Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/323830343a356631343a3a2f33342d3334203d3e20323639303735.roa
File:                     323830343a356631343a3a2f33342d3334203d3e20323639303735.roa (raw, json)
Hash identifier:          PGxnYpAIxoQdi1S2GBOlo37cD95Ic9b0chOq4G78e2U=
Subject key identifier:   19:EA:58:91:49:9A:24:41:5B:9B:CD:87:2C:32:93:3C:46:38:12:E8
Certificate issuer:       /CN=46E0D678CE6FAC85144279EA7DE8AF4633267C1E
Certificate serial:       6FDBCBB0C85E289437E6A45DD11DFDF18EB782A1
Authority key identifier: 46:E0:D6:78:CE:6F:AC:85:14:42:79:EA:7D:E8:AF:46:33:26:7C:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46E0D678CE6FAC85144279EA7DE8AF4633267C1E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/323830343a356631343a3a2f33342d3334203d3e20323639303735.roa
Signing time:             Wed 05 Feb 2025 12:33:14 +0000
ROA not before:           Wed 05 Feb 2025 12:28:14 +0000
ROA not after:            Wed 04 Feb 2026 12:33:14 +0000
asID:                     269075
IP address blocks:        2804:5f14::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:db:cb:b0:c8:5e:28:94:37:e6:a4:5d:d1:1d:fd:f1:8e:b7:82:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46E0D678CE6FAC85144279EA7DE8AF4633267C1E
        Validity
            Not Before: Feb  5 12:28:14 2025 GMT
            Not After : Feb  4 12:33:14 2026 GMT
        Subject: CN=19EA5891499A24415B9BCD872C32933C463812E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:10:3e:87:73:3e:ef:8c:6b:bd:d7:ad:34:fe:
                    f5:1a:b3:5f:61:76:28:4a:82:46:f6:78:4a:0e:d9:
                    b5:f5:5f:d5:5c:59:89:22:3a:4e:2c:37:86:80:f1:
                    3a:c1:cf:80:b2:79:30:9e:2a:ed:12:74:89:2c:fb:
                    5c:14:e6:71:f6:81:0b:75:bd:04:20:00:56:72:e6:
                    75:31:55:cb:9a:86:e5:20:80:4f:c8:af:44:65:cc:
                    46:20:53:45:d9:6a:b8:01:3d:11:02:1d:18:15:b8:
                    eb:7b:77:68:d4:1b:d4:f2:47:93:f7:f4:ed:82:cd:
                    ef:64:db:7a:fb:3f:8b:9d:2a:d6:a1:38:ad:02:5a:
                    8b:84:af:78:63:3d:86:54:83:3a:95:fd:8b:f3:2b:
                    be:f6:9f:52:3f:58:76:08:63:64:f3:be:20:5a:c9:
                    c2:86:37:a4:dd:42:0c:dd:9d:06:91:2a:d6:94:f6:
                    f6:52:9d:d5:f5:f1:3e:56:d3:ab:1f:84:2d:a7:9a:
                    f5:e9:84:89:e3:71:4c:f4:5e:da:ba:9b:49:e3:fc:
                    bf:94:6a:a7:6a:b9:fb:e0:fb:b0:71:11:97:e0:66:
                    33:68:f9:89:38:23:e9:cc:d7:16:a5:f9:c0:d8:ba:
                    ed:aa:0a:07:27:ac:5f:9f:0a:8f:b5:47:9c:54:1c:
                    2b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:EA:58:91:49:9A:24:41:5B:9B:CD:87:2C:32:93:3C:46:38:12:E8
            X509v3 Authority Key Identifier:
                keyid:46:E0:D6:78:CE:6F:AC:85:14:42:79:EA:7D:E8:AF:46:33:26:7C:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/46E0D678CE6FAC85144279EA7DE8AF4633267C1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46E0D678CE6FAC85144279EA7DE8AF4633267C1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/323830343a356631343a3a2f33342d3334203d3e20323639303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f14::/34

    Signature Algorithm: sha256WithRSAEncryption
         22:5f:97:b4:8a:7f:1d:f2:3f:dd:db:a5:d7:cb:5f:f3:17:9d:
         82:46:5e:40:b0:f9:f6:d3:f6:a2:a6:fc:23:7d:fc:62:8f:5d:
         2e:fe:32:68:6c:2e:2f:ca:78:c1:fe:b5:27:67:2a:df:5b:c4:
         fb:d7:3a:3d:42:6b:8f:14:cb:d6:d6:ab:37:c8:fd:31:76:2b:
         cd:63:45:a6:7d:f9:5d:70:47:04:7c:46:41:57:6a:b3:a0:a1:
         05:b4:fe:54:ad:26:8e:c4:2f:84:66:05:3c:2c:c7:c7:a5:48:
         a9:ae:09:7c:a1:35:6b:2f:42:3f:e6:b5:3c:60:51:30:09:5f:
         30:5a:08:90:87:43:31:83:ca:01:4a:18:72:93:f4:90:25:93:
         40:74:fe:a8:4d:18:a6:55:e5:08:01:a9:5d:83:a0:98:8f:6b:
         d7:87:fd:86:1b:31:d6:7b:e3:18:bd:bb:58:8d:bb:14:78:76:
         87:c1:30:ba:ac:62:23:18:b4:b5:f7:22:47:2e:3e:3b:2b:8a:
         14:d2:1d:53:f8:5c:72:fc:a9:68:87:45:8e:db:a5:c4:32:73:
         07:6c:4a:2c:9a:ae:f1:cd:79:cf:c7:44:fb:d6:a4:c4:f0:7b:
         52:38:68:a8:d2:a1:6d:1b:77:57:84:a5:28:fb:5b:e0:f6:19:
         d5:c0:e2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:31:47 2025 by rpki-client