Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/323830343a363036303a3a2f33322d3334203d3e20323639313633.roa
File:                     323830343a363036303a3a2f33322d3334203d3e20323639313633.roa (raw, json)
Hash identifier:          GJhrzEbSFKOPTTNf3WCC7mY3dpyF+u9lGIGtm79pijg=
Subject key identifier:   1A:6A:08:2D:75:91:65:C5:88:8F:BA:45:49:C5:8E:FB:E6:10:58:C0
Certificate issuer:       /CN=CD8C8F1F670FCCEDD9D03409B0D7E7C4E098D324
Certificate serial:       351DA6929041951EBDD9DE2B7A793CED1DDB9E51
Authority key identifier: CD:8C:8F:1F:67:0F:CC:ED:D9:D0:34:09:B0:D7:E7:C4:E0:98:D3:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD8C8F1F670FCCEDD9D03409B0D7E7C4E098D324.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/323830343a363036303a3a2f33322d3334203d3e20323639313633.roa
Signing time:             Thu 26 Dec 2024 13:15:58 +0000
ROA not before:           Thu 26 Dec 2024 13:10:58 +0000
ROA not after:            Thu 25 Dec 2025 13:15:58 +0000
asID:                     269163
IP address blocks:        2804:6060::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:1d:a6:92:90:41:95:1e:bd:d9:de:2b:7a:79:3c:ed:1d:db:9e:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD8C8F1F670FCCEDD9D03409B0D7E7C4E098D324
        Validity
            Not Before: Dec 26 13:10:58 2024 GMT
            Not After : Dec 25 13:15:58 2025 GMT
        Subject: CN=1A6A082D759165C5888FBA4549C58EFBE61058C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b4:ae:e1:c6:d0:7b:ea:f4:ca:f2:95:4e:5a:
                    05:70:25:5c:0f:5b:23:17:18:4e:e2:a2:39:97:b6:
                    1b:37:bf:6e:48:30:cd:34:59:1b:e8:28:d6:1d:15:
                    48:30:8a:7d:f2:57:35:6e:bf:17:5a:94:b6:2e:62:
                    04:1f:4c:45:cf:0d:e0:16:32:12:1c:9a:76:8f:e1:
                    97:8d:99:e3:4c:d8:91:f0:a1:b2:af:e7:b7:0b:a1:
                    b6:74:ad:eb:42:1c:9d:c5:46:36:2f:68:67:4a:19:
                    6f:fc:2f:49:52:e1:c1:09:81:c7:8d:95:31:9c:3c:
                    aa:20:8a:a3:42:ff:69:bf:f5:13:f7:5c:6c:93:0f:
                    cd:b3:61:14:46:01:09:9e:81:89:59:4f:8d:90:01:
                    2d:43:73:fc:ee:fc:37:f6:81:ab:7b:a1:ac:a7:c4:
                    b8:90:d0:b9:2a:8c:9c:ee:3d:1b:f4:0f:f3:67:e5:
                    d3:9a:d9:42:48:b7:10:17:8d:bc:0a:31:0f:49:8b:
                    bc:7d:da:b0:30:e6:82:04:da:3f:39:af:5b:87:c6:
                    53:a2:9a:f5:ee:96:82:af:4d:af:96:6f:b7:10:c4:
                    0b:e2:f9:db:f0:48:91:29:0e:f4:6a:68:da:f1:c9:
                    5f:cb:ef:d2:49:2c:ea:48:5e:0c:a4:f0:84:e0:03:
                    0b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:6A:08:2D:75:91:65:C5:88:8F:BA:45:49:C5:8E:FB:E6:10:58:C0
            X509v3 Authority Key Identifier:
                keyid:CD:8C:8F:1F:67:0F:CC:ED:D9:D0:34:09:B0:D7:E7:C4:E0:98:D3:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/CD8C8F1F670FCCEDD9D03409B0D7E7C4E098D324.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD8C8F1F670FCCEDD9D03409B0D7E7C4E098D324.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/323830343a363036303a3a2f33322d3334203d3e20323639313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6060::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:9d:13:5a:19:cd:15:19:99:de:8f:57:ed:31:6a:05:82:2a:
         d1:dd:dc:f8:ba:cf:8f:92:73:68:24:82:cf:bb:03:ae:52:c4:
         20:b4:7c:8b:19:48:cc:5c:13:0a:5f:51:03:3d:7d:15:2d:1d:
         5c:23:91:5d:c2:7f:69:82:c4:9d:2e:08:52:db:66:e4:c5:71:
         ff:34:e3:b2:1c:e6:75:95:b1:28:79:52:1c:2d:ab:49:3a:22:
         8b:de:f5:2b:bb:9e:32:43:d3:bb:1e:c8:ad:59:9a:ad:eb:57:
         44:4c:cc:1f:42:98:db:a3:6e:44:b8:10:27:f0:e6:7d:ff:0e:
         49:24:ec:07:ff:b1:95:24:82:a3:bb:5d:92:45:60:c1:4f:d3:
         06:23:91:b4:d9:4e:92:1d:ad:f7:25:57:9d:a8:e2:be:15:42:
         fc:ec:49:17:27:2b:d4:a9:8a:62:a7:6c:ea:d0:5a:01:05:c9:
         97:cd:a8:5c:15:1d:65:c1:f1:bb:55:05:b4:66:43:ea:fa:ca:
         3c:1e:7e:21:9d:ad:aa:0e:af:38:42:4d:18:d6:06:f9:b0:4b:
         9c:08:8a:a5:37:62:e7:16:e0:29:d8:e2:54:49:2d:64:6b:32:
         77:e4:28:af:d4:b5:da:48:79:1b:b0:61:7b:64:b5:09:22:80:
         3b:6a:4c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:17:33 2025 by rpki-client