Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4BmsSUjpBnmdQELg4HupQgpQQsxe3ZvXGge5hGuYS76F/0/323830343a386431343a3a2f33322d3438203d3e20323733333333.roa
File:                     323830343a386431343a3a2f33322d3438203d3e20323733333333.roa (raw, json)
Hash identifier:          DLmVVPY5cHll3i9qUR83Cirnyw+evJ9MgQC40/cLNN4=
Subject key identifier:   AD:C2:34:22:BD:D7:B0:46:BD:D8:FD:C8:F3:5F:50:95:15:B1:0B:B2
Certificate issuer:       /CN=A3B3AB01804A8E42E7821AA25864459B1766D25A
Certificate serial:       5A1DED347D27F1F1447CDA3F81DBB9AA99210769
Authority key identifier: A3:B3:AB:01:80:4A:8E:42:E7:82:1A:A2:58:64:45:9B:17:66:D2:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3B3AB01804A8E42E7821AA25864459B1766D25A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4BmsSUjpBnmdQELg4HupQgpQQsxe3ZvXGge5hGuYS76F/0/323830343a386431343a3a2f33322d3438203d3e20323733333333.roa
Signing time:             Wed 04 Dec 2024 23:13:38 +0000
ROA not before:           Wed 04 Dec 2024 23:08:38 +0000
ROA not after:            Wed 03 Dec 2025 23:13:38 +0000
asID:                     273333
IP address blocks:        2804:8d14::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:1d:ed:34:7d:27:f1:f1:44:7c:da:3f:81:db:b9:aa:99:21:07:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3B3AB01804A8E42E7821AA25864459B1766D25A
        Validity
            Not Before: Dec  4 23:08:38 2024 GMT
            Not After : Dec  3 23:13:38 2025 GMT
        Subject: CN=ADC23422BDD7B046BDD8FDC8F35F509515B10BB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:87:75:3e:90:dd:b4:e5:07:96:02:4f:04:a1:
                    a5:f4:1e:be:36:27:19:60:7b:51:17:a1:12:bb:40:
                    9b:f9:c2:52:7a:8e:4b:a0:14:dd:d1:9a:b2:23:05:
                    cc:cb:7e:8a:b1:21:95:a2:f5:ae:53:82:13:f0:dc:
                    b1:d9:74:5c:ab:45:06:56:e7:31:1b:5d:0f:50:7f:
                    72:11:6f:19:c7:97:37:1c:19:19:12:40:f8:5c:e0:
                    9a:89:c4:63:c2:62:ea:dc:fd:49:1a:a4:a2:e5:e7:
                    8b:2a:5e:55:cf:92:88:a7:2b:33:07:fc:c7:76:67:
                    10:c9:aa:8d:da:6a:53:98:ce:5e:2f:3c:a8:4e:3e:
                    ce:c7:3a:1d:98:b1:0a:7e:1b:eb:2f:d1:05:d6:db:
                    71:65:18:a9:35:ff:f5:4b:5b:30:6b:40:d1:94:63:
                    2d:41:23:6b:5e:8e:f8:f5:c3:e3:4b:e3:c1:30:5e:
                    85:b3:70:68:21:6c:82:dc:d4:c5:06:9c:cd:44:9c:
                    e9:98:20:fe:e4:cd:ea:26:2d:67:51:c0:5b:4d:99:
                    dc:7f:f3:82:d5:52:07:e1:27:cf:ce:6f:7b:b6:c5:
                    dc:44:b1:26:0a:b1:06:8c:3c:a2:e7:1e:33:71:50:
                    67:7a:8d:a1:a9:d5:e9:e2:2d:c9:aa:bb:25:cb:9c:
                    97:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C2:34:22:BD:D7:B0:46:BD:D8:FD:C8:F3:5F:50:95:15:B1:0B:B2
            X509v3 Authority Key Identifier:
                keyid:A3:B3:AB:01:80:4A:8E:42:E7:82:1A:A2:58:64:45:9B:17:66:D2:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4BmsSUjpBnmdQELg4HupQgpQQsxe3ZvXGge5hGuYS76F/0/A3B3AB01804A8E42E7821AA25864459B1766D25A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3B3AB01804A8E42E7821AA25864459B1766D25A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4BmsSUjpBnmdQELg4HupQgpQQsxe3ZvXGge5hGuYS76F/0/323830343a386431343a3a2f33322d3438203d3e20323733333333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8d14::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:4c:a0:dd:0b:6e:69:71:ab:fb:d1:ac:58:c8:a4:9b:ab:37:
         74:a7:b5:25:9a:08:b4:46:57:40:19:20:17:62:b2:22:74:a5:
         75:c8:04:69:49:75:83:ff:13:60:6e:0c:ee:cc:5d:e3:87:92:
         4d:e2:01:0d:b0:64:bd:2e:c4:66:9f:6b:7c:1d:2c:56:64:51:
         40:8d:b5:3a:fa:55:14:71:fc:a4:fd:14:a6:0e:52:93:1b:68:
         08:d3:ec:e8:ca:29:81:35:2f:fc:ba:4b:06:43:37:66:98:ff:
         9b:de:2a:cc:60:f1:e0:ae:0f:70:9c:5c:3a:55:cd:25:77:ba:
         ae:d4:ed:ec:aa:03:8e:68:03:63:72:e5:76:88:d3:00:fa:7e:
         94:0b:6c:6e:c4:53:9e:bc:c4:5b:05:1f:b4:e2:4e:20:44:92:
         42:1a:8c:69:02:cb:99:29:77:22:e4:d8:35:46:46:65:39:28:
         fc:da:d2:30:92:bf:c5:b8:89:fb:92:08:e3:ba:ee:97:dd:a0:
         42:ec:9f:a2:8a:16:bb:6c:67:2a:23:60:2f:9c:9d:da:41:35:
         51:77:fd:00:88:42:57:b5:91:ee:c4:45:ea:38:b2:af:64:fd:
         74:e0:2c:3d:9f:b7:65:15:2f:1b:ac:23:ee:90:f8:d2:01:bd:
         79:53:79:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:23:25 2025 by rpki-client