Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4TeLFssEDdnPtrmwSoNo2fWEjK6FrB8uaGUE8Hir45Qu/0/323830343a373332303a3a2f33322d313238203d3e20323730383937.roa
File:                     323830343a373332303a3a2f33322d313238203d3e20323730383937.roa (raw, json)
Hash identifier:          sviYZ8EFPCssjmCYFFayWiz+oP4P3qD2pbBbcrFaUzk=
Subject key identifier:   23:99:7D:F8:9E:E0:AB:EE:A8:31:C1:73:CB:26:39:18:78:CC:0E:47
Certificate issuer:       /CN=B42594E2C54178CC78E14B1FCAF54FEA3917A72C
Certificate serial:       1AAB66A9504C458CBA2370B244B725E308E200BD
Authority key identifier: B4:25:94:E2:C5:41:78:CC:78:E1:4B:1F:CA:F5:4F:EA:39:17:A7:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B42594E2C54178CC78E14B1FCAF54FEA3917A72C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4TeLFssEDdnPtrmwSoNo2fWEjK6FrB8uaGUE8Hir45Qu/0/323830343a373332303a3a2f33322d313238203d3e20323730383937.roa
Signing time:             Thu 30 Jan 2025 18:53:10 +0000
ROA not before:           Thu 30 Jan 2025 18:48:10 +0000
ROA not after:            Thu 29 Jan 2026 18:53:10 +0000
asID:                     270897
IP address blocks:        2804:7320::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:ab:66:a9:50:4c:45:8c:ba:23:70:b2:44:b7:25:e3:08:e2:00:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B42594E2C54178CC78E14B1FCAF54FEA3917A72C
        Validity
            Not Before: Jan 30 18:48:10 2025 GMT
            Not After : Jan 29 18:53:10 2026 GMT
        Subject: CN=23997DF89EE0ABEEA831C173CB26391878CC0E47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1f:8f:a9:6c:aa:1b:bf:b7:24:08:9f:a6:bc:
                    13:cf:a5:5b:74:9d:35:d7:88:ce:a2:46:8d:5f:34:
                    13:b1:83:06:c9:cb:a6:c6:e2:22:d6:b8:f6:cd:9a:
                    91:10:7a:30:e2:c3:c8:2b:86:af:ba:dd:d9:52:53:
                    c2:11:52:7c:9c:e7:1f:1f:1f:e0:5b:25:76:4b:d6:
                    0d:97:d9:38:95:d6:8a:71:bb:b8:df:f3:24:4f:fc:
                    0a:b6:ad:3e:3b:d4:02:ed:99:3b:45:18:c9:b5:32:
                    28:98:de:95:27:66:d5:21:18:f4:39:fb:0b:18:3d:
                    10:88:23:29:09:ce:dc:f7:a3:fe:fd:6f:03:1d:4d:
                    6d:fc:4c:b1:0c:e3:cd:e0:a0:5f:d9:d9:c4:f2:8c:
                    c7:5a:43:c2:58:40:52:f0:b8:7b:32:72:eb:a4:6e:
                    d7:8b:55:0e:ef:c6:76:78:a7:15:24:fb:db:38:b0:
                    5d:7c:29:7b:d8:62:21:02:62:15:96:bf:fd:02:03:
                    5c:39:e1:ea:5f:a7:ec:98:48:30:1a:db:b0:5a:f3:
                    2a:fa:1c:15:5c:84:3e:80:41:75:6b:3c:23:97:75:
                    80:ed:3a:b7:96:b2:a3:34:24:9b:ff:fb:c2:d0:e4:
                    3c:88:dc:18:b7:e3:f3:cf:01:b7:0e:c9:1a:41:fb:
                    33:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:99:7D:F8:9E:E0:AB:EE:A8:31:C1:73:CB:26:39:18:78:CC:0E:47
            X509v3 Authority Key Identifier:
                keyid:B4:25:94:E2:C5:41:78:CC:78:E1:4B:1F:CA:F5:4F:EA:39:17:A7:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4TeLFssEDdnPtrmwSoNo2fWEjK6FrB8uaGUE8Hir45Qu/0/B42594E2C54178CC78E14B1FCAF54FEA3917A72C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B42594E2C54178CC78E14B1FCAF54FEA3917A72C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4TeLFssEDdnPtrmwSoNo2fWEjK6FrB8uaGUE8Hir45Qu/0/323830343a373332303a3a2f33322d313238203d3e20323730383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7320::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:d2:7f:5b:98:24:f4:27:9f:dd:3c:9b:76:bc:ee:ea:55:90:
         85:4d:1f:6a:ac:a5:18:a7:57:58:e9:13:72:c2:5b:bb:cf:01:
         b8:86:68:c1:d3:e0:29:62:fc:c7:cf:a9:18:90:4b:ea:e8:4a:
         3c:6a:9c:6b:dd:de:df:51:51:0a:05:b8:7e:20:68:5c:6c:97:
         04:bc:9a:f7:88:64:d5:ee:2d:37:2b:30:8a:01:d5:1f:1a:7e:
         eb:86:53:5d:98:fe:94:72:02:c0:6a:66:69:54:f8:25:92:0b:
         c0:40:94:28:c2:39:d4:58:82:a0:5d:9f:02:45:26:57:4e:66:
         2c:51:35:cb:1a:eb:2d:af:03:5a:20:e5:c4:f9:ca:fc:8c:2e:
         f9:b2:fb:c1:75:2d:f3:93:82:7c:42:d0:91:85:4b:32:31:61:
         45:36:61:ee:ca:84:79:37:f9:07:27:8a:32:99:92:e1:ad:3a:
         24:59:1b:62:09:1f:f4:f2:8e:08:4f:5f:97:b2:8c:7d:ad:8a:
         67:d7:fd:f8:2b:76:2c:33:db:dd:8d:49:7f:df:44:f5:c9:37:
         17:0d:01:e2:d2:35:23:98:b2:85:98:68:3a:fe:3a:72:65:aa:
         dc:a4:30:b0:56:46:ca:8c:a2:b1:5c:95:5e:9d:86:51:b3:08:
         83:b9:76:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:14:59 2025 by rpki-client