Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThWCdod8Z2aAYiJUSTJDbZvYNhVLsqhiuEk3Jyg1zjD/0/323830343a316166343a3a2f33322d313238203d3e203631373030.roa
File:                     323830343a316166343a3a2f33322d313238203d3e203631373030.roa (raw, json)
Hash identifier:          UM3+H6M5DCbDWq4lF/Y+uZWUdN955dA2NOCshiz3P20=
Subject key identifier:   12:6B:23:8E:01:3B:5F:D4:B5:EF:41:21:A5:D4:21:C1:D7:DA:87:95
Certificate issuer:       /CN=4E2AFD0A2BBA64728985B8443FC500D9EF1D96FF
Certificate serial:       796CFB75DDB65660B4BB2C1EEEA4C027B2F23657
Authority key identifier: 4E:2A:FD:0A:2B:BA:64:72:89:85:B8:44:3F:C5:00:D9:EF:1D:96:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E2AFD0A2BBA64728985B8443FC500D9EF1D96FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThWCdod8Z2aAYiJUSTJDbZvYNhVLsqhiuEk3Jyg1zjD/0/323830343a316166343a3a2f33322d313238203d3e203631373030.roa
Signing time:             Tue 31 Dec 2024 11:41:28 +0000
ROA not before:           Tue 31 Dec 2024 11:36:28 +0000
ROA not after:            Tue 30 Dec 2025 11:41:28 +0000
asID:                     61700
IP address blocks:        2804:1af4::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:6c:fb:75:dd:b6:56:60:b4:bb:2c:1e:ee:a4:c0:27:b2:f2:36:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E2AFD0A2BBA64728985B8443FC500D9EF1D96FF
        Validity
            Not Before: Dec 31 11:36:28 2024 GMT
            Not After : Dec 30 11:41:28 2025 GMT
        Subject: CN=126B238E013B5FD4B5EF4121A5D421C1D7DA8795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:f0:16:d6:c4:08:d2:f5:1f:33:45:fa:01:b3:
                    f6:b8:0e:ff:51:0b:24:d1:24:5a:e1:37:91:fe:58:
                    94:42:a9:bf:a3:a8:d1:29:57:6e:30:ba:1e:76:91:
                    29:37:fd:a6:40:bf:a5:5e:56:37:d1:45:e0:6f:2d:
                    56:e2:b1:37:b0:27:84:56:18:16:63:c7:55:a4:50:
                    b0:b5:8e:fc:96:cc:21:ec:e1:98:47:71:75:4d:2c:
                    b3:b9:5c:78:e3:2a:72:01:54:eb:7d:4e:77:87:e8:
                    6b:d0:58:c4:66:f3:f0:dc:11:d4:54:a0:13:6a:59:
                    5f:68:8a:5b:3f:3f:88:69:1c:b1:0e:91:fb:80:1a:
                    e8:1b:37:83:78:ff:83:f0:d0:18:1e:1b:fb:28:56:
                    ec:ec:5d:5f:bb:b2:83:26:51:57:b1:38:05:6b:59:
                    fe:ad:2d:5c:b7:6c:7e:1f:e4:24:a4:ed:1b:4a:0f:
                    5d:07:be:c8:62:4f:97:2a:e3:92:32:30:2f:d5:a0:
                    07:2c:1c:f4:95:3e:ef:d2:43:78:7b:46:a7:05:c4:
                    d4:9b:14:c4:4c:55:75:03:a7:8f:b4:76:1c:88:3b:
                    4d:d0:88:59:11:a5:43:b4:2b:35:25:52:b9:1a:f9:
                    41:4a:1e:40:01:e4:2f:8b:be:85:82:f2:ce:78:23:
                    1b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:6B:23:8E:01:3B:5F:D4:B5:EF:41:21:A5:D4:21:C1:D7:DA:87:95
            X509v3 Authority Key Identifier:
                keyid:4E:2A:FD:0A:2B:BA:64:72:89:85:B8:44:3F:C5:00:D9:EF:1D:96:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThWCdod8Z2aAYiJUSTJDbZvYNhVLsqhiuEk3Jyg1zjD/0/4E2AFD0A2BBA64728985B8443FC500D9EF1D96FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E2AFD0A2BBA64728985B8443FC500D9EF1D96FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThWCdod8Z2aAYiJUSTJDbZvYNhVLsqhiuEk3Jyg1zjD/0/323830343a316166343a3a2f33322d313238203d3e203631373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1af4::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:61:51:eb:8c:15:51:fb:c1:37:dd:ac:9b:b1:fc:df:07:09:
         d8:1f:57:3f:6f:fe:09:f0:f3:45:a9:d2:2c:de:15:da:15:b7:
         c0:83:e2:03:f4:36:0e:a1:cb:f0:59:8e:38:7a:d4:e1:4f:b0:
         7d:9d:b9:9d:af:0b:9c:e5:78:40:92:a4:fe:7d:9c:5a:7c:c1:
         73:3d:29:54:66:b8:39:89:76:93:a5:3b:46:3c:21:f4:85:20:
         87:31:70:db:d2:f4:87:a0:3f:b5:09:58:e0:2d:69:e8:c1:69:
         fb:be:58:45:6d:79:06:2d:d0:bc:d7:ec:81:00:9b:7b:c3:83:
         af:01:53:d7:85:cc:3c:31:2b:36:3c:10:ab:60:82:24:1c:8b:
         34:0f:fb:de:1c:fd:e5:b2:bf:9b:be:c3:ae:f8:e1:83:6e:41:
         06:96:e0:8b:74:e5:d6:f4:95:04:b2:1f:00:92:66:31:a9:e6:
         e1:c7:69:f6:20:bb:a0:c2:71:89:cc:7f:d0:e8:c7:aa:ab:ff:
         67:56:1b:c5:c7:aa:2f:c9:8d:69:e2:a2:89:1b:5f:91:50:9b:
         46:71:c3:df:b7:87:dc:cd:85:8c:f6:49:f0:66:87:e7:99:4f:
         63:d4:78:80:7d:27:34:1b:54:86:bc:e8:46:71:19:ef:85:f2:
         0f:29:d9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:19:59 2025 by rpki-client