Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4FCjdLGVFJnpgohqJPmtGHR7BEnZH79i49QpT1eyMm1m/0/323830343a343937633a3a2f33322d3438203d3e20323632383936.roa
File:                     323830343a343937633a3a2f33322d3438203d3e20323632383936.roa (raw, json)
Hash identifier:          hPIQ8h6q9y50wAYx9V1mTd8xaCMCNUHnmQe6f3PFwoI=
Subject key identifier:   3F:04:1C:47:39:E8:70:CE:C8:59:EF:AB:BC:90:4E:8B:77:0A:08:C2
Certificate issuer:       /CN=181A1C185F5EC2A13E97AB76EAAED25C54C3D7AE
Certificate serial:       7D27C46EC3FE5E4CDB5026A63C39D5F3EB463911
Authority key identifier: 18:1A:1C:18:5F:5E:C2:A1:3E:97:AB:76:EA:AE:D2:5C:54:C3:D7:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/181A1C185F5EC2A13E97AB76EAAED25C54C3D7AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4FCjdLGVFJnpgohqJPmtGHR7BEnZH79i49QpT1eyMm1m/0/323830343a343937633a3a2f33322d3438203d3e20323632383936.roa
Signing time:             Sun 19 Jun 2022 06:00:46 +0000
ROA not before:           Sun 19 Jun 2022 05:55:46 +0000
ROA not after:            Sun 18 Jun 2023 06:00:46 +0000
asID:                     262896
IP address blocks:        2804:497c::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:27:c4:6e:c3:fe:5e:4c:db:50:26:a6:3c:39:d5:f3:eb:46:39:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=181A1C185F5EC2A13E97AB76EAAED25C54C3D7AE
        Validity
            Not Before: Jun 19 05:55:46 2022 GMT
            Not After : Jun 18 06:00:46 2023 GMT
        Subject: CN=3F041C4739E870CEC859EFABBC904E8B770A08C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:43:fd:0b:be:b2:d8:28:27:a0:27:3d:94:f3:
                    e5:b9:3d:3d:3e:c7:a8:d9:39:c7:ca:9b:df:e3:dd:
                    f1:a7:65:fc:b4:cc:a0:52:97:17:f0:e6:9a:5c:3c:
                    5a:74:74:e5:67:4f:82:4f:82:0b:68:93:e0:c6:44:
                    32:0a:3a:36:8e:5a:df:8c:21:54:bb:6f:7d:dc:7b:
                    b8:4e:69:ad:9b:a3:b7:a3:0e:4b:ed:63:ee:9a:5b:
                    be:c1:ae:d9:11:94:ed:46:24:a1:c6:8d:a3:51:8a:
                    9d:78:c7:86:e6:7f:b3:dd:46:91:69:c4:6d:8c:08:
                    36:4b:cb:5c:52:07:83:1b:32:b0:d1:94:c3:36:ea:
                    75:76:3c:3f:aa:93:b9:2e:9f:00:2a:f3:d5:b2:d6:
                    ee:78:d0:10:ea:ce:9f:1c:65:31:90:99:c5:4d:55:
                    c7:09:e2:eb:92:23:de:b8:21:6e:f4:46:67:00:3b:
                    97:61:99:dc:aa:49:50:82:5b:75:b5:7c:3b:5f:54:
                    32:05:75:9a:5a:fa:9e:6f:08:f9:75:be:68:d1:fc:
                    cc:bf:74:da:1e:f2:3e:cf:e1:df:d6:b5:10:be:50:
                    0c:58:a7:ef:74:f3:2a:b1:c4:43:d6:65:a7:4b:71:
                    ec:6a:af:3f:9d:47:cb:7e:79:54:b3:4c:1c:04:c4:
                    1c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:04:1C:47:39:E8:70:CE:C8:59:EF:AB:BC:90:4E:8B:77:0A:08:C2
            X509v3 Authority Key Identifier:
                keyid:18:1A:1C:18:5F:5E:C2:A1:3E:97:AB:76:EA:AE:D2:5C:54:C3:D7:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4FCjdLGVFJnpgohqJPmtGHR7BEnZH79i49QpT1eyMm1m/0/181A1C185F5EC2A13E97AB76EAAED25C54C3D7AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/181A1C185F5EC2A13E97AB76EAAED25C54C3D7AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4FCjdLGVFJnpgohqJPmtGHR7BEnZH79i49QpT1eyMm1m/0/323830343a343937633a3a2f33322d3438203d3e20323632383936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:497c::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:f1:63:24:2f:66:b1:4f:44:cd:e7:1c:43:d3:72:d3:d1:71:
         9e:23:12:be:7b:c6:0a:ff:29:ff:ac:24:cb:c6:1f:5b:ba:01:
         08:3e:5f:38:a3:09:09:01:0c:89:f5:f4:17:0d:d5:91:99:b1:
         54:e2:36:ae:2d:a5:80:8b:3e:69:3e:8e:b4:59:75:a5:db:06:
         49:b8:78:2f:a1:ca:70:b7:ce:b5:a1:13:28:73:79:72:3a:04:
         84:bd:2e:a8:0e:a8:54:e5:e0:bc:81:79:72:6b:48:b6:a5:89:
         20:5d:43:65:26:76:65:70:7d:e2:fc:44:c0:7c:34:1c:53:94:
         75:13:40:12:93:8f:80:ca:69:83:35:df:1b:97:2a:4a:e3:cb:
         ab:00:86:d3:50:7f:f9:93:38:e9:74:69:d8:96:a4:e5:c2:8a:
         4f:86:27:37:42:b6:df:a1:d7:4b:b7:68:aa:9c:39:81:af:62:
         3c:d9:73:b0:2d:2f:7a:38:a4:ed:31:79:79:74:44:48:4c:d5:
         b2:97:77:f6:48:82:82:74:27:2b:da:84:d1:7c:65:82:ef:50:
         4b:39:fb:71:9e:29:3c:ee:f5:42:20:bc:ac:91:05:be:35:10:
         af:71:3c:81:37:29:7a:c9:d3:7e:bf:7b:69:74:b8:65:c3:53:
         13:5a:95:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:27:32 2025 by rpki-client