Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4BMXt6pXVYueaQZD8qpd1hMEq1RKBGkV3AocBFHRAm8T/1/323830343a346138633a3a2f33322d3334203d3e20323637323438.roa
File:                     323830343a346138633a3a2f33322d3334203d3e20323637323438.roa (raw, json)
Hash identifier:          HXBPNNM9JK77Qjs6rWwR8L8yvx4LZpjy3+ee8Pytg0E=
Subject key identifier:   2A:43:7C:F5:B5:A9:29:34:B9:5B:6A:DA:9E:85:1F:CC:93:06:47:4B
Certificate issuer:       /CN=481B24AC6523E8C3FCCEDE9FC8B8A74CC2C4E5F9
Certificate serial:       1F2AC482E476B96CA2A225CB40E96FE79C91C6A0
Authority key identifier: 48:1B:24:AC:65:23:E8:C3:FC:CE:DE:9F:C8:B8:A7:4C:C2:C4:E5:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/481B24AC6523E8C3FCCEDE9FC8B8A74CC2C4E5F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4BMXt6pXVYueaQZD8qpd1hMEq1RKBGkV3AocBFHRAm8T/1/323830343a346138633a3a2f33322d3334203d3e20323637323438.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     267248
IP address blocks:        2804:4a8c::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:2a:c4:82:e4:76:b9:6c:a2:a2:25:cb:40:e9:6f:e7:9c:91:c6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B24AC6523E8C3FCCEDE9FC8B8A74CC2C4E5F9
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=2A437CF5B5A92934B95B6ADA9E851FCC9306474B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:44:de:81:ef:27:cd:9b:00:bc:0c:4b:39:9f:
                    a1:c4:e4:04:9b:c9:fc:5a:de:b2:3d:37:48:9d:72:
                    a3:a3:fb:eb:24:cb:ef:46:be:a5:f8:9a:41:fa:88:
                    68:1f:75:40:3d:14:d3:cd:9a:87:26:41:ab:7f:57:
                    76:28:d4:55:9d:2f:08:ff:a6:cc:ab:c9:aa:50:26:
                    c0:80:5d:b7:83:81:b7:2d:08:7f:2a:cd:8d:e7:8b:
                    fd:f8:69:6c:75:58:94:5f:c7:21:3f:68:f6:15:64:
                    ee:ce:93:ce:74:8a:f4:fd:f5:3b:99:cc:1a:0f:81:
                    5b:72:4c:dd:5d:8d:dc:4a:9e:2e:b3:06:f0:ac:a5:
                    aa:53:54:a1:12:53:7f:31:15:76:9e:3e:d2:1f:cb:
                    09:3d:9c:7c:26:ae:d8:6f:06:5d:22:d5:cb:93:7f:
                    41:a7:00:47:f7:92:c1:08:9d:ad:0d:6a:b6:73:6f:
                    61:97:a6:df:2f:9f:62:09:59:43:c8:f7:4a:95:d0:
                    1d:bf:b3:60:0d:da:8d:64:e3:2c:f2:ff:ee:17:96:
                    39:62:86:56:28:1b:4e:e9:36:ca:8b:4d:6c:e2:0b:
                    2b:f7:ad:85:10:71:c9:dc:49:9d:f8:eb:32:e7:c3:
                    f6:22:22:83:23:a9:3b:4b:5c:19:a1:dc:f0:33:1e:
                    94:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:43:7C:F5:B5:A9:29:34:B9:5B:6A:DA:9E:85:1F:CC:93:06:47:4B
            X509v3 Authority Key Identifier:
                keyid:48:1B:24:AC:65:23:E8:C3:FC:CE:DE:9F:C8:B8:A7:4C:C2:C4:E5:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4BMXt6pXVYueaQZD8qpd1hMEq1RKBGkV3AocBFHRAm8T/1/481B24AC6523E8C3FCCEDE9FC8B8A74CC2C4E5F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/481B24AC6523E8C3FCCEDE9FC8B8A74CC2C4E5F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4BMXt6pXVYueaQZD8qpd1hMEq1RKBGkV3AocBFHRAm8T/1/323830343a346138633a3a2f33322d3334203d3e20323637323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a8c::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:9e:0d:d7:24:31:62:37:2b:5f:0a:9d:92:7f:21:c7:9e:3a:
         dc:e1:03:75:8c:98:81:53:c0:f8:39:93:3f:3d:71:e3:8b:14:
         d1:49:79:27:53:61:bf:16:ff:de:e4:d9:25:e6:30:7c:9a:7a:
         1a:c6:ac:54:e1:ac:ba:79:d9:ae:17:37:5d:ae:bd:16:83:ea:
         7a:ae:d9:04:a1:e4:9a:50:aa:5a:d7:cc:d0:fd:ab:3c:9e:16:
         0c:c8:ff:f6:8e:6a:6a:7d:55:d0:1f:12:35:42:c3:47:14:a5:
         42:bd:fa:2f:e6:7e:99:68:c5:94:98:4e:71:6a:fc:ea:20:57:
         b7:97:b7:d3:8e:1c:55:f4:72:21:33:c2:de:f6:f8:3d:8a:8f:
         ac:f9:36:b7:f8:dc:a3:a0:a3:b7:34:44:81:af:e3:96:e8:cf:
         38:37:d4:e4:77:a3:75:03:6e:9c:03:09:48:cd:d0:3d:a0:dc:
         f1:35:d8:2f:c1:f8:67:a6:ae:cf:19:81:e3:76:a3:98:33:22:
         6b:30:70:f8:ad:1b:03:ef:c0:b7:a0:38:74:ad:08:43:99:79:
         74:6b:42:df:fb:34:54:17:eb:31:c1:95:b1:78:f0:8c:17:b0:
         c9:9e:78:ab:6e:31:3b:bd:70:a4:c0:4b:a7:10:78:e8:d1:67:
         7d:69:d3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:33:03 2025 by rpki-client