Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/323830343a356562383a3a2f33322d3332203d3e20323632383636.roa
File:                     323830343a356562383a3a2f33322d3332203d3e20323632383636.roa (raw, json)
Hash identifier:          EBZ9K9WgqRwAazK2T/kucklOE05vAg154H58Jp7hwY4=
Subject key identifier:   D3:FA:6A:E4:49:62:6E:7B:01:D0:4B:04:5C:A1:E9:76:99:B3:1B:F3
Certificate issuer:       /CN=732B1140085142A7D7474788EEF465DEABBE5080
Certificate serial:       3C969C7042C2689A71E4F31A452404009A08A09F
Authority key identifier: 73:2B:11:40:08:51:42:A7:D7:47:47:88:EE:F4:65:DE:AB:BE:50:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/323830343a356562383a3a2f33322d3332203d3e20323632383636.roa
Signing time:             Thu 06 Mar 2025 01:21:39 +0000
ROA not before:           Thu 06 Mar 2025 01:16:39 +0000
ROA not after:            Thu 05 Mar 2026 01:21:39 +0000
asID:                     262866
IP address blocks:        2804:5eb8::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:96:9c:70:42:c2:68:9a:71:e4:f3:1a:45:24:04:00:9a:08:a0:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=732B1140085142A7D7474788EEF465DEABBE5080
        Validity
            Not Before: Mar  6 01:16:39 2025 GMT
            Not After : Mar  5 01:21:39 2026 GMT
        Subject: CN=D3FA6AE449626E7B01D04B045CA1E97699B31BF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:79:e2:e0:42:a4:27:8a:8c:6d:b3:ac:85:21:
                    ed:2e:da:a6:ed:9a:7d:f4:be:55:94:c8:c3:8d:0e:
                    0e:6d:e7:e9:f6:b1:23:91:dc:1c:e5:6d:98:e2:99:
                    b5:34:d8:26:4c:c7:07:c1:04:43:ae:e5:57:04:0e:
                    7a:65:3f:ed:cd:f4:da:ee:bc:8c:61:16:58:c6:c4:
                    e0:d1:83:ec:e8:2d:fe:04:3c:8c:81:a0:f9:4b:68:
                    72:9f:72:b9:ff:a0:59:62:1f:ef:1d:d2:82:df:bf:
                    09:df:8a:09:ea:4f:87:48:bf:3b:ba:37:d9:c4:1c:
                    74:ba:8b:15:8d:fb:a7:33:51:58:62:3f:a0:f6:1c:
                    01:6b:bd:bb:06:bd:49:4f:f3:4e:84:ba:39:21:67:
                    43:07:46:fa:73:53:67:7e:5c:67:29:52:7c:ea:2c:
                    66:10:91:6d:e2:84:c7:c1:da:7b:60:2d:42:6a:80:
                    2f:e6:83:46:95:9b:03:36:53:ef:d9:56:7a:11:37:
                    c4:66:15:bb:9b:e9:e6:a9:e3:12:12:2d:1a:91:c4:
                    d4:45:74:ef:d2:07:85:8b:b9:8b:66:54:c3:0c:d5:
                    21:a4:41:7d:ae:b1:d8:6b:a4:63:f4:2e:42:45:f6:
                    01:8d:8f:8b:a7:d5:30:a4:89:18:fa:10:7f:18:7f:
                    bb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:FA:6A:E4:49:62:6E:7B:01:D0:4B:04:5C:A1:E9:76:99:B3:1B:F3
            X509v3 Authority Key Identifier:
                keyid:73:2B:11:40:08:51:42:A7:D7:47:47:88:EE:F4:65:DE:AB:BE:50:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/732B1140085142A7D7474788EEF465DEABBE5080.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/323830343a356562383a3a2f33322d3332203d3e20323632383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5eb8::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:7f:05:96:38:09:dd:20:4c:38:7c:01:6a:8b:4e:fc:1a:a0:
         5f:0e:84:ba:50:35:44:a7:fd:dd:cf:60:df:a6:1f:e7:32:ba:
         b8:96:a4:ca:5d:89:74:f1:c6:5d:30:b8:2e:8e:05:76:dd:42:
         91:fb:85:a1:c2:e5:b4:d3:e7:4d:72:3d:7a:9a:fe:b7:6c:52:
         b9:57:31:36:4d:b5:3b:64:c8:04:73:90:ca:f3:d9:b9:9f:8e:
         08:07:3c:7f:42:bb:b4:56:b4:cd:aa:fc:dc:08:d8:46:fc:82:
         71:27:de:8b:86:f2:e5:2d:52:26:6d:33:0f:e8:4e:cf:71:cb:
         3d:9a:99:b3:ff:c0:69:60:d3:8b:21:94:ce:95:5e:e4:c6:b9:
         ef:a2:3a:fd:a4:86:2f:e9:ff:0a:34:bf:b5:15:b9:1c:7e:67:
         8a:46:b2:16:3e:c2:9a:21:d0:8c:4f:66:5c:49:c0:f7:91:28:
         39:e9:58:28:0f:a5:7d:29:97:b8:e1:76:b5:33:76:2d:c4:45:
         96:5e:57:9e:41:0a:73:21:9c:69:9a:10:82:04:8f:39:60:41:
         78:2c:eb:c0:33:f6:b5:1d:3a:d9:b5:75:17:a5:09:52:7b:da:
         bc:b2:69:52:3b:aa:22:7e:d2:cc:8b:a7:32:30:33:30:d7:60:
         12:18:2c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:28:13 2025 by rpki-client