Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/323830343a343463633a3a2f33322d3430203d3e20323637363534.roa
File:                     323830343a343463633a3a2f33322d3430203d3e20323637363534.roa (raw, json)
Hash identifier:          5EOPo2+Gu7jRpWQ23GA0NFFlzySjFOtoTh+IjuXIpdY=
Subject key identifier:   68:9C:01:AB:2E:5C:51:33:0C:15:10:9F:0F:56:06:8F:80:17:43:69
Certificate issuer:       /CN=1BE004C88CDEB73610FC82758B90B130EB9F7D38
Certificate serial:       1ED168B200F9F1579C728171E75B38A53DDEFDA1
Authority key identifier: 1B:E0:04:C8:8C:DE:B7:36:10:FC:82:75:8B:90:B1:30:EB:9F:7D:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BE004C88CDEB73610FC82758B90B130EB9F7D38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/323830343a343463633a3a2f33322d3430203d3e20323637363534.roa
Signing time:             Sat 29 Mar 2025 03:53:35 +0000
ROA not before:           Sat 29 Mar 2025 03:48:35 +0000
ROA not after:            Sat 28 Mar 2026 03:53:35 +0000
asID:                     267654
IP address blocks:        2804:44cc::/32 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:d1:68:b2:00:f9:f1:57:9c:72:81:71:e7:5b:38:a5:3d:de:fd:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE004C88CDEB73610FC82758B90B130EB9F7D38
        Validity
            Not Before: Mar 29 03:48:35 2025 GMT
            Not After : Mar 28 03:53:35 2026 GMT
        Subject: CN=689C01AB2E5C51330C15109F0F56068F80174369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f1:a0:b2:52:f2:1b:e5:5a:ca:14:b9:95:f8:
                    66:82:da:9f:26:b8:51:1f:97:5c:58:f2:0f:a6:0a:
                    06:b2:11:e7:5b:3a:4d:3d:04:3c:5c:3a:23:f2:5a:
                    a5:d5:bb:9d:78:88:23:1d:e2:63:12:6c:a3:96:85:
                    aa:2e:2b:79:39:63:d8:9c:8e:fe:9b:26:8b:5f:b0:
                    76:09:a0:c1:03:ec:45:be:9b:b6:17:2a:92:47:dc:
                    2b:e5:e9:0e:c4:b6:c2:09:62:6d:c0:3a:b8:e6:99:
                    47:3a:10:61:08:52:65:f1:74:93:7b:12:6c:82:ba:
                    71:90:47:27:31:4e:dc:7f:8b:c7:7f:6d:f0:dc:ef:
                    74:7b:99:b4:8e:06:7e:d7:00:4d:c5:0b:f5:e3:32:
                    ed:68:75:d7:bf:6c:47:6a:0d:c6:f4:41:cb:05:23:
                    e5:47:c7:d3:be:43:7a:78:7e:c4:82:62:90:10:0a:
                    64:73:d1:3a:6d:eb:dd:42:ad:c2:81:33:62:89:b9:
                    2c:5f:52:b8:cf:1f:c1:0c:90:69:e1:4d:39:a4:73:
                    f8:5c:f1:6e:df:53:04:70:74:43:76:41:f2:7a:86:
                    7b:60:43:e7:5b:ce:17:24:a6:28:24:47:e7:fb:40:
                    9c:9d:8b:66:05:df:b0:70:83:34:ca:e5:4c:2a:42:
                    d1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:9C:01:AB:2E:5C:51:33:0C:15:10:9F:0F:56:06:8F:80:17:43:69
            X509v3 Authority Key Identifier:
                keyid:1B:E0:04:C8:8C:DE:B7:36:10:FC:82:75:8B:90:B1:30:EB:9F:7D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/1BE004C88CDEB73610FC82758B90B130EB9F7D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BE004C88CDEB73610FC82758B90B130EB9F7D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/323830343a343463633a3a2f33322d3430203d3e20323637363534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:44cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:e9:6e:8d:36:08:15:a2:b4:a7:ec:b9:2d:fc:b7:a3:61:15:
         f0:1f:4b:4f:0a:d9:68:ce:c5:d1:32:91:ab:39:4a:53:29:a2:
         cd:ce:cf:ad:d7:20:8c:54:27:10:98:f0:f2:14:10:b7:cc:11:
         45:7c:f3:d6:42:7d:5c:1a:f7:8c:07:84:23:28:f8:9e:b9:2f:
         d9:df:9c:3a:1a:03:6c:8f:e7:b3:f1:fb:02:79:a0:98:57:84:
         6b:a5:0b:3e:d3:f8:8f:fd:c7:9a:67:5a:4f:c1:f7:0f:55:0a:
         d2:d2:75:d7:ce:44:eb:26:76:86:b1:cb:35:9c:76:f5:2f:c7:
         da:fc:04:f8:06:49:dd:08:38:88:49:c5:2f:ae:f5:b6:fa:72:
         8c:2a:cf:ab:ad:83:32:7a:67:b6:49:c0:32:0f:16:18:e6:34:
         f9:0e:8a:76:4e:cf:8a:83:0a:b4:65:45:8c:13:2c:11:a6:f5:
         4f:2e:a3:35:f8:44:3f:42:06:d7:ed:48:85:ec:69:ba:8f:09:
         49:e8:73:45:13:75:28:af:7b:04:b2:75:54:6b:36:0c:95:9c:
         5c:75:23:8d:d8:f5:ca:f7:29:cf:01:7b:a1:36:e0:ba:8e:ae:
         1c:bb:da:c6:03:da:41:74:26:11:2f:5d:9d:89:29:8d:72:64:
         33:c6:c1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:22:03 2025 by rpki-client