Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/323830343a3737343a383030303a3a2f34302d3430203d3e203532383538.roa
File:                     323830343a3737343a383030303a3a2f34302d3430203d3e203532383538.roa (raw, json)
Hash identifier:          3ilXgLNH5V2C6JhkA2hEf7jZojwH/sClFSiExlvt8j4=
Subject key identifier:   1F:F4:9E:1E:B8:9B:F0:35:39:3F:AB:BC:BC:45:6E:B2:7C:3E:0E:ED
Certificate issuer:       /CN=4765DF83369720EE1AF514C7CA6660A475D18592
Certificate serial:       20FDDEA2D3F46666A312988DFF5CE96D7D40787E
Authority key identifier: 47:65:DF:83:36:97:20:EE:1A:F5:14:C7:CA:66:60:A4:75:D1:85:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4765DF83369720EE1AF514C7CA6660A475D18592.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/323830343a3737343a383030303a3a2f34302d3430203d3e203532383538.roa
Signing time:             Thu 06 Mar 2025 04:33:08 +0000
ROA not before:           Thu 06 Mar 2025 04:28:08 +0000
ROA not after:            Thu 05 Mar 2026 04:33:08 +0000
asID:                     52858
IP address blocks:        2804:774:8000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:fd:de:a2:d3:f4:66:66:a3:12:98:8d:ff:5c:e9:6d:7d:40:78:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4765DF83369720EE1AF514C7CA6660A475D18592
        Validity
            Not Before: Mar  6 04:28:08 2025 GMT
            Not After : Mar  5 04:33:08 2026 GMT
        Subject: CN=1FF49E1EB89BF035393FABBCBC456EB27C3E0EED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f4:46:10:d5:e0:2f:ed:da:3a:11:23:9a:0a:
                    e3:17:9e:14:70:44:6e:ae:78:b3:37:a1:55:c8:06:
                    44:59:53:cd:96:d1:8e:fe:8a:29:06:b4:82:e6:cb:
                    98:6b:11:db:a6:a0:09:85:34:aa:0b:d2:9b:b2:46:
                    60:c0:d4:01:1e:7d:c4:bb:0b:49:d5:0e:f3:b4:a9:
                    61:b4:36:01:b1:a5:17:0a:8f:1d:ac:dd:fd:24:25:
                    f3:fe:04:81:62:01:7b:90:f0:86:77:82:9a:b1:3f:
                    d4:e3:f5:ba:12:06:13:de:e5:6d:a7:88:37:ca:3e:
                    af:21:ec:dd:4d:a8:5e:e9:2f:0c:fc:b8:1a:f1:6e:
                    24:db:ef:b1:35:91:0e:cb:4a:d3:0e:ee:7e:17:ae:
                    8a:aa:d5:24:c5:2a:f0:8f:dd:69:77:d7:e9:05:68:
                    73:39:bb:e4:b7:e6:b1:ab:2e:27:b3:e9:2e:aa:6d:
                    44:ce:d3:ed:23:6a:0c:7e:5f:7f:ef:1e:a0:bf:e2:
                    9b:38:81:cf:1c:0c:7a:ad:a8:1b:25:20:ef:fc:16:
                    84:0a:6a:99:8b:86:90:bf:6c:61:83:e6:1a:ea:b1:
                    e2:e8:a3:7b:6d:bf:bb:70:ad:a7:8e:c1:43:ec:05:
                    8d:3a:a7:38:90:8c:29:b3:5a:00:d2:8a:20:a6:cf:
                    00:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F4:9E:1E:B8:9B:F0:35:39:3F:AB:BC:BC:45:6E:B2:7C:3E:0E:ED
            X509v3 Authority Key Identifier:
                keyid:47:65:DF:83:36:97:20:EE:1A:F5:14:C7:CA:66:60:A4:75:D1:85:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/4765DF83369720EE1AF514C7CA6660A475D18592.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4765DF83369720EE1AF514C7CA6660A475D18592.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/323830343a3737343a383030303a3a2f34302d3430203d3e203532383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:774:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         a7:9f:c0:64:52:21:a4:2b:78:a4:82:67:f5:5e:11:89:e5:26:
         eb:88:48:e7:a6:82:5a:8e:b4:07:c1:36:1a:de:00:e5:67:42:
         d9:68:96:23:79:8b:55:73:9e:5d:d0:19:c9:64:13:a2:26:88:
         29:6a:be:59:c9:b9:03:49:2f:82:4d:5a:e2:32:b1:03:cf:b2:
         03:44:88:a4:cc:3d:bd:14:4a:28:32:0f:73:c4:6b:87:b3:72:
         22:a0:d2:55:0e:77:ca:11:81:2f:61:52:be:0d:0d:d9:a5:22:
         5e:af:78:8f:c8:8b:a2:22:1f:a8:91:b8:3f:96:1b:b2:9d:11:
         72:28:30:53:67:79:17:74:ee:3c:b1:c0:32:1a:03:06:e4:e5:
         30:32:2c:3d:95:21:d4:e7:62:d8:49:04:12:7b:42:ed:d7:40:
         3d:b4:91:69:16:1a:93:4b:95:79:e0:38:9a:e3:43:69:c8:cf:
         d7:4f:a0:e2:ce:8b:cc:56:15:fb:09:d1:bd:dd:98:ca:a7:1c:
         b1:9b:23:dc:9b:23:c9:9e:c2:f6:37:ec:c7:4f:19:a3:f7:4b:
         af:71:f3:16:4d:97:00:9d:10:3d:2d:8e:9a:44:15:1c:63:79:
         42:c2:2d:fb:73:b6:bc:5d:e7:92:9b:19:10:44:ee:a7:14:90:
         48:91:9a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:59:37 2025 by rpki-client