Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/0/323830343a366163383a3130343a3a2f34382d3438203d3e20323730333538.roa
File:                     323830343a366163383a3130343a3a2f34382d3438203d3e20323730333538.roa (raw, json)
Hash identifier:          g7hUj+6iBIbEwXEf0+XND88JwyzgHn2/ZFsJw1L3iuY=
Subject key identifier:   42:EE:83:50:2B:C7:47:A3:47:56:ED:98:30:D1:65:E0:94:7C:DB:69
Certificate issuer:       /CN=61F4874E6474A8E5CE242BD1FB7854FA15297D85
Certificate serial:       5E8D4DEC68C2218B6121A6F9AF428776ADC1D714
Authority key identifier: 61:F4:87:4E:64:74:A8:E5:CE:24:2B:D1:FB:78:54:FA:15:29:7D:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61F4874E6474A8E5CE242BD1FB7854FA15297D85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/0/323830343a366163383a3130343a3a2f34382d3438203d3e20323730333538.roa
Signing time:             Fri 24 Mar 2023 01:47:12 +0000
ROA not before:           Fri 24 Mar 2023 01:42:12 +0000
ROA not after:            Fri 22 Mar 2024 01:47:12 +0000
asID:                     270358
IP address blocks:        2804:6ac8:104::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:8d:4d:ec:68:c2:21:8b:61:21:a6:f9:af:42:87:76:ad:c1:d7:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61F4874E6474A8E5CE242BD1FB7854FA15297D85
        Validity
            Not Before: Mar 24 01:42:12 2023 GMT
            Not After : Mar 22 01:47:12 2024 GMT
        Subject: CN=42EE83502BC747A34756ED9830D165E0947CDB69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6a:c5:dd:bc:45:e9:0c:be:6c:f0:6c:5d:ea:
                    0e:b9:ed:79:21:fd:4f:31:ed:d6:38:dd:68:5b:8c:
                    d8:dc:53:b1:bb:22:1d:c8:19:d9:ed:ea:2d:08:6d:
                    33:3b:91:10:93:94:f7:5f:6f:e9:f0:31:17:ca:3d:
                    ec:4c:da:b7:fd:9a:4b:76:8d:34:78:c9:6a:2a:a4:
                    f1:37:82:a7:ff:20:5d:c3:da:a9:93:d9:4e:0a:93:
                    2a:d5:da:4f:22:eb:5e:1b:f1:d8:6f:2e:01:a3:86:
                    6d:bd:74:ed:80:96:af:6c:65:39:9d:2e:ac:11:94:
                    d8:cb:48:a1:f7:6a:3d:0f:48:8f:c0:f0:7c:ea:fe:
                    4f:99:af:e5:57:d2:2d:81:33:9d:62:89:2d:1a:d6:
                    5a:b5:96:88:6f:bd:93:59:93:af:46:55:0f:17:26:
                    d4:2e:25:97:c9:4a:97:81:2d:cf:6e:74:6a:b5:65:
                    57:1b:14:4b:4b:9b:86:05:38:b2:59:94:c8:38:92:
                    47:2c:79:c3:a7:ba:5f:4c:0e:d5:0f:ba:ac:7d:36:
                    a9:99:f6:81:a2:c7:f9:e3:41:59:50:31:7c:a2:6c:
                    79:da:20:5f:c1:9e:f0:71:b4:b3:87:c8:bd:cd:d5:
                    83:44:a3:2d:be:df:31:48:e8:eb:ac:a1:a2:9c:90:
                    8f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:EE:83:50:2B:C7:47:A3:47:56:ED:98:30:D1:65:E0:94:7C:DB:69
            X509v3 Authority Key Identifier:
                keyid:61:F4:87:4E:64:74:A8:E5:CE:24:2B:D1:FB:78:54:FA:15:29:7D:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/0/61F4874E6474A8E5CE242BD1FB7854FA15297D85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61F4874E6474A8E5CE242BD1FB7854FA15297D85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/0/323830343a366163383a3130343a3a2f34382d3438203d3e20323730333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ac8:104::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:96:9f:02:b0:99:c2:70:45:c3:45:59:8e:9d:98:5b:37:65:
         a9:ff:d8:30:5c:67:84:f5:7f:2a:1f:9f:0e:f7:9a:f3:4e:b5:
         c2:d2:f6:28:fa:95:bc:cd:3f:ec:18:5c:5c:ea:46:05:d7:42:
         70:3e:3c:d3:a9:47:88:65:9b:bc:01:af:79:09:0d:4b:95:19:
         d0:2c:3c:70:f8:3c:bb:7b:64:10:f0:d6:2f:e3:97:14:42:52:
         60:80:1c:0e:63:e2:bc:35:79:24:0e:32:9e:6d:c9:62:03:7a:
         6d:f8:13:2e:2d:ee:f2:78:ce:d4:b7:54:b8:6c:97:4d:d8:60:
         22:ad:fa:1e:62:e8:31:6c:77:46:f3:9a:f6:af:bd:44:2d:ce:
         7e:df:89:a1:99:d8:f2:f0:22:29:89:21:00:55:cb:77:91:96:
         ac:b1:f4:ae:b2:28:12:ca:34:09:d7:2f:97:97:1a:2c:85:c2:
         95:85:e5:7c:8b:14:de:a4:a8:96:43:06:e3:80:5d:c0:71:f5:
         4e:92:3b:d2:79:b8:27:1d:50:7b:af:00:9f:31:84:5c:87:7d:
         d5:12:e8:6c:21:bf:9a:b9:90:4c:7f:65:63:ae:ea:02:7d:23:
         e8:57:3f:e0:0e:70:a2:59:5a:51:5f:66:1e:cd:e3:1d:75:96:
         b7:67:73:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:44 2025 by rpki-client