Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4shvGyxQgd2jzqpn9VgAgVz1pWrXAA91xFsW3Txa2Q2Q/0/323830343a333139343a343030303a3a2f33342d3334203d3e20323635303234.roa
File:                     323830343a333139343a343030303a3a2f33342d3334203d3e20323635303234.roa (raw, json)
Hash identifier:          RR4GUh07xHyOwJ1/rRdGiEGIoSe0V9SxoQ+VBitRRXc=
Subject key identifier:   77:25:AB:3F:F9:B0:7A:91:D2:C0:0C:C8:D4:01:26:75:C9:97:2E:88
Certificate issuer:       /CN=4911F873F72A053B543EB5703FA4F17EC4F79B55
Certificate serial:       4819E87A62E402EF63F9DE1278C4C17326BBFCD0
Authority key identifier: 49:11:F8:73:F7:2A:05:3B:54:3E:B5:70:3F:A4:F1:7E:C4:F7:9B:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4911F873F72A053B543EB5703FA4F17EC4F79B55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4shvGyxQgd2jzqpn9VgAgVz1pWrXAA91xFsW3Txa2Q2Q/0/323830343a333139343a343030303a3a2f33342d3334203d3e20323635303234.roa
Signing time:             Sat 04 Nov 2023 16:54:25 +0000
ROA not before:           Sat 04 Nov 2023 16:49:25 +0000
ROA not after:            Sat 02 Nov 2024 16:54:25 +0000
asID:                     265024
IP address blocks:        2804:3194:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:19:e8:7a:62:e4:02:ef:63:f9:de:12:78:c4:c1:73:26:bb:fc:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4911F873F72A053B543EB5703FA4F17EC4F79B55
        Validity
            Not Before: Nov  4 16:49:25 2023 GMT
            Not After : Nov  2 16:54:25 2024 GMT
        Subject: CN=7725AB3FF9B07A91D2C00CC8D4012675C9972E88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9b:74:ea:90:82:77:95:f0:8b:ec:42:f2:2b:
                    6e:33:26:e5:d0:a6:71:13:51:64:cb:40:d9:56:50:
                    98:19:b5:94:32:82:af:da:04:b0:48:be:1a:b2:3e:
                    23:e2:59:c9:b4:dd:1c:cf:4f:6d:a8:8e:9c:94:99:
                    2e:74:b5:e6:c5:2a:c9:f1:29:45:64:f5:8d:6d:94:
                    e3:fe:a6:56:7c:42:dc:24:ad:47:3f:5b:54:fd:97:
                    2e:ca:8d:c4:77:87:61:16:3c:66:0d:7e:86:a5:be:
                    51:07:b9:b7:de:b8:b5:3d:57:8c:ee:59:92:c0:11:
                    5a:f1:7d:5b:55:f0:3c:09:c5:38:03:82:55:27:4d:
                    a0:7e:01:9a:50:56:62:f7:27:07:96:a9:3d:aa:b4:
                    02:f9:63:88:bd:a0:0b:d2:31:cb:66:c1:5d:cf:97:
                    40:df:76:0a:1d:19:1d:e8:f9:db:25:b6:e8:8a:07:
                    03:72:da:e5:27:9c:97:8d:0b:8b:88:a6:8c:c4:a5:
                    6b:65:a0:dd:7a:9b:6e:e8:b4:77:cf:4b:e8:ca:73:
                    a4:e2:01:66:6e:26:9d:50:07:10:60:0a:e9:45:75:
                    a5:f5:d6:af:ea:e7:27:24:df:90:27:2d:59:3c:04:
                    f0:3f:4f:1e:2a:19:4e:1e:a2:dc:22:cd:64:35:da:
                    1c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:25:AB:3F:F9:B0:7A:91:D2:C0:0C:C8:D4:01:26:75:C9:97:2E:88
            X509v3 Authority Key Identifier:
                keyid:49:11:F8:73:F7:2A:05:3B:54:3E:B5:70:3F:A4:F1:7E:C4:F7:9B:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4shvGyxQgd2jzqpn9VgAgVz1pWrXAA91xFsW3Txa2Q2Q/0/4911F873F72A053B543EB5703FA4F17EC4F79B55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4911F873F72A053B543EB5703FA4F17EC4F79B55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4shvGyxQgd2jzqpn9VgAgVz1pWrXAA91xFsW3Txa2Q2Q/0/323830343a333139343a343030303a3a2f33342d3334203d3e20323635303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3194:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3f:d5:d2:f4:01:6f:95:f7:65:aa:38:e1:5b:16:d1:c0:5b:28:
         62:ed:b7:e0:4c:41:b1:3d:08:b2:44:56:b1:5e:a6:3e:69:ab:
         42:5a:a6:ab:a5:28:23:33:c1:6f:ec:57:63:3d:c3:c7:7a:10:
         af:b5:ff:f8:1f:55:25:27:ab:19:70:ba:3f:02:8f:a4:47:eb:
         a8:43:c5:74:81:81:fb:64:d9:bb:ed:5a:ea:11:18:fa:45:d7:
         7d:3e:bb:8a:9b:a0:94:a9:43:60:57:2f:fd:e9:a9:f0:2e:52:
         98:c7:ae:19:4f:4e:a6:25:d5:49:e0:5e:b7:77:78:89:b8:6b:
         cc:2e:02:bf:ca:40:cb:36:43:d4:78:76:2f:bb:de:e9:d2:64:
         8c:b2:1d:bb:e7:64:13:d2:20:9d:bc:98:2a:8b:c0:8c:2e:d8:
         f6:59:a4:7b:6d:16:22:3e:5e:00:56:c9:a6:3e:e5:69:74:f2:
         70:b7:4c:97:58:e2:58:0b:7b:48:d9:de:93:68:5f:12:4b:36:
         a4:5e:a7:d9:84:4c:a4:f9:0d:4e:b6:d8:10:b0:20:7a:39:dc:
         27:07:66:cb:df:d3:e0:36:33:de:28:75:0e:d0:10:ac:cf:c7:
         c0:21:bd:33:ce:73:0b:fe:c9:df:2b:ec:a8:5a:d9:41:90:41:
         2c:1b:5c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:05:46 2025 by rpki-client