Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a3a2f33322d313238203d3e20323637393432.roa
File:                     323830343a353539303a3a2f33322d313238203d3e20323637393432.roa (raw, json)
Hash identifier:          g/qqxIOQthwwNV+KnqEghVYQSEhO/wGnYImrzYSzHwU=
Subject key identifier:   F9:C6:34:C1:8B:61:EE:C8:44:76:45:83:32:8B:E6:76:67:50:3A:E9
Certificate issuer:       /CN=F146CD0F75E928D3EFD8DDAA7113DDF91FF26F14
Certificate serial:       667052AC34DAE7FA88FB02C43CD7B39EFF81D535
Authority key identifier: F1:46:CD:0F:75:E9:28:D3:EF:D8:DD:AA:71:13:DD:F9:1F:F2:6F:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F146CD0F75E928D3EFD8DDAA7113DDF91FF26F14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a3a2f33322d313238203d3e20323637393432.roa
Signing time:             Fri 31 Jan 2025 21:53:00 +0000
ROA not before:           Fri 31 Jan 2025 21:48:00 +0000
ROA not after:            Fri 30 Jan 2026 21:53:00 +0000
asID:                     267942
IP address blocks:        2804:5590::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:70:52:ac:34:da:e7:fa:88:fb:02:c4:3c:d7:b3:9e:ff:81:d5:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F146CD0F75E928D3EFD8DDAA7113DDF91FF26F14
        Validity
            Not Before: Jan 31 21:48:00 2025 GMT
            Not After : Jan 30 21:53:00 2026 GMT
        Subject: CN=F9C634C18B61EEC844764583328BE67667503AE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a3:b8:1d:d2:71:08:d1:9a:23:ed:8d:92:b8:
                    90:12:a6:41:5d:ff:bc:6a:df:bb:64:fd:db:0b:dc:
                    09:5b:c9:4d:78:d4:e7:db:1f:98:45:7a:a8:9e:53:
                    33:d4:55:4d:37:58:96:75:d4:35:22:0e:0c:74:a4:
                    71:81:e1:de:7a:02:10:40:02:de:a0:85:af:14:80:
                    f9:c9:6f:f8:55:34:39:4d:fe:6e:cb:a3:96:61:dc:
                    f5:66:0b:3a:be:88:d1:e0:7d:2f:50:45:5f:4c:97:
                    47:53:98:1a:8b:a7:2e:9f:4e:39:9b:6e:97:52:e4:
                    28:ac:9f:75:2e:69:fe:c0:a7:24:cb:61:f5:d0:2e:
                    53:44:25:b1:24:ee:53:f3:78:a8:ce:14:dd:4d:f2:
                    87:64:60:fd:96:0c:15:c1:47:66:43:f4:1b:0e:52:
                    81:1e:ae:07:6c:b9:9c:df:af:2c:c1:0b:a6:22:d5:
                    26:8d:cb:8f:45:00:a6:ca:f3:88:6f:95:2b:ea:e6:
                    28:a9:2f:4a:07:fa:bd:fb:27:ca:57:06:be:ad:ca:
                    57:6e:83:79:97:8b:8d:3a:8c:8c:c9:b0:7e:00:43:
                    fe:6b:9d:23:ac:2a:fd:c3:03:18:85:e4:ed:6a:07:
                    a0:dc:77:6d:f8:f6:8d:7b:12:06:8c:0d:ea:aa:ea:
                    b6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:C6:34:C1:8B:61:EE:C8:44:76:45:83:32:8B:E6:76:67:50:3A:E9
            X509v3 Authority Key Identifier:
                keyid:F1:46:CD:0F:75:E9:28:D3:EF:D8:DD:AA:71:13:DD:F9:1F:F2:6F:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/F146CD0F75E928D3EFD8DDAA7113DDF91FF26F14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F146CD0F75E928D3EFD8DDAA7113DDF91FF26F14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a3a2f33322d313238203d3e20323637393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5590::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:47:c4:cb:60:a3:9b:92:fd:02:04:88:6d:d6:fc:99:99:74:
         50:93:4a:ec:93:4c:86:ba:fb:38:65:2b:ab:5e:53:5a:8f:1f:
         12:7b:af:06:d5:d3:58:bf:5d:3c:5d:4f:a8:6e:91:dd:cd:0a:
         10:29:57:cc:37:04:b1:ad:65:cf:ae:33:a4:40:8f:8b:86:af:
         d7:ab:1d:c0:2b:8b:45:f3:e3:1d:df:b4:72:5b:13:89:ea:ec:
         d1:26:a3:5a:e0:a2:0f:0d:6d:d4:fe:34:74:08:60:80:22:2e:
         06:f6:8a:d0:5a:3d:8b:27:d0:39:7f:e8:9b:1e:b7:66:04:40:
         0c:78:e7:cc:61:c3:2e:1b:39:4b:0c:9c:4c:75:8b:5a:14:38:
         ad:ea:4f:d5:91:27:34:de:80:5b:f1:89:b6:a2:35:02:dc:78:
         98:82:d1:5e:21:d9:65:4f:67:7d:0c:68:87:f3:5a:50:3c:2a:
         13:36:e8:cd:d1:ef:a7:33:f0:78:66:52:3f:c2:3e:fa:82:13:
         26:7f:92:73:82:ec:bf:11:4f:d1:d6:a0:ed:7e:11:27:31:3e:
         80:74:11:4d:c7:1e:c7:b8:13:50:53:b1:15:71:38:67:08:24:
         16:52:28:0a:75:c1:b0:e3:d9:b2:0b:92:d5:49:5c:2c:d0:4c:
         01:71:7a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:27:48 2025 by rpki-client