Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/323830343a333332633a3a2f33322d3332203d3e20323635333739.roa
File:                     323830343a333332633a3a2f33322d3332203d3e20323635333739.roa (raw, json)
Hash identifier:          y2mNHQUMwvxygwM0peBOJhTCxnK6hE/won3yDlMazWw=
Subject key identifier:   B6:AF:9E:8A:29:14:CF:94:EB:F6:B9:07:A6:9F:A9:0D:FB:58:AB:FC
Certificate issuer:       /CN=54204F38B6BA00E08F89389BEA820C255D02514C
Certificate serial:       3DAF676C419A871C7D741EBC40BCD31D58DEBA4A
Authority key identifier: 54:20:4F:38:B6:BA:00:E0:8F:89:38:9B:EA:82:0C:25:5D:02:51:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54204F38B6BA00E08F89389BEA820C255D02514C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/323830343a333332633a3a2f33322d3332203d3e20323635333739.roa
Signing time:             Wed 05 Mar 2025 19:00:10 +0000
ROA not before:           Wed 05 Mar 2025 18:55:10 +0000
ROA not after:            Wed 04 Mar 2026 19:00:10 +0000
asID:                     265379
IP address blocks:        2804:332c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:af:67:6c:41:9a:87:1c:7d:74:1e:bc:40:bc:d3:1d:58:de:ba:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54204F38B6BA00E08F89389BEA820C255D02514C
        Validity
            Not Before: Mar  5 18:55:10 2025 GMT
            Not After : Mar  4 19:00:10 2026 GMT
        Subject: CN=B6AF9E8A2914CF94EBF6B907A69FA90DFB58ABFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7b:3d:bb:07:31:9b:3b:44:b4:82:ca:d9:c5:
                    f4:27:75:27:48:a1:46:18:90:50:fe:5f:9a:67:26:
                    4b:a0:03:62:04:0c:ce:8a:57:d9:ee:8e:ce:a5:76:
                    37:81:69:34:a4:ae:56:fc:40:4c:4b:f2:56:e6:db:
                    9d:70:d9:b3:0d:bc:fc:28:d9:1f:6b:69:42:33:f6:
                    70:28:77:b5:0e:e3:0c:11:23:b5:cf:c5:89:de:53:
                    84:25:cb:69:33:35:0f:f4:41:e5:af:60:50:47:92:
                    b4:c7:cc:3b:ee:d2:59:fa:d7:71:6e:dc:d0:29:9f:
                    b3:d4:48:77:f3:52:9f:d2:43:51:62:5d:05:0e:4d:
                    2e:1a:e1:58:42:79:ee:d0:b9:10:32:b7:bb:91:2b:
                    00:fa:de:5b:b3:f0:45:e0:49:b0:09:fe:62:f6:9c:
                    4e:ac:87:d6:9b:5c:97:28:74:40:d4:17:82:e6:fd:
                    f5:3b:80:4d:e5:82:e8:54:0a:ad:5e:e5:90:c5:c7:
                    30:7c:ba:c4:70:6c:fe:da:93:33:d1:cd:23:67:68:
                    fb:6d:fb:c3:a9:c2:ca:28:d6:56:12:2e:1d:c3:f1:
                    6d:6a:24:68:55:d5:2f:87:de:85:d0:cf:47:16:89:
                    de:28:7d:4a:1e:e0:c5:c5:20:ab:c5:46:29:45:8d:
                    5e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:AF:9E:8A:29:14:CF:94:EB:F6:B9:07:A6:9F:A9:0D:FB:58:AB:FC
            X509v3 Authority Key Identifier:
                keyid:54:20:4F:38:B6:BA:00:E0:8F:89:38:9B:EA:82:0C:25:5D:02:51:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54204F38B6BA00E08F89389BEA820C255D02514C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/323830343a333332633a3a2f33322d3332203d3e20323635333739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:332c::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:e4:96:c3:88:e0:f0:54:3d:64:45:e3:cd:9d:46:3b:12:6d:
         d0:c2:cd:83:79:99:68:fc:90:5f:fe:43:8a:19:0d:f4:7f:f8:
         6d:ea:7c:40:7e:fe:45:39:63:c8:81:25:c9:1f:eb:b2:f7:d8:
         20:e2:f2:a2:46:92:a9:b0:39:fd:60:16:3f:60:4b:39:90:a4:
         e9:e9:6b:ed:6a:a5:af:0e:59:41:32:e4:68:fb:ff:1b:67:87:
         54:1e:1c:37:40:de:0f:71:cd:a4:37:1f:ce:fd:bf:73:b2:ed:
         bb:87:25:67:41:30:9d:66:5b:04:39:dc:7b:76:8e:04:c3:8c:
         79:0d:dc:51:d9:81:4b:1e:24:5e:8e:7e:4a:70:c9:a4:68:ca:
         56:63:8c:6f:0b:a6:68:72:e8:e8:cc:74:b2:2b:b7:a5:a9:68:
         f0:78:50:0f:c8:52:48:b4:25:04:3c:92:3b:bd:28:1a:eb:fd:
         57:4f:6f:71:41:17:c6:62:17:1f:e7:22:d8:31:98:6b:bb:bc:
         ba:07:7c:48:b4:db:10:05:35:62:2f:2d:05:86:e4:ff:a2:67:
         8c:b3:f6:e2:8f:9e:25:76:d1:8c:bc:61:2f:49:e8:d4:19:06:
         4d:51:7d:70:f0:cb:b5:cc:84:1c:c1:07:a0:b8:fc:85:54:60:
         df:09:cf:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:48:35 2025 by rpki-client