:25:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tiTeGW5HGXv8EvyLZd1UN9ytCb5AC5uHfLecuoKCSKN/0/43BEC321D6E1EF3DFD15CA67C170ECF9A94425B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43BEC321D6E1EF3DFD15CA67C170ECF9A94425B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tiTeGW5HGXv8EvyLZd1UN9ytCb5AC5uHfLecuoKCSKN/0/323830343a343234383a3a2f33322d3332203d3e20323637343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4248::/32

    Signature Algorithm: sha256WithRSAEncryption
         ac:13:c7:e9:17:a7:fc:32:62:aa:8a:aa:bf:6a:21:4e:3a:83:
         e4:7b:e2:b7:73:5e:75:f3:e7:54:e4:ca:d0:61:71:ab:c7:59:
         fa:38:b5:50:94:89:e9:79:8a:2b:08:7d:f0:81:81:e9:4d:de:
         75:f1:c5:ed:3d:42:5a:b1:ce:19:f4:8e:f0:7b:55:ab:20:32:
         1e:d4:f1:1d:0c:b7:05:85:a7:77:a9:be:93:05:cf:8f:e8:43:
         2c:27:ab:27:3d:f3:0b:46:43:ce:54:33:9c:fa:73:fa:78:3c:
         1a:0c:1e:4e:7a:15:68:41:71:c7:30:7a:c7:ec:ae:cc:4c:c0:
         e7:9a:dd:91:44:14:bc:d9:7f:9c:8c:3c:91:d3:77:78:ba:51:
         3f:ff:4b:84:ed:d6:79:30:4d:34:e0:76:92:9b:16:fa:c5:66:
         99:25:98:3d:a1:37:65:7d:1a:e7:48:0b:1a:ed:34:8a:81:82:
         44:fa:3b:21:55:3d:4d:d0:12:d0:11:7a:b5:95:2c:d9:75:43:
         e6:f8:27:e1:55:f8:ad:d7:59:2c:bc:9e:71:4f:05:92:61:45:
         c9:d5:7f:d6:f4:b6:0f:f2:ca:a2:ba:35:88:ae:42:3e:57:c5:
         db:cf:be:1f:df:a7:c5:c7:1f:06:ed:6a:1d:f3:79:77:6e:ab:
         b3:7e:f0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:51 2025 by rpki-client