Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/323830343a316131303a3a2f33322d3438203d3e203631383334.roa
File:                     323830343a316131303a3a2f33322d3438203d3e203631383334.roa (raw, json)
Hash identifier:          gkUxHP8r9+Fhu5QWQf9DujXsJaThMNFObjuKFQmBFk0=
Subject key identifier:   28:61:10:56:14:67:6B:5A:14:8E:89:21:CD:42:26:07:CA:6D:C7:50
Certificate issuer:       /CN=C336C65AA0BA33C626FAB0B9C26E026EB908454A
Certificate serial:       7144A35A03E89E1F67665F9E61B4D46D17E1656A
Authority key identifier: C3:36:C6:5A:A0:BA:33:C6:26:FA:B0:B9:C2:6E:02:6E:B9:08:45:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/323830343a316131303a3a2f33322d3438203d3e203631383334.roa
Signing time:             Thu 06 Mar 2025 09:16:59 +0000
ROA not before:           Thu 06 Mar 2025 09:11:59 +0000
ROA not after:            Thu 05 Mar 2026 09:16:59 +0000
asID:                     61834
IP address blocks:        2804:1a10::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:44:a3:5a:03:e8:9e:1f:67:66:5f:9e:61:b4:d4:6d:17:e1:65:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C336C65AA0BA33C626FAB0B9C26E026EB908454A
        Validity
            Not Before: Mar  6 09:11:59 2025 GMT
            Not After : Mar  5 09:16:59 2026 GMT
        Subject: CN=2861105614676B5A148E8921CD422607CA6DC750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:69:88:34:12:4a:5e:af:4c:1e:bb:6e:94:15:
                    42:0f:72:fe:64:a0:9e:8d:5f:ba:51:4b:e0:d4:4b:
                    7d:a9:ca:5b:88:04:5f:60:02:3b:3c:6f:b3:05:28:
                    aa:92:a0:4c:d0:f3:9f:17:95:94:04:3e:bb:b6:f0:
                    a5:0e:14:8c:f4:75:88:3e:75:04:76:f3:cf:a2:fd:
                    06:b9:42:e0:35:64:b4:02:5d:7e:93:7f:50:59:bb:
                    73:48:59:a6:e8:cf:ec:ba:88:58:77:60:53:9e:c0:
                    42:bf:24:ac:b5:83:03:9f:29:56:b0:1e:55:97:96:
                    eb:87:a1:b3:22:1f:8e:88:6e:52:9c:50:cd:c8:c6:
                    3d:c1:76:35:dd:2a:e9:20:a6:9d:1f:a3:2a:97:66:
                    a2:21:38:c6:f6:70:48:a0:c1:3e:5a:aa:56:6b:5c:
                    67:a5:2c:b4:84:15:94:9f:74:aa:f8:24:a0:05:d4:
                    5c:b0:34:b2:1c:8b:09:92:64:70:c6:ac:3c:3d:13:
                    4a:ab:87:bd:af:92:9f:28:51:e7:b4:85:cd:a5:77:
                    ab:90:87:1c:35:45:21:41:3f:5b:2b:f7:12:61:21:
                    1a:32:27:07:0f:53:57:6b:e2:37:3e:3d:dc:63:6b:
                    21:fb:27:b7:bd:d0:07:6e:df:ef:39:11:89:0f:11:
                    0e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:61:10:56:14:67:6B:5A:14:8E:89:21:CD:42:26:07:CA:6D:C7:50
            X509v3 Authority Key Identifier:
                keyid:C3:36:C6:5A:A0:BA:33:C6:26:FA:B0:B9:C2:6E:02:6E:B9:08:45:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/323830343a316131303a3a2f33322d3438203d3e203631383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a10::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:a3:ad:d8:b9:ba:d3:7f:74:1b:46:c6:4c:82:e2:e0:a6:f4:
         5b:8e:86:56:a6:52:30:45:ba:9e:95:32:19:3b:48:61:6b:da:
         71:b2:df:c7:54:53:1a:48:f1:90:1f:d1:b9:56:54:9d:f0:2f:
         e8:60:6d:76:5d:a4:a4:1c:12:a1:ce:4b:e1:f1:97:8f:61:49:
         82:10:8d:1f:32:be:b3:38:08:f0:e8:51:a3:8c:85:19:19:c1:
         31:39:96:67:1b:af:c5:89:36:92:2a:8b:aa:bf:96:9a:f3:e6:
         8b:e8:5f:0d:0b:f0:c9:d5:53:fa:57:d9:a9:85:1b:c5:50:f4:
         40:2b:6f:f8:9f:25:56:0b:de:7a:27:c3:26:e4:05:da:71:c4:
         3c:70:5a:ea:12:08:47:79:f2:5b:af:67:15:ea:29:7b:16:77:
         fe:a9:4c:fb:ca:60:dc:af:5d:71:4d:94:e5:c9:10:af:c4:4e:
         e7:8d:4a:d3:49:84:d3:97:91:6b:8f:fc:a6:ef:c0:ea:67:17:
         2a:36:8b:4e:7e:11:19:93:3c:9a:3c:09:f2:5b:d4:64:3e:5b:
         51:37:3f:ac:6c:77:aa:c5:97:d3:ac:34:bd:00:08:64:c9:2c:
         16:16:72:d6:b2:42:cb:61:a8:f7:98:35:e4:9e:24:62:8a:c8:
         bc:84:20:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:37:08 2025 by rpki-client