Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/1/323830343a366431343a3a2f33322d3438203d3e20323730353131.roa
File:                     323830343a366431343a3a2f33322d3438203d3e20323730353131.roa (raw, json)
Hash identifier:          1AyXqsbNrxCpHeJLdATGLFdpcoAggh6t0n3NiuIaWuo=
Subject key identifier:   B1:01:29:FA:AE:3F:E5:7F:5B:E5:26:92:4E:15:36:A8:E9:73:FA:C4
Certificate issuer:       /CN=933D25103B9996B3949AF7607EDF6BC993402B70
Certificate serial:       4682D2337871078360C8E1EF907CEEA3FF0B518D
Authority key identifier: 93:3D:25:10:3B:99:96:B3:94:9A:F7:60:7E:DF:6B:C9:93:40:2B:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/933D25103B9996B3949AF7607EDF6BC993402B70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/1/323830343a366431343a3a2f33322d3438203d3e20323730353131.roa
Signing time:             Thu 06 Mar 2025 17:55:43 +0000
ROA not before:           Thu 06 Mar 2025 17:50:43 +0000
ROA not after:            Thu 05 Mar 2026 17:55:43 +0000
asID:                     270511
IP address blocks:        2804:6d14::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:82:d2:33:78:71:07:83:60:c8:e1:ef:90:7c:ee:a3:ff:0b:51:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=933D25103B9996B3949AF7607EDF6BC993402B70
        Validity
            Not Before: Mar  6 17:50:43 2025 GMT
            Not After : Mar  5 17:55:43 2026 GMT
        Subject: CN=B10129FAAE3FE57F5BE526924E1536A8E973FAC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:31:3c:f1:af:37:4e:f9:ba:99:85:d4:48:45:
                    57:fa:e3:7c:6b:de:6e:b4:33:6f:fb:55:fc:81:b3:
                    5a:92:8f:b0:57:cb:2e:ba:4e:35:ed:ce:f3:af:79:
                    f1:d9:2d:1a:40:d1:dc:4b:ac:23:ad:d0:49:62:fa:
                    a5:6a:da:a0:1d:90:ac:5f:ca:ed:8f:42:c0:ff:58:
                    f7:de:f0:c7:bc:a5:06:94:ad:be:1d:5e:99:cf:25:
                    84:3c:cc:28:46:9d:29:d3:2e:dc:94:eb:92:9d:f3:
                    0c:1c:f6:8c:14:0d:bd:84:ad:18:ee:e3:f1:15:22:
                    db:c5:96:dd:83:8d:5c:ec:ec:21:3b:b3:05:d3:45:
                    61:dd:a0:90:c0:5f:17:43:ab:18:fb:16:92:36:ac:
                    33:20:96:d1:09:b3:b2:56:c8:24:4f:42:4a:3b:61:
                    7f:45:9c:9c:15:20:f0:7a:b9:57:60:5b:25:bb:7a:
                    c0:96:29:54:e1:7e:5e:df:e8:7d:e8:30:16:95:fb:
                    3c:c9:5c:bf:6b:97:10:ca:dd:15:29:6b:e1:97:91:
                    d1:70:2a:14:32:2a:2e:9a:88:fb:2f:15:ca:9f:01:
                    8c:33:06:72:75:dc:40:39:42:15:41:c0:c5:3c:66:
                    3b:f8:62:2f:44:5d:63:14:06:95:24:ff:c1:53:32:
                    e7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:01:29:FA:AE:3F:E5:7F:5B:E5:26:92:4E:15:36:A8:E9:73:FA:C4
            X509v3 Authority Key Identifier:
                keyid:93:3D:25:10:3B:99:96:B3:94:9A:F7:60:7E:DF:6B:C9:93:40:2B:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/1/933D25103B9996B3949AF7607EDF6BC993402B70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/933D25103B9996B3949AF7607EDF6BC993402B70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/1/323830343a366431343a3a2f33322d3438203d3e20323730353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6d14::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:6f:bd:87:4a:a8:60:e3:1c:6a:01:62:6d:1f:bd:11:93:36:
         39:eb:d9:8a:97:41:84:55:2b:8f:64:44:2b:65:78:a2:2d:7c:
         ba:bc:8a:a3:30:c0:ba:2e:95:c8:aa:a8:e7:b9:65:e8:b0:ae:
         c7:03:65:a4:80:3f:64:d0:cb:58:91:87:25:ac:fc:b3:24:de:
         74:cd:18:db:88:d6:20:7b:0e:01:f9:18:8c:9c:fd:bb:61:97:
         ef:36:52:6e:a7:91:7f:32:7a:c5:6a:fa:d4:2a:47:c7:d9:c4:
         e0:64:12:73:3d:72:67:1b:49:54:d5:46:2a:94:7f:eb:b4:76:
         a0:81:d3:87:b1:d0:e0:ac:ac:8c:7c:a4:aa:cf:db:a7:83:df:
         9b:cf:69:c1:5f:34:99:73:f2:07:84:28:45:c1:99:a3:e9:53:
         9f:1c:5d:bb:62:5e:89:f0:42:d6:69:fd:10:5c:11:96:3b:cc:
         49:80:4c:9c:ff:3f:4d:b6:fe:26:ff:01:4b:a6:92:bc:d2:6e:
         30:72:97:91:c8:79:15:96:97:ea:a9:bc:a3:9d:d7:9a:9d:83:
         19:00:ce:d5:44:0c:8f:02:0d:cb:5a:c5:45:9d:67:cc:da:64:
         da:10:4c:6a:33:0c:7d:51:12:5d:3b:72:93:30:fe:ae:bd:ed:
         39:37:a2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:06:27 2025 by rpki-client