Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/0/323830343a343561383a3a2f33322d3334203d3e20323636393431.roa
File:                     323830343a343561383a3a2f33322d3334203d3e20323636393431.roa (raw, json)
Hash identifier:          VKmelwYW8Yagpci0QXiFP24auQd7wjnsAKlZmJ5NxUo=
Subject key identifier:   34:9B:EC:01:2C:95:37:91:12:C8:95:85:92:86:E7:FC:68:AD:F8:5F
Certificate issuer:       /CN=0F65E02527C7C2583942CEAED0FA68C7FFC806C0
Certificate serial:       1895A84DA45529F50FFAD0A388EEFEE75C6A38E3
Authority key identifier: 0F:65:E0:25:27:C7:C2:58:39:42:CE:AE:D0:FA:68:C7:FF:C8:06:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F65E02527C7C2583942CEAED0FA68C7FFC806C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/0/323830343a343561383a3a2f33322d3334203d3e20323636393431.roa
Signing time:             Wed 13 Mar 2024 20:05:16 +0000
ROA not before:           Wed 13 Mar 2024 20:00:16 +0000
ROA not after:            Wed 12 Mar 2025 20:05:16 +0000
asID:                     266941
IP address blocks:        2804:45a8::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:95:a8:4d:a4:55:29:f5:0f:fa:d0:a3:88:ee:fe:e7:5c:6a:38:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F65E02527C7C2583942CEAED0FA68C7FFC806C0
        Validity
            Not Before: Mar 13 20:00:16 2024 GMT
            Not After : Mar 12 20:05:16 2025 GMT
        Subject: CN=349BEC012C95379112C895859286E7FC68ADF85F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3c:09:9d:b1:d5:45:37:d7:26:75:8b:6e:ed:
                    94:ed:9d:05:c4:b6:f4:26:ad:05:f0:83:03:e6:70:
                    cd:a7:1f:20:d9:8e:9a:3c:62:2f:40:3a:26:88:a2:
                    60:35:74:0f:5a:f2:cc:81:88:cc:34:b4:c5:a9:ba:
                    7d:58:c9:dd:5a:9f:67:2e:31:41:55:69:0b:f6:61:
                    9f:89:18:b1:f1:1f:ff:24:27:0f:64:9c:d2:7c:ca:
                    0d:9f:58:69:dd:47:6c:fd:64:da:e1:a6:26:8c:ef:
                    c0:d3:f9:96:5c:ba:4f:42:b9:91:42:be:ab:4f:ef:
                    9c:2c:55:d4:1d:49:89:14:60:1b:b6:c1:41:48:d8:
                    44:de:86:4f:d0:c0:1e:bd:86:c6:f6:37:35:ba:47:
                    63:9b:e3:16:b4:52:5c:71:d2:26:f8:4d:89:69:93:
                    c4:91:4a:81:a3:01:eb:28:58:dc:09:7b:6c:78:ca:
                    f6:a4:a0:a9:ee:bc:14:f6:cd:97:36:b2:32:4b:09:
                    0a:6c:9e:04:8f:2d:c5:12:bc:19:1f:18:a9:0e:12:
                    db:b2:0b:df:9e:8e:98:f8:fe:52:96:81:58:90:13:
                    2f:b8:f8:ba:95:eb:ec:a8:8f:df:4c:cc:49:da:89:
                    80:4f:2b:95:cb:fa:eb:0a:08:dc:87:1e:dd:3b:a0:
                    f5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:9B:EC:01:2C:95:37:91:12:C8:95:85:92:86:E7:FC:68:AD:F8:5F
            X509v3 Authority Key Identifier:
                keyid:0F:65:E0:25:27:C7:C2:58:39:42:CE:AE:D0:FA:68:C7:FF:C8:06:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/0/0F65E02527C7C2583942CEAED0FA68C7FFC806C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F65E02527C7C2583942CEAED0FA68C7FFC806C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/0/323830343a343561383a3a2f33322d3334203d3e20323636393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:45a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:b9:ee:f2:72:76:51:c9:b6:c1:a8:bc:a1:6f:67:57:34:66:
         bd:e0:81:5d:60:e4:0b:66:ee:a4:b5:a7:44:51:40:ec:42:85:
         08:47:44:3e:fb:8a:75:49:25:c0:9e:13:11:b6:b5:4b:4b:c8:
         e5:38:11:b3:d0:83:78:36:20:ba:5d:1a:88:0f:af:50:c8:75:
         99:55:8c:d4:9d:27:7f:04:43:a4:da:10:ea:42:bc:59:91:16:
         ea:fd:8b:8f:a7:2e:8d:79:66:11:7a:79:7b:69:0b:38:81:08:
         da:9f:d0:d7:b2:21:16:bb:c4:7a:f6:f5:13:2f:a3:50:d0:f8:
         28:32:61:4a:54:f8:07:59:30:42:65:56:bd:dd:8c:70:6b:ba:
         f6:c9:f7:13:93:3c:46:f7:8e:1a:75:04:3f:f9:63:98:6d:d0:
         c6:78:f1:72:36:79:7c:85:24:b7:90:d9:22:bb:ca:bd:a4:ce:
         c8:79:6f:ab:25:fd:da:f0:9f:67:58:a1:1f:25:d2:1f:5f:02:
         9b:58:2f:66:c9:10:42:f7:b2:44:17:5e:32:ba:a6:49:c7:a0:
         a0:8e:6c:3d:36:96:88:41:85:90:37:6f:e3:27:c3:bc:4f:af:
         f7:d0:b2:7c:f3:40:7c:47:5f:75:55:d7:a3:d6:5b:ee:29:ce:
         e1:62:a3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:55 2025 by rpki-client