Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5pCLcYKxUQYj4StmBkGNPf1x9MAvwak5fyEoorN7ncQL/1/323830343a346537383a3a2f33322d3332203d3e20323638323633.roa
File:                     323830343a346537383a3a2f33322d3332203d3e20323638323633.roa (raw, json)
Hash identifier:          OReZ0QR61Wl9GJpF1r1zeanJZuNG5BzEGf801n0zWsA=
Subject key identifier:   D7:D0:DE:FF:F9:3D:3A:19:CE:DF:5D:6B:F4:DF:78:1D:3D:A8:B1:4F
Certificate issuer:       /CN=C41C6680EE5BD7E7919B2A3D1D849805DB132937
Certificate serial:       1E98C7734581160B4CC54749654487BA9723BB57
Authority key identifier: C4:1C:66:80:EE:5B:D7:E7:91:9B:2A:3D:1D:84:98:05:DB:13:29:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C41C6680EE5BD7E7919B2A3D1D849805DB132937.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5pCLcYKxUQYj4StmBkGNPf1x9MAvwak5fyEoorN7ncQL/1/323830343a346537383a3a2f33322d3332203d3e20323638323633.roa
Signing time:             Wed 03 Apr 2024 18:31:47 +0000
ROA not before:           Wed 03 Apr 2024 18:26:47 +0000
ROA not after:            Wed 02 Apr 2025 18:31:47 +0000
asID:                     268263
IP address blocks:        2804:4e78::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:98:c7:73:45:81:16:0b:4c:c5:47:49:65:44:87:ba:97:23:bb:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C41C6680EE5BD7E7919B2A3D1D849805DB132937
        Validity
            Not Before: Apr  3 18:26:47 2024 GMT
            Not After : Apr  2 18:31:47 2025 GMT
        Subject: CN=D7D0DEFFF93D3A19CEDF5D6BF4DF781D3DA8B14F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7f:3c:5f:c0:10:34:da:17:37:63:b5:c3:a6:
                    fb:87:38:bc:b4:01:6c:b5:b1:8b:61:5d:88:17:cd:
                    c0:90:de:41:d3:3f:96:f3:61:62:8b:5b:92:ba:1f:
                    03:8c:06:de:db:fd:c5:e4:48:8f:31:2e:d8:4a:2a:
                    ea:47:62:db:32:39:dd:54:ef:fc:a7:74:4b:6f:7d:
                    4b:2c:14:fc:b4:6a:5e:c5:54:1b:77:46:06:b9:74:
                    e1:a8:92:8b:96:be:14:a5:ef:d7:30:07:3b:23:6c:
                    b2:9c:58:0c:df:d2:42:4e:8a:b5:9c:65:b8:af:d0:
                    d8:07:56:a9:45:02:a5:a7:43:2b:20:d3:42:18:22:
                    ed:05:c0:65:e9:e2:d1:5d:61:98:21:85:05:ef:e4:
                    28:11:bd:48:00:41:ed:6f:30:4f:b8:fd:86:ec:2a:
                    a1:0b:b8:98:94:3b:59:ca:ff:6c:7a:56:f6:f3:59:
                    cc:e9:7d:d6:a4:2b:5c:09:c1:67:bc:a3:78:dc:61:
                    2e:34:ae:65:3f:59:86:84:0b:12:17:9e:94:07:0a:
                    4c:b2:49:23:7d:ce:4e:41:73:e0:a1:4d:9d:8e:e0:
                    c3:9e:e1:c3:a3:31:94:bf:f7:ca:62:3e:56:cf:48:
                    3d:65:02:a2:e6:fc:a4:03:f0:0f:bf:28:5e:2d:4d:
                    cc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D0:DE:FF:F9:3D:3A:19:CE:DF:5D:6B:F4:DF:78:1D:3D:A8:B1:4F
            X509v3 Authority Key Identifier:
                keyid:C4:1C:66:80:EE:5B:D7:E7:91:9B:2A:3D:1D:84:98:05:DB:13:29:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5pCLcYKxUQYj4StmBkGNPf1x9MAvwak5fyEoorN7ncQL/1/C41C6680EE5BD7E7919B2A3D1D849805DB132937.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C41C6680EE5BD7E7919B2A3D1D849805DB132937.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5pCLcYKxUQYj4StmBkGNPf1x9MAvwak5fyEoorN7ncQL/1/323830343a346537383a3a2f33322d3332203d3e20323638323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e78::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:38:21:cf:cb:ed:0d:aa:da:ea:25:2d:b3:2f:85:32:42:e7:
         0f:a9:6b:90:21:24:df:e4:26:4c:ba:3b:c2:f3:c7:b7:74:ba:
         b7:67:79:d7:87:4b:d7:b2:f2:09:9b:09:8c:2c:88:ca:62:41:
         37:09:06:c3:b2:ba:27:e9:1c:d7:71:02:e6:9c:87:ad:36:a5:
         16:60:8f:48:88:0f:50:2c:fb:82:16:1a:88:e6:ff:89:ad:ba:
         a3:01:a9:bf:1c:00:3d:c2:5d:e6:f2:67:03:76:86:d0:b7:4f:
         e6:71:2d:08:e8:93:af:f8:d9:70:00:ba:73:c2:a8:69:1a:a4:
         73:7e:8e:ae:2b:f1:bd:89:a0:13:f6:9c:3c:a2:3e:41:4e:20:
         4c:42:1e:5e:60:09:52:09:be:06:6e:71:18:fd:34:eb:d0:fe:
         b7:26:4e:89:5a:75:9b:9f:ce:1c:bb:0e:ac:3c:27:8b:e1:b6:
         5f:1d:fe:73:0a:39:00:1a:fe:4c:9f:f1:b3:4e:e5:d7:f4:76:
         af:56:3b:78:d1:f1:6d:8c:00:32:bf:1a:4c:66:1f:c1:f4:ba:
         0a:2c:b7:7e:16:06:d0:a7:46:db:ce:60:21:6b:7f:53:1e:e3:
         46:22:87:b9:fd:8d:9b:93:59:05:19:9b:15:21:14:0a:0f:e2:
         58:88:6d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:00:03 2025 by rpki-client