Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/1/323830343a333336383a3a2f33322d3332203d3e20323635333934.roa
File:                     323830343a333336383a3a2f33322d3332203d3e20323635333934.roa (raw, json)
Hash identifier:          NCgFTUVe0RAxhIBgz5SljmXJKJVNIfhrEaSrB39ZBsA=
Subject key identifier:   46:BD:2E:23:11:F7:55:D2:2D:A9:B6:5F:2B:A0:9B:2F:83:A0:A1:6F
Certificate issuer:       /CN=A3756BDF1D16A4696DDBD8788537C2F8FB47FA72
Certificate serial:       78CDCCF2E3E251BA372FE7A8658EC014655AD214
Authority key identifier: A3:75:6B:DF:1D:16:A4:69:6D:DB:D8:78:85:37:C2:F8:FB:47:FA:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3756BDF1D16A4696DDBD8788537C2F8FB47FA72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/1/323830343a333336383a3a2f33322d3332203d3e20323635333934.roa
Signing time:             Thu 06 Mar 2025 03:00:44 +0000
ROA not before:           Thu 06 Mar 2025 02:55:44 +0000
ROA not after:            Thu 05 Mar 2026 03:00:44 +0000
asID:                     265394
IP address blocks:        2804:3368::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:cd:cc:f2:e3:e2:51:ba:37:2f:e7:a8:65:8e:c0:14:65:5a:d2:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3756BDF1D16A4696DDBD8788537C2F8FB47FA72
        Validity
            Not Before: Mar  6 02:55:44 2025 GMT
            Not After : Mar  5 03:00:44 2026 GMT
        Subject: CN=46BD2E2311F755D22DA9B65F2BA09B2F83A0A16F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7a:79:68:2c:d9:d5:68:dc:70:72:c2:83:9b:
                    c6:e1:90:c7:af:0b:64:1c:9c:d0:25:04:c4:fb:1a:
                    9f:d1:28:af:bf:ec:5b:f1:ba:fa:d7:5b:52:92:fc:
                    78:2f:c1:a3:64:fc:f4:6f:73:c3:70:6a:82:6c:79:
                    47:c3:84:5f:62:fc:9b:53:98:e4:9c:aa:2a:57:6b:
                    9f:2d:4e:49:14:19:a7:06:e2:26:b5:c6:4b:fa:13:
                    74:c8:20:5b:4b:5f:d3:1c:89:05:3a:c0:c3:40:80:
                    8d:c7:2f:a1:33:95:2b:04:7c:42:c5:44:87:32:3d:
                    ac:48:87:71:d8:04:75:69:f0:62:b8:ad:c1:eb:63:
                    bd:66:c5:cb:75:c1:a5:2e:36:43:68:d9:8b:c9:83:
                    63:e6:69:96:97:e1:a2:87:ad:c2:30:cf:0a:cf:ca:
                    eb:61:32:95:a4:ab:44:da:0d:47:a0:ac:ed:04:36:
                    80:2d:fe:33:cb:1d:6f:10:6b:f9:b0:bd:69:55:1c:
                    41:da:9c:e9:fc:23:07:59:0b:19:f2:55:f9:c6:c9:
                    34:d5:a1:17:ca:07:bc:cb:af:23:71:a5:4b:e2:14:
                    5e:a4:b2:58:eb:ca:1f:90:fe:11:e7:6c:1d:26:83:
                    12:34:36:4c:ec:9c:de:a4:04:73:64:61:2d:37:aa:
                    75:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:BD:2E:23:11:F7:55:D2:2D:A9:B6:5F:2B:A0:9B:2F:83:A0:A1:6F
            X509v3 Authority Key Identifier:
                keyid:A3:75:6B:DF:1D:16:A4:69:6D:DB:D8:78:85:37:C2:F8:FB:47:FA:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/1/A3756BDF1D16A4696DDBD8788537C2F8FB47FA72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3756BDF1D16A4696DDBD8788537C2F8FB47FA72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/1/323830343a333336383a3a2f33322d3332203d3e20323635333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3368::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:d6:00:19:2d:05:9f:4a:05:8a:13:0c:91:07:40:5f:ad:7d:
         2c:fb:4e:2e:77:68:65:77:f6:a4:ab:bc:ee:9b:6f:f3:ba:3a:
         ed:34:8f:d8:d1:f8:e7:35:04:46:3a:76:32:9b:df:0c:17:53:
         c7:41:b2:ef:77:b7:9b:77:1c:fc:3b:63:46:fe:f5:ea:3f:b6:
         d4:ae:cb:5b:4a:6b:d6:2a:56:97:16:57:a0:54:22:70:63:cc:
         b9:49:fd:23:d4:3f:1c:48:84:08:6b:15:d6:e6:88:eb:dc:b6:
         84:03:f9:27:5b:23:43:3a:dc:c6:d7:bf:f3:b7:fe:18:aa:a0:
         3d:c2:bd:92:50:ff:65:3f:b4:7d:5f:11:0a:90:67:da:be:22:
         66:0c:e8:40:77:54:93:bb:4e:7d:ef:6d:45:3b:5a:8e:b1:32:
         92:02:24:98:09:d8:b0:27:d6:25:77:2a:5b:29:97:40:e6:29:
         a7:9b:a3:74:0f:f6:f9:66:b9:da:fd:71:7f:50:db:a1:f7:ae:
         32:0a:23:f5:c4:74:0d:e7:d6:4f:f9:a9:61:80:fc:9b:76:d4:
         a6:0f:d8:06:6e:31:73:4f:d1:ad:ea:42:34:36:5a:2e:25:e3:
         99:7b:68:9b:77:76:cc:2d:cf:ab:a2:ae:ad:15:3d:fb:07:97:
         26:e1:a6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:58:53 2025 by rpki-client