Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/323830343a313634633a616263623a3a2f34382d3438203d3e20323633323830.roa
File:                     323830343a313634633a616263623a3a2f34382d3438203d3e20323633323830.roa (raw, json)
Hash identifier:          v6vtcVtojKMb7fm54RcvwQ5OYxhclZknjvsFw4uvV8Y=
Subject key identifier:   41:E5:4B:32:47:99:16:F4:8C:0E:34:F0:D3:16:0D:C6:8C:03:D4:50
Certificate issuer:       /CN=A3F168F0E50A90E41A736FE0D5FA919765E1B5E6
Certificate serial:       7B5878DFDDDB5F0C52DA74A991D1D865655B6DDD
Authority key identifier: A3:F1:68:F0:E5:0A:90:E4:1A:73:6F:E0:D5:FA:91:97:65:E1:B5:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/323830343a313634633a616263623a3a2f34382d3438203d3e20323633323830.roa
Signing time:             Thu 06 Mar 2025 16:46:49 +0000
ROA not before:           Thu 06 Mar 2025 16:41:49 +0000
ROA not after:            Thu 05 Mar 2026 16:46:49 +0000
asID:                     263280
IP address blocks:        2804:164c:abcb::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:58:78:df:dd:db:5f:0c:52:da:74:a9:91:d1:d8:65:65:5b:6d:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3F168F0E50A90E41A736FE0D5FA919765E1B5E6
        Validity
            Not Before: Mar  6 16:41:49 2025 GMT
            Not After : Mar  5 16:46:49 2026 GMT
        Subject: CN=41E54B32479916F48C0E34F0D3160DC68C03D450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:68:6a:70:cd:1e:e6:f0:2b:85:82:b0:fe:da:
                    9c:8f:c4:dd:64:01:f6:68:8c:79:51:1a:df:27:57:
                    af:6f:32:75:6d:88:47:50:9f:50:5e:87:0d:75:ce:
                    78:0b:36:c6:74:36:fc:20:50:08:2b:99:6b:63:26:
                    df:14:6e:14:6f:5d:4a:28:89:99:1c:87:1e:05:cc:
                    c0:17:ae:de:fc:6c:44:bb:40:8a:f7:a4:0e:84:72:
                    95:88:62:ba:ff:c8:9d:7f:a1:ac:9e:ef:05:86:6a:
                    e7:64:8f:b1:66:a0:00:13:db:97:ab:9c:62:72:33:
                    92:db:f9:ac:94:85:cc:e9:3c:7b:87:c2:bb:6c:23:
                    87:6d:e2:ba:5f:23:3a:fe:36:fd:7a:15:79:3f:c7:
                    50:e5:c2:e3:8c:ad:84:2f:45:19:61:03:8e:f4:0f:
                    3c:7d:9e:a5:c5:e8:54:c1:1b:7e:45:40:d5:dc:d3:
                    d8:84:51:f7:2f:72:c0:9c:1a:d3:0b:01:a3:e1:bf:
                    fc:5c:3c:c1:59:ef:64:6a:96:8e:db:45:7e:9f:40:
                    e9:b8:9a:48:dd:b3:d5:e8:0b:49:90:79:a3:51:2d:
                    61:14:bf:c4:48:dc:1c:52:36:15:ca:38:1c:18:bc:
                    a3:23:7d:25:31:de:be:b6:6a:06:ff:d3:eb:f6:26:
                    68:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E5:4B:32:47:99:16:F4:8C:0E:34:F0:D3:16:0D:C6:8C:03:D4:50
            X509v3 Authority Key Identifier:
                keyid:A3:F1:68:F0:E5:0A:90:E4:1A:73:6F:E0:D5:FA:91:97:65:E1:B5:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/323830343a313634633a616263623a3a2f34382d3438203d3e20323633323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:164c:abcb::/48

    Signature Algorithm: sha256WithRSAEncryption
         da:62:39:de:4d:3f:43:1d:12:35:9f:08:82:16:77:39:00:80:
         15:95:4f:53:48:8e:ff:11:a4:32:59:cf:5c:da:c6:a5:7f:00:
         4e:cc:a6:4a:dd:82:a7:b2:d1:2e:ff:ec:44:d9:d1:56:71:c8:
         93:ac:95:4f:2f:e4:7c:3b:38:b0:43:4b:9a:75:5d:e1:eb:d0:
         44:91:08:58:9b:b0:98:30:20:59:3b:4e:e5:e2:4d:ac:c4:2e:
         73:2b:28:5a:0f:a3:a5:ce:24:42:a1:71:6b:c0:89:cb:cd:ee:
         0b:a0:f2:8d:59:95:18:49:d9:d7:f0:5c:5f:40:71:76:a2:02:
         73:08:c8:64:78:63:a3:0d:81:79:be:3d:56:56:fa:47:41:c9:
         a3:27:a5:35:97:cc:1d:af:be:62:a8:74:ed:f7:d5:2d:b5:d7:
         df:9a:38:c3:03:bb:fd:81:b6:40:50:ae:72:2a:86:c7:0e:7a:
         d6:6b:76:59:23:a1:f0:7b:db:a6:15:5e:24:12:8c:c1:4d:19:
         3b:0f:bf:19:57:07:95:e3:ce:e7:43:e3:90:19:71:91:e6:58:
         34:f6:02:bc:6d:ef:3e:75:0d:1c:8c:66:69:05:ec:ff:74:f8:
         9c:07:2c:8a:e0:6c:08:9a:6e:32:64:15:21:60:2d:c6:e7:4e:
         da:e7:0e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:24:49 2025 by rpki-client