Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/323830343a333465383a3a2f33322d3438203d3e20323635343837.roa
File:                     323830343a333465383a3a2f33322d3438203d3e20323635343837.roa (raw, json)
Hash identifier:          54olqwdeCqfczts4o/za2VtZKobiFeOwChwlQ8H72YM=
Subject key identifier:   3F:C0:AD:7D:8C:C2:9C:8D:B5:85:CF:9E:47:6D:0A:3D:E8:98:EF:1E
Certificate issuer:       /CN=B322D42ABD645759DF392C1454BDCEB01C3E1A83
Certificate serial:       023E20C6E271EA7BB75F606866C48762992D1127
Authority key identifier: B3:22:D4:2A:BD:64:57:59:DF:39:2C:14:54:BD:CE:B0:1C:3E:1A:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B322D42ABD645759DF392C1454BDCEB01C3E1A83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/323830343a333465383a3a2f33322d3438203d3e20323635343837.roa
Signing time:             Tue 04 Feb 2025 19:44:51 +0000
ROA not before:           Tue 04 Feb 2025 19:39:51 +0000
ROA not after:            Tue 03 Feb 2026 19:44:51 +0000
asID:                     265487
IP address blocks:        2804:34e8::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:3e:20:c6:e2:71:ea:7b:b7:5f:60:68:66:c4:87:62:99:2d:11:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B322D42ABD645759DF392C1454BDCEB01C3E1A83
        Validity
            Not Before: Feb  4 19:39:51 2025 GMT
            Not After : Feb  3 19:44:51 2026 GMT
        Subject: CN=3FC0AD7D8CC29C8DB585CF9E476D0A3DE898EF1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:07:79:73:7e:8b:0a:61:02:7d:82:9a:40:ef:
                    b8:28:31:8e:74:6b:5a:74:f7:da:e9:2f:cd:54:93:
                    98:23:94:c5:5d:93:90:d4:82:00:3e:e8:e0:4e:d1:
                    7c:ea:dc:d0:a8:b6:00:9d:22:5b:44:4a:34:ca:2b:
                    2e:99:9a:ff:48:b3:e9:b7:b6:f7:5c:c6:88:36:cd:
                    0f:12:7b:38:77:08:4a:71:e7:7f:c6:19:26:ea:e8:
                    8a:4c:d4:e0:c6:c1:67:93:fb:31:d1:e1:48:5a:39:
                    e0:23:c1:5e:87:da:86:f2:57:6c:46:89:e6:ab:1f:
                    f2:ad:7e:da:99:02:fa:ea:5d:3f:a1:6e:ad:3f:c9:
                    49:0d:a9:70:ff:6f:ce:4a:5e:d7:75:c7:b9:75:65:
                    95:91:74:99:1d:13:31:47:fa:21:4c:62:8e:89:96:
                    c0:38:44:50:74:6e:09:e7:9c:d8:ef:74:6c:bd:eb:
                    9b:40:b8:34:f0:29:f4:e5:4d:44:ef:5d:22:dc:56:
                    6f:44:57:74:10:81:93:32:27:e0:b1:29:16:3a:a6:
                    91:bb:fd:67:3e:f5:0d:29:56:28:2b:2a:5f:65:b2:
                    dd:a0:96:05:be:0c:90:8a:77:d2:3e:53:93:e7:8a:
                    3c:22:cf:25:16:b4:f5:6a:2c:50:e0:65:8d:3a:b8:
                    8e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C0:AD:7D:8C:C2:9C:8D:B5:85:CF:9E:47:6D:0A:3D:E8:98:EF:1E
            X509v3 Authority Key Identifier:
                keyid:B3:22:D4:2A:BD:64:57:59:DF:39:2C:14:54:BD:CE:B0:1C:3E:1A:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/B322D42ABD645759DF392C1454BDCEB01C3E1A83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B322D42ABD645759DF392C1454BDCEB01C3E1A83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/323830343a333465383a3a2f33322d3438203d3e20323635343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:d0:9e:4a:1a:71:96:a5:dc:01:f4:eb:a7:f5:38:1a:0e:65:
         8f:45:a8:f2:0b:00:3b:af:93:82:e3:9a:63:20:63:f4:f3:0e:
         aa:a9:e9:ff:56:c0:77:32:e0:7a:71:70:67:85:0a:2c:1b:62:
         59:d9:54:06:67:f1:70:61:60:30:c8:06:90:2d:16:75:98:e2:
         40:45:b4:e7:d4:fc:07:06:7f:48:e7:b6:be:69:85:83:72:03:
         5c:04:73:d8:ac:7f:6b:ae:4f:ac:f1:0b:a8:f6:d9:97:4b:76:
         37:e5:3e:e0:64:b5:47:b2:d8:67:87:37:0c:cc:19:a5:80:41:
         64:58:24:05:86:70:54:a6:7e:b2:78:2d:ed:b1:c0:96:c7:f9:
         d3:96:13:ca:54:b3:cf:86:97:e2:50:50:bd:c9:ff:a2:2c:a5:
         68:d6:a1:2c:03:de:e3:f5:e0:90:07:2f:64:ec:a3:d7:c3:e0:
         52:de:33:89:3e:b5:1a:0d:39:2a:4b:61:bb:90:37:ef:58:c7:
         9c:5a:e0:e5:46:59:da:38:6c:33:ec:da:00:30:c9:d9:c0:55:
         33:c1:33:68:6b:35:9e:3b:6d:8e:5a:bf:6b:be:22:62:81:da:
         77:18:82:31:f5:8c:8a:e1:3a:64:a3:6e:c9:3f:1f:3b:bf:19:
         79:16:bf:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:51:45 2025 by rpki-client