Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6CkyE4m3WEX8of93tECC3QN875XnJtEHd4BUEtATXUnw/0/323830343a363839383a3a2f33322d3336203d3e20323639373033.roa
File:                     323830343a363839383a3a2f33322d3336203d3e20323639373033.roa (raw, json)
Hash identifier:          B84na1gp1hTevua+KFS1hwBjvshMc3tz3j/tAXdO0/A=
Subject key identifier:   BD:10:B4:4A:B1:76:75:E0:44:21:F9:D7:D2:0F:ED:A4:8A:7D:41:62
Certificate issuer:       /CN=04C14437D9722F796B525D058F95D060CC99E457
Certificate serial:       632695A6483DCF5814B318E1377A31EA49B22BE5
Authority key identifier: 04:C1:44:37:D9:72:2F:79:6B:52:5D:05:8F:95:D0:60:CC:99:E4:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04C14437D9722F796B525D058F95D060CC99E457.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6CkyE4m3WEX8of93tECC3QN875XnJtEHd4BUEtATXUnw/0/323830343a363839383a3a2f33322d3336203d3e20323639373033.roa
Signing time:             Mon 26 Feb 2024 15:36:38 +0000
ROA not before:           Mon 26 Feb 2024 15:31:38 +0000
ROA not after:            Mon 24 Feb 2025 15:36:38 +0000
asID:                     269703
IP address blocks:        2804:6898::/32 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:26:95:a6:48:3d:cf:58:14:b3:18:e1:37:7a:31:ea:49:b2:2b:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C14437D9722F796B525D058F95D060CC99E457
        Validity
            Not Before: Feb 26 15:31:38 2024 GMT
            Not After : Feb 24 15:36:38 2025 GMT
        Subject: CN=BD10B44AB17675E04421F9D7D20FEDA48A7D4162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:23:e4:04:c2:73:20:3a:46:3d:66:c6:6e:c8:
                    e4:27:f8:25:d5:77:7c:b0:33:bb:25:32:c4:80:6f:
                    43:28:52:b2:3d:a4:3c:d9:fb:34:03:92:7b:d6:bf:
                    87:42:c1:b6:e1:f4:e2:8a:32:21:04:87:e9:fe:94:
                    7d:16:d3:7c:f8:bf:3a:5b:4f:37:8b:7e:13:b9:77:
                    f7:09:61:04:25:48:a3:5d:a8:52:b6:e9:60:85:eb:
                    b4:52:4c:0f:cb:1d:89:48:6a:9a:c4:42:0f:e1:22:
                    4d:5e:41:90:71:fa:b1:fa:7f:14:9a:55:de:3e:a2:
                    b6:0a:df:c3:bf:d0:83:24:06:cd:d0:87:35:bb:ad:
                    f5:b0:7d:5f:88:d4:f7:a5:78:2e:00:3f:7a:67:44:
                    b7:c1:5f:30:21:86:9d:09:6a:67:c8:7c:31:ab:ab:
                    b7:bd:72:f6:4e:61:b0:53:b9:68:a1:e8:1a:0b:00:
                    fc:b2:fd:69:6b:77:a7:69:83:ff:f6:5f:d9:df:e1:
                    cb:f0:0c:4b:54:23:b8:15:3a:3d:c4:21:9e:42:37:
                    5f:32:7e:67:07:c7:d3:de:1a:49:97:f5:39:e0:4d:
                    34:f4:45:05:ba:a0:67:ef:31:88:17:f4:c0:3c:b5:
                    1d:64:b6:00:1c:af:10:9d:c5:5d:9b:47:a4:ca:13:
                    eb:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:10:B4:4A:B1:76:75:E0:44:21:F9:D7:D2:0F:ED:A4:8A:7D:41:62
            X509v3 Authority Key Identifier:
                keyid:04:C1:44:37:D9:72:2F:79:6B:52:5D:05:8F:95:D0:60:CC:99:E4:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6CkyE4m3WEX8of93tECC3QN875XnJtEHd4BUEtATXUnw/0/04C14437D9722F796B525D058F95D060CC99E457.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04C14437D9722F796B525D058F95D060CC99E457.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CkyE4m3WEX8of93tECC3QN875XnJtEHd4BUEtATXUnw/0/323830343a363839383a3a2f33322d3336203d3e20323639373033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6898::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:60:31:9c:6f:bc:55:4b:e3:c9:e8:df:b9:f6:ea:09:52:29:
         a9:ec:48:94:2b:58:dc:3b:95:37:b4:1a:a5:f3:c7:78:21:ef:
         d9:37:d3:6a:f0:1d:ac:3d:c7:5d:0d:5d:b6:ae:4e:7c:53:00:
         20:02:42:03:b7:6d:52:c4:3c:c9:c0:65:90:77:91:3b:b9:a7:
         69:d3:fd:fb:41:78:cd:60:90:5f:28:25:9b:20:a9:d3:e5:59:
         37:d6:aa:fb:c7:e6:70:ea:b2:4b:97:a7:e8:6d:9c:37:68:cc:
         c7:33:48:42:02:bf:26:dc:0a:cb:2f:87:f9:fc:f9:e1:d9:7d:
         68:ec:b5:07:47:80:d7:fb:0f:cd:3f:eb:b9:80:6f:a0:af:d2:
         4f:c4:a0:b6:e7:d8:af:46:de:0e:bc:5c:d9:ac:fd:e4:c2:f7:
         4b:a8:ac:0e:0b:c5:71:66:37:a5:8a:fb:14:f1:32:14:74:ca:
         cf:6a:da:2d:3a:bc:44:f2:ce:01:b3:0a:c2:5c:b4:f9:bd:08:
         2e:c9:b6:2d:9d:ae:5b:ac:f2:c0:e8:1e:2c:95:75:fd:f9:d7:
         c1:b6:b4:db:fc:2d:c4:1a:ea:cd:4a:d0:82:3c:d7:50:1c:5b:
         a5:b3:80:a5:67:b6:7d:9c:78:01:5d:34:4b:85:56:e2:56:04:
         81:da:22:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:03:10 2025 by rpki-client