Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3xLveRfAWFtcm6boySKZL5aQ3SzXXfdsy66HdRn9R55b/0/323830343a313162343a3a2f33322d3332203d3e20323633343333.roa
File:                     323830343a313162343a3a2f33322d3332203d3e20323633343333.roa (raw, json)
Hash identifier:          UMLeg8J8oGi1n2dDIz/9RWK8ifmK5DZ4ViobLtJxa78=
Subject key identifier:   F9:14:34:5C:E1:FD:FA:19:03:E0:3B:68:0D:E0:AA:A0:E8:73:C5:E3
Certificate issuer:       /CN=67D877A4E50B3ECFE3C59259F9F24C748712CA67
Certificate serial:       4B05C834342E71FD936D6BC1E737B54C33EFA154
Authority key identifier: 67:D8:77:A4:E5:0B:3E:CF:E3:C5:92:59:F9:F2:4C:74:87:12:CA:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67D877A4E50B3ECFE3C59259F9F24C748712CA67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3xLveRfAWFtcm6boySKZL5aQ3SzXXfdsy66HdRn9R55b/0/323830343a313162343a3a2f33322d3332203d3e20323633343333.roa
Signing time:             Fri 05 Jul 2024 14:31:29 +0000
ROA not before:           Fri 05 Jul 2024 14:26:29 +0000
ROA not after:            Fri 04 Jul 2025 14:31:29 +0000
asID:                     263433
IP address blocks:        2804:11b4::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:05:c8:34:34:2e:71:fd:93:6d:6b:c1:e7:37:b5:4c:33:ef:a1:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67D877A4E50B3ECFE3C59259F9F24C748712CA67
        Validity
            Not Before: Jul  5 14:26:29 2024 GMT
            Not After : Jul  4 14:31:29 2025 GMT
        Subject: CN=F914345CE1FDFA1903E03B680DE0AAA0E873C5E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:00:0d:c9:39:03:87:c1:ee:58:d7:94:ec:0e:
                    c3:c8:4f:55:0b:f2:d4:ea:72:00:cf:b0:13:56:b8:
                    e7:c3:f9:c2:f9:c3:07:bd:4a:0c:8f:2e:e3:58:70:
                    28:6c:14:cf:29:6c:38:0c:d3:1f:c0:ae:86:5b:c4:
                    bb:be:38:2d:f3:58:2e:18:9f:30:e3:52:36:fa:7a:
                    6e:04:6a:5b:22:b4:c3:31:31:6e:ea:08:55:07:5e:
                    bf:62:4b:1c:87:da:b4:13:9e:a6:ba:ea:fe:89:92:
                    8f:cb:61:74:07:fd:94:4b:29:a8:24:44:74:b9:c4:
                    d5:f4:3e:78:11:ab:cb:94:c7:23:60:1e:04:12:c4:
                    be:13:86:40:67:76:40:3e:57:3d:2d:6f:8a:49:b3:
                    df:f6:18:d5:0f:fa:c5:ae:d5:cc:68:c1:72:44:56:
                    06:8b:9e:d3:7c:dc:5c:33:87:21:f0:35:3d:d2:26:
                    60:e4:04:61:78:77:08:17:83:fc:30:e4:17:12:85:
                    97:17:0a:8c:50:1b:6c:97:99:ad:e9:0e:d5:d0:c3:
                    48:e7:28:aa:43:b7:40:ef:7e:9e:54:7b:6a:e0:57:
                    7d:2c:11:90:5f:53:f9:8a:bf:08:43:ec:16:f0:be:
                    f2:92:86:24:91:09:24:a4:1b:5c:fc:5b:1b:45:72:
                    e3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:14:34:5C:E1:FD:FA:19:03:E0:3B:68:0D:E0:AA:A0:E8:73:C5:E3
            X509v3 Authority Key Identifier:
                keyid:67:D8:77:A4:E5:0B:3E:CF:E3:C5:92:59:F9:F2:4C:74:87:12:CA:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3xLveRfAWFtcm6boySKZL5aQ3SzXXfdsy66HdRn9R55b/0/67D877A4E50B3ECFE3C59259F9F24C748712CA67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67D877A4E50B3ECFE3C59259F9F24C748712CA67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3xLveRfAWFtcm6boySKZL5aQ3SzXXfdsy66HdRn9R55b/0/323830343a313162343a3a2f33322d3332203d3e20323633343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:11b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:1c:87:04:9d:bb:c9:a2:65:93:d1:9d:d8:27:c6:e6:83:fb:
         de:7a:4f:d7:6c:76:5f:b5:ca:3b:f9:ba:31:aa:52:ad:a9:4d:
         2a:0c:52:76:2c:3b:3b:45:02:cf:03:b6:69:c8:b9:44:a1:9b:
         39:95:2f:63:b5:ff:a0:96:8e:80:83:7a:b3:de:b2:c9:b5:93:
         34:c2:90:13:b9:ef:ef:c0:06:a0:c4:4d:29:62:87:96:c0:7e:
         48:d3:87:25:0b:57:c8:f3:9a:71:18:0a:7c:f0:89:81:49:53:
         80:a9:bc:88:0f:7b:c6:18:f1:6f:1a:10:10:4e:93:0f:52:9a:
         10:c6:e4:80:6e:b3:f7:c5:a2:a2:61:e6:87:af:55:32:d6:87:
         52:3b:c1:f6:be:f2:8e:16:32:4d:ca:48:0b:12:6e:71:35:2c:
         02:63:b0:d8:87:c4:66:09:60:ca:72:7a:4b:4b:e1:f1:6f:cc:
         f7:ae:c8:3e:b5:4d:2a:88:73:7d:4d:75:01:ff:43:e7:87:cb:
         b4:75:2e:71:2b:0b:52:2a:3b:d5:1a:e5:f3:01:f2:1f:77:f1:
         82:10:a2:23:f2:2a:23:4b:a2:44:ee:9d:ce:ce:8a:1c:f0:ae:
         c2:ce:fa:b9:6d:fd:ff:59:6b:b8:0c:d7:27:ff:01:7e:45:8b:
         82:0c:da:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:35:32 2025 by rpki-client