Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4SvMs4HykLokQRooRFSbsnzc8vTT9BFXnj6MzDjAa9ro/1/323830343a6430383a3a2f33322d3438203d3e20323632333131.roa
File:                     323830343a6430383a3a2f33322d3438203d3e20323632333131.roa (raw, json)
Hash identifier:          fwRndifyD+xN/QptNGb/VcVXux1jh/Z/5A4iQ5xtgD8=
Subject key identifier:   2E:41:C6:AA:40:C7:46:69:15:31:78:2C:8E:E3:5E:00:6E:A6:15:7D
Certificate issuer:       /CN=8B49F9344E05C9F966C6027F79FC469130EC971D
Certificate serial:       27D95DDCEF5F68E5CCC44D14C4B13971157EE8BE
Authority key identifier: 8B:49:F9:34:4E:05:C9:F9:66:C6:02:7F:79:FC:46:91:30:EC:97:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B49F9344E05C9F966C6027F79FC469130EC971D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4SvMs4HykLokQRooRFSbsnzc8vTT9BFXnj6MzDjAa9ro/1/323830343a6430383a3a2f33322d3438203d3e20323632333131.roa
Signing time:             Thu 06 Mar 2025 01:16:34 +0000
ROA not before:           Thu 06 Mar 2025 01:11:34 +0000
ROA not after:            Thu 05 Mar 2026 01:16:34 +0000
asID:                     262311
IP address blocks:        2804:d08::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:d9:5d:dc:ef:5f:68:e5:cc:c4:4d:14:c4:b1:39:71:15:7e:e8:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B49F9344E05C9F966C6027F79FC469130EC971D
        Validity
            Not Before: Mar  6 01:11:34 2025 GMT
            Not After : Mar  5 01:16:34 2026 GMT
        Subject: CN=2E41C6AA40C746691531782C8EE35E006EA6157D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ee:45:9c:df:09:3d:42:ce:00:70:a1:3d:0b:
                    95:72:0b:20:8a:7c:46:a1:2b:92:f7:98:9d:b5:31:
                    39:7d:ad:ea:27:8a:9b:84:6d:ac:61:9c:51:62:6c:
                    3e:0f:23:b9:7e:1c:9b:28:b3:ba:cc:23:f7:51:e2:
                    b4:73:28:bb:4b:42:5a:19:47:38:1c:fa:cc:97:67:
                    8c:61:ed:4e:6e:9e:f9:a6:95:ab:8e:70:8c:ae:da:
                    70:6f:01:30:ec:39:06:8b:f7:4a:05:a1:53:52:a3:
                    19:3d:d5:fa:7d:35:9c:22:44:db:c7:b5:5e:02:6d:
                    f9:22:11:d3:0d:17:1d:f3:5b:80:d6:e6:7e:0b:bd:
                    35:6c:62:a5:58:05:d9:ec:ca:02:4d:84:35:6b:21:
                    28:ce:60:20:cc:a3:1a:08:09:be:75:c9:22:eb:ea:
                    d8:b2:c0:cc:80:b0:29:ab:a0:af:a7:7d:d2:04:78:
                    cb:ca:a3:0c:72:54:14:45:93:df:c4:51:fa:4a:24:
                    8d:84:29:00:9a:a4:b7:3f:3c:cb:b5:b2:9f:f0:5f:
                    03:e3:38:68:78:f7:8c:99:36:66:13:f1:65:11:ce:
                    82:17:f9:61:1b:ae:4f:1e:e6:08:0a:58:79:ff:b8:
                    0e:5f:03:e3:bd:b6:b4:74:30:1a:92:50:d4:5e:da:
                    ea:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:41:C6:AA:40:C7:46:69:15:31:78:2C:8E:E3:5E:00:6E:A6:15:7D
            X509v3 Authority Key Identifier:
                keyid:8B:49:F9:34:4E:05:C9:F9:66:C6:02:7F:79:FC:46:91:30:EC:97:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4SvMs4HykLokQRooRFSbsnzc8vTT9BFXnj6MzDjAa9ro/1/8B49F9344E05C9F966C6027F79FC469130EC971D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B49F9344E05C9F966C6027F79FC469130EC971D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4SvMs4HykLokQRooRFSbsnzc8vTT9BFXnj6MzDjAa9ro/1/323830343a6430383a3a2f33322d3438203d3e20323632333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d08::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:a1:e0:76:f2:04:14:ea:02:74:7c:97:2f:f9:9c:de:98:a9:
         68:7e:db:6e:63:02:ae:c0:bd:cb:9b:7f:de:fb:28:99:7b:66:
         de:43:d6:55:a6:45:5b:75:2a:fd:60:be:95:20:09:fa:9c:4e:
         68:41:32:5a:62:a2:d9:bb:13:26:f6:59:c5:a3:a4:fc:72:f1:
         12:b3:65:29:17:bd:04:58:28:a2:aa:b4:13:49:9d:a5:9d:7e:
         b0:96:77:c9:82:21:6e:79:25:31:c6:e3:10:f2:ca:b3:2a:50:
         de:d1:fa:1e:9f:6b:29:3d:c9:05:1a:6a:e1:37:a5:c2:2a:d3:
         9b:70:07:8a:ac:44:11:2d:59:ca:39:ef:55:bc:cb:be:7c:f8:
         d7:a7:70:64:cf:b6:86:19:e8:9e:71:c3:20:e1:2d:bf:a2:a2:
         b2:c5:99:65:f5:ad:ec:71:80:8d:d3:9b:bf:74:8f:eb:d2:ff:
         b2:a2:2d:fe:1e:da:f1:ac:17:bc:af:0c:c9:b2:2f:e8:23:1d:
         ba:c8:62:11:49:15:6e:f2:5d:d3:9f:0b:7e:89:6f:67:d2:63:
         1a:dd:48:64:5f:11:e0:67:00:fc:0f:6d:d4:a2:a8:fc:59:3b:
         ff:de:b0:20:67:97:ff:be:c3:e1:25:57:e5:bf:ee:16:87:da:
         05:33:08:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:29:02 2025 by rpki-client