Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4FkAAdRe6HGQgonQKDfumJwbQ9ibSuSA5Lz78rTJvHsG/0/323830343a386463633a3a2f33322d313238203d3e20323733333831.roa
File:                     323830343a386463633a3a2f33322d313238203d3e20323733333831.roa (raw, json)
Hash identifier:          VFLXFsAWiSAeAdQZ3/KQUuvkcCvgE3g8fvtXO5p8ib0=
Subject key identifier:   9E:67:E4:08:01:B5:6E:08:4B:03:9D:5A:DB:2F:80:C7:07:C0:C0:50
Certificate issuer:       /CN=0B302D978198636085D3E247B598AC1275D02145
Certificate serial:       3AEBA06E9FDE0DC5407C1902E0D9DF4A3BC946EB
Authority key identifier: 0B:30:2D:97:81:98:63:60:85:D3:E2:47:B5:98:AC:12:75:D0:21:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B302D978198636085D3E247B598AC1275D02145.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4FkAAdRe6HGQgonQKDfumJwbQ9ibSuSA5Lz78rTJvHsG/0/323830343a386463633a3a2f33322d313238203d3e20323733333831.roa
Signing time:             Mon 23 Dec 2024 03:23:32 +0000
ROA not before:           Mon 23 Dec 2024 03:18:32 +0000
ROA not after:            Mon 22 Dec 2025 03:23:32 +0000
asID:                     273381
IP address blocks:        2804:8dcc::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:eb:a0:6e:9f:de:0d:c5:40:7c:19:02:e0:d9:df:4a:3b:c9:46:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B302D978198636085D3E247B598AC1275D02145
        Validity
            Not Before: Dec 23 03:18:32 2024 GMT
            Not After : Dec 22 03:23:32 2025 GMT
        Subject: CN=9E67E40801B56E084B039D5ADB2F80C707C0C050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:aa:ea:4e:b0:cf:ed:3c:d8:89:fa:be:d7:6c:
                    c7:b9:3b:38:2c:5a:a2:55:e6:a6:67:84:24:0e:d0:
                    bf:cf:a6:d0:ad:ae:aa:47:3c:c7:de:bd:7e:a3:4d:
                    df:ea:33:c1:95:2d:bc:1e:93:0d:98:0c:aa:e0:9b:
                    e9:06:8f:24:1b:00:6b:77:a6:4f:e0:90:f1:af:12:
                    9a:94:bb:b6:be:29:41:6a:79:61:28:55:b0:d9:a1:
                    4b:9a:0e:6c:e8:04:76:9a:08:40:b1:e2:96:4e:20:
                    f3:30:80:e5:65:57:cd:a4:65:cf:78:cd:ad:87:80:
                    2d:e1:4d:10:26:5c:b8:01:a9:34:b8:2d:c1:12:a9:
                    12:d0:a1:59:1c:d5:32:ee:8c:e5:d3:e3:88:a3:5b:
                    94:05:71:fa:9a:91:87:64:93:89:9d:66:ef:f5:c5:
                    d6:c6:15:5a:38:e8:b2:dd:66:9d:6d:30:02:27:fc:
                    55:e2:e3:79:4a:c8:67:8a:38:0f:6e:84:a9:03:7d:
                    7f:48:20:1d:19:74:d3:63:ec:02:6c:36:2c:2d:7c:
                    01:9d:79:0c:35:ba:f0:84:c4:b3:da:14:e3:d1:b5:
                    bd:b7:05:84:a4:dd:de:5c:62:2d:e6:da:19:12:93:
                    c4:c4:f2:a4:c8:38:36:be:d0:d8:6f:a9:47:69:db:
                    b8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:67:E4:08:01:B5:6E:08:4B:03:9D:5A:DB:2F:80:C7:07:C0:C0:50
            X509v3 Authority Key Identifier:
                keyid:0B:30:2D:97:81:98:63:60:85:D3:E2:47:B5:98:AC:12:75:D0:21:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4FkAAdRe6HGQgonQKDfumJwbQ9ibSuSA5Lz78rTJvHsG/0/0B302D978198636085D3E247B598AC1275D02145.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B302D978198636085D3E247B598AC1275D02145.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4FkAAdRe6HGQgonQKDfumJwbQ9ibSuSA5Lz78rTJvHsG/0/323830343a386463633a3a2f33322d313238203d3e20323733333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8dcc::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:24:9f:d4:07:b2:7c:e9:c1:9a:50:ad:58:b9:74:17:a1:3b:
         17:d3:3d:81:b6:66:1e:eb:fd:dd:90:4d:f5:16:1d:a0:86:8b:
         04:8f:9d:b2:fb:ff:b2:fe:9b:b2:49:d7:d0:d9:01:02:db:17:
         af:df:dc:b1:e4:a4:b7:73:f6:5a:8e:50:a9:a6:d0:7c:8d:33:
         42:ed:bf:fb:78:b6:b0:2c:4f:e1:94:21:08:bf:c7:13:02:06:
         36:2b:24:92:6c:37:aa:7d:df:e7:6d:24:8a:10:b5:51:56:60:
         5f:8c:2d:3d:60:fb:13:07:04:79:a8:c1:c1:14:56:83:54:9a:
         30:bf:0e:01:2b:a2:c9:91:21:96:d4:f6:c5:e0:12:f7:e2:ad:
         4e:14:7b:c7:ac:6a:93:3b:6d:b4:53:2b:3c:38:d0:8e:cb:b1:
         d0:f6:bd:3b:aa:66:2f:b6:fa:bb:7e:45:c0:0e:3f:08:33:d4:
         83:83:16:75:65:32:a1:d5:da:5d:9b:d4:f8:95:76:46:1f:d7:
         21:44:24:8a:c4:37:37:89:e0:ac:ef:f7:a1:8c:fc:84:f0:68:
         29:1d:ac:13:df:bb:ff:30:f8:21:1b:45:33:17:d2:77:06:c6:
         11:c3:a7:91:0a:1c:ec:7d:a8:7c:5e:8d:80:dd:63:74:a4:05:
         5f:f1:b4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:37:38 2025 by rpki-client