Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/323830343a363061633a3a2f33332d3333203d3e20323639313833.roa
File:                     323830343a363061633a3a2f33332d3333203d3e20323639313833.roa (raw, json)
Hash identifier:          wmRMlBGuiWklE1mcV8iNPrjxS56x/h7/Nn/MquFZ2xg=
Subject key identifier:   A2:46:19:69:F7:36:BC:28:5B:C3:1D:B6:95:74:5E:EA:CB:27:B2:5D
Certificate issuer:       /CN=95D5107C3F975DC279B2EE7748B02AB010470E6D
Certificate serial:       440B24640BFBCE35B219F706445D296BDC9FD6DB
Authority key identifier: 95:D5:10:7C:3F:97:5D:C2:79:B2:EE:77:48:B0:2A:B0:10:47:0E:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95D5107C3F975DC279B2EE7748B02AB010470E6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/323830343a363061633a3a2f33332d3333203d3e20323639313833.roa
Signing time:             Wed 19 Mar 2025 18:26:52 +0000
ROA not before:           Wed 19 Mar 2025 18:21:52 +0000
ROA not after:            Wed 18 Mar 2026 18:26:52 +0000
asID:                     269183
IP address blocks:        2804:60ac::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:0b:24:64:0b:fb:ce:35:b2:19:f7:06:44:5d:29:6b:dc:9f:d6:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95D5107C3F975DC279B2EE7748B02AB010470E6D
        Validity
            Not Before: Mar 19 18:21:52 2025 GMT
            Not After : Mar 18 18:26:52 2026 GMT
        Subject: CN=A2461969F736BC285BC31DB695745EEACB27B25D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:31:e5:da:94:b9:a3:6e:15:b6:f1:23:81:9b:
                    92:ff:2d:ee:ac:fd:54:d5:6b:90:8f:13:68:fe:9f:
                    7c:2a:84:4c:b1:5a:23:d4:fc:4a:57:19:8e:14:80:
                    7f:80:5d:09:d6:11:4b:f7:d3:7e:a2:7e:24:93:00:
                    67:98:c5:52:00:7b:f2:8e:43:41:91:11:9b:7a:94:
                    e2:76:a9:2e:dc:be:69:a2:be:11:69:3f:13:eb:da:
                    74:42:66:a7:c4:3a:ed:a7:49:b4:38:73:ea:bc:8d:
                    e0:e4:aa:52:15:bb:bc:52:53:be:91:29:e0:3f:0f:
                    dc:46:80:ab:76:0d:ed:06:93:58:24:a4:d3:51:81:
                    73:41:08:55:ef:37:1b:f8:4e:27:76:fd:c6:c5:98:
                    9a:bf:a2:e4:11:c5:8f:5c:50:28:34:0d:24:da:d6:
                    22:65:70:0f:44:7a:fe:0c:8f:f9:26:b8:3c:78:b9:
                    c9:f4:fe:53:ba:10:25:9f:4a:cc:03:c7:eb:78:b8:
                    88:5f:f3:00:48:e7:8b:48:41:97:d8:3b:4d:fd:08:
                    20:a4:23:13:84:2d:b2:a4:88:8f:95:02:c9:3f:4d:
                    54:ac:e4:0f:d3:9a:a4:7c:02:fd:13:d4:a0:9d:ae:
                    0d:b7:9d:7d:5d:4f:93:5e:2e:5b:db:ef:e7:0f:bb:
                    a3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:46:19:69:F7:36:BC:28:5B:C3:1D:B6:95:74:5E:EA:CB:27:B2:5D
            X509v3 Authority Key Identifier:
                keyid:95:D5:10:7C:3F:97:5D:C2:79:B2:EE:77:48:B0:2A:B0:10:47:0E:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/95D5107C3F975DC279B2EE7748B02AB010470E6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95D5107C3F975DC279B2EE7748B02AB010470E6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/323830343a363061633a3a2f33332d3333203d3e20323639313833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60ac::/33

    Signature Algorithm: sha256WithRSAEncryption
         4a:69:2b:ba:f2:19:fa:77:17:08:3b:e8:cb:ff:84:6a:bf:48:
         0f:54:4e:32:f0:ba:06:d7:95:83:8f:74:3e:19:5f:c3:a8:21:
         64:44:34:2f:3e:a6:c3:3a:3f:c4:1e:28:91:03:2e:96:94:01:
         63:50:fd:10:12:e4:9a:81:f5:92:cc:16:1a:cc:00:72:e6:f5:
         6c:d8:65:b8:be:d3:20:5b:cf:fc:71:30:7c:c3:36:90:67:4f:
         49:c3:2e:0c:04:a5:f3:7a:4c:0c:0a:81:41:ef:8a:28:b8:ae:
         13:b4:31:9c:73:90:b2:be:27:4b:f1:fc:79:78:1e:48:b2:9b:
         79:54:64:17:d6:af:cb:db:48:92:ae:d2:10:6f:75:b8:4d:36:
         8d:67:22:97:d7:48:fd:9a:93:e7:81:b3:ad:09:10:25:c0:5e:
         66:5f:b4:e7:6b:dd:0e:d2:cc:0a:02:6e:7d:67:92:0d:b8:6e:
         7a:3c:a2:38:11:57:26:53:79:d2:7e:f5:5c:b5:bd:44:63:91:
         d8:cb:48:9d:aa:4e:7f:d6:b3:38:9c:7e:d2:14:01:28:5e:52:
         57:ae:4c:37:6b:34:59:eb:1f:71:23:53:1d:44:43:f3:3e:ff:
         0a:65:fc:5f:1f:6c:c5:8a:ad:c4:9d:25:4e:b3:ac:5a:5e:64:
         c7:20:61:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:41:21 2025 by rpki-client