Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/323830343a313634343a3a2f33322d3438203d3e20323632393033.roa
File:                     323830343a313634343a3a2f33322d3438203d3e20323632393033.roa (raw, json)
Hash identifier:          0ZrcAy1yqfXbc6h7QM7Zk+vOIUxqyoSskLsVpTz96uY=
Subject key identifier:   ED:63:D4:8C:48:F1:6C:48:03:CF:59:94:F3:76:DD:EC:D3:1B:DA:F7
Certificate issuer:       /CN=21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63
Certificate serial:       5B79D2A6CD759CC7A53BE76261EE5B8425420025
Authority key identifier: 21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/323830343a313634343a3a2f33322d3438203d3e20323632393033.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     262903
IP address blocks:        2804:1644::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:79:d2:a6:cd:75:9c:c7:a5:3b:e7:62:61:ee:5b:84:25:42:00:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:18:ae:cb:2a:75:2f:8a:2e:50:6c:22:0a:2c:
                    8c:e4:cf:f0:da:83:46:bf:48:66:11:38:95:d8:28:
                    ee:83:82:38:7a:fb:55:7b:24:aa:3c:42:0c:2d:5e:
                    56:41:61:b0:dd:f7:f3:9b:87:dd:fc:43:e5:d1:d6:
                    4e:8b:fe:82:b2:02:90:0c:fe:f5:be:31:fa:ea:61:
                    44:08:cd:e9:b1:f7:04:f2:e3:6a:c4:9c:41:44:fa:
                    0c:5c:db:fc:9d:82:ba:56:15:ed:06:6b:01:7f:24:
                    90:7b:69:2c:ea:e4:50:4c:be:6f:9d:ae:29:f0:73:
                    94:83:e7:ab:6c:75:20:2e:54:a4:60:da:0b:4a:11:
                    54:1e:99:e2:e0:0a:de:f9:65:dc:8a:e1:71:ed:5c:
                    ef:9d:23:55:6e:0b:08:1b:c6:b4:a4:81:2f:49:51:
                    f7:79:b5:5b:0c:2f:65:aa:55:53:8b:59:7e:92:4f:
                    93:58:02:ff:0a:72:db:49:11:16:5d:16:93:ec:6b:
                    51:82:aa:42:7e:9c:bf:88:09:40:b3:64:00:68:b2:
                    74:e6:d6:3d:d2:d7:12:39:3c:61:2d:c3:47:6e:f4:
                    f1:19:e5:11:37:b0:b1:34:77:36:57:f9:8a:cd:73:
                    c0:16:ce:b1:d2:a8:16:21:c7:a7:fb:e3:78:1e:2c:
                    b6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:63:D4:8C:48:F1:6C:48:03:CF:59:94:F3:76:DD:EC:D3:1B:DA:F7
            X509v3 Authority Key Identifier:
                keyid:21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/323830343a313634343a3a2f33322d3438203d3e20323632393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1644::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:17:63:71:37:10:ec:59:eb:dc:f9:35:57:87:a6:e7:b2:4d:
         69:c2:78:60:2b:3c:68:7b:b9:f8:8f:ab:e2:87:e1:10:fc:80:
         23:22:9f:aa:ad:b7:1e:cd:46:a0:7b:84:d5:6f:c3:f5:7f:37:
         5f:c9:3d:57:55:b5:a4:d7:99:0c:46:66:79:9c:16:4f:bb:38:
         cc:ff:8d:dc:ef:80:11:e8:37:79:7c:b4:d5:4b:2f:c9:e2:38:
         6a:f8:f5:e9:23:22:67:4f:7e:48:f8:fc:6b:10:cf:5b:ba:42:
         7e:6d:9f:9d:82:2b:6a:3e:2a:61:82:ff:45:f1:18:99:13:1a:
         cb:1a:61:68:02:dc:20:32:01:09:92:46:50:96:fb:c0:0c:d6:
         f0:01:ed:ba:80:a9:16:89:ad:84:39:26:42:d7:6e:ba:8b:36:
         15:f9:6d:c7:6c:ce:76:57:3d:3f:43:c9:1f:b5:b8:00:72:a8:
         62:1a:d7:d2:ee:64:50:19:1c:79:a6:de:f2:ce:97:60:7e:4a:
         2f:21:db:1b:5a:6e:36:36:b0:63:d2:09:4f:f8:78:38:41:cc:
         a1:92:2d:53:36:c7:c0:c7:d6:a9:30:b1:8c:11:7f:64:db:de:
         a7:57:52:2d:2b:b8:b9:22:98:9a:a5:98:37:da:75:7f:1b:f9:
         aa:da:9e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:59:32 2025 by rpki-client