Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/988ne7p6UtGxjBNbyUjLFfi3cSdTEupe4QEkLCmQRafq/0/323830343a363263343a3a2f33322d313238203d3e20323639333137.roa
File:                     323830343a363263343a3a2f33322d313238203d3e20323639333137.roa (raw, json)
Hash identifier:          JHdJBMfkOzSzQXwf5OvpsJaJPzHVJEJTk4YQT4m08AA=
Subject key identifier:   3D:E5:10:AC:E5:D5:E0:DB:7B:CE:F2:BD:82:5E:22:F2:1C:2B:D1:4E
Certificate issuer:       /CN=2045084131B1E7BB875EFFFFC1EF49D1D3C7AC62
Certificate serial:       608B10FC4684B9C98EA7D6C35AE1798A94CCDB4F
Authority key identifier: 20:45:08:41:31:B1:E7:BB:87:5E:FF:FF:C1:EF:49:D1:D3:C7:AC:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2045084131B1E7BB875EFFFFC1EF49D1D3C7AC62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/988ne7p6UtGxjBNbyUjLFfi3cSdTEupe4QEkLCmQRafq/0/323830343a363263343a3a2f33322d313238203d3e20323639333137.roa
Signing time:             Mon 03 Mar 2025 13:07:01 +0000
ROA not before:           Mon 03 Mar 2025 13:02:01 +0000
ROA not after:            Mon 02 Mar 2026 13:07:01 +0000
asID:                     269317
IP address blocks:        2804:62c4::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:8b:10:fc:46:84:b9:c9:8e:a7:d6:c3:5a:e1:79:8a:94:cc:db:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2045084131B1E7BB875EFFFFC1EF49D1D3C7AC62
        Validity
            Not Before: Mar  3 13:02:01 2025 GMT
            Not After : Mar  2 13:07:01 2026 GMT
        Subject: CN=3DE510ACE5D5E0DB7BCEF2BD825E22F21C2BD14E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:05:d8:14:9b:56:07:1b:d3:16:bb:7d:9a:0b:
                    5c:10:6e:44:ea:e3:7c:55:cf:a0:b2:c7:10:e5:f7:
                    d3:16:9c:8c:c6:17:6b:6a:fe:b0:b2:2d:8e:92:5b:
                    34:00:3c:db:fd:f0:30:b5:4d:ad:9e:c7:ba:86:cb:
                    5d:1e:dd:2f:88:48:d8:d7:bd:f6:82:3b:c3:a4:f6:
                    90:9a:7d:0c:50:96:c4:32:2d:86:be:9b:b0:18:1e:
                    69:57:96:dc:a5:17:7c:b8:bb:25:4f:b1:5f:37:53:
                    f2:11:b9:2d:13:ac:48:a3:4d:6d:5c:a6:e6:cf:70:
                    6c:f2:02:d8:b4:9f:6c:dc:15:31:84:af:48:e8:d9:
                    2b:ae:b6:8d:65:0b:a6:6b:1d:f7:33:61:d7:8b:27:
                    38:cd:03:6d:8a:c2:8c:66:73:ae:e6:99:40:67:32:
                    25:2f:4a:d5:71:f7:c4:97:87:da:4e:47:01:5c:7f:
                    6f:07:8f:bd:42:bb:59:53:b1:84:f9:cb:3f:37:c1:
                    74:4b:c8:81:d0:1a:67:f5:32:dc:71:c3:a6:f3:30:
                    1c:c6:8a:a8:7c:9b:ab:c3:25:f6:8a:67:a5:13:7a:
                    b0:bf:60:fb:a3:0a:e4:d7:be:23:eb:6b:42:e8:70:
                    4b:6f:b0:b3:c8:d6:18:04:95:c8:1e:1b:d5:ef:d7:
                    ef:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E5:10:AC:E5:D5:E0:DB:7B:CE:F2:BD:82:5E:22:F2:1C:2B:D1:4E
            X509v3 Authority Key Identifier:
                keyid:20:45:08:41:31:B1:E7:BB:87:5E:FF:FF:C1:EF:49:D1:D3:C7:AC:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/988ne7p6UtGxjBNbyUjLFfi3cSdTEupe4QEkLCmQRafq/0/2045084131B1E7BB875EFFFFC1EF49D1D3C7AC62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2045084131B1E7BB875EFFFFC1EF49D1D3C7AC62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/988ne7p6UtGxjBNbyUjLFfi3cSdTEupe4QEkLCmQRafq/0/323830343a363263343a3a2f33322d313238203d3e20323639333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:62c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:3f:56:c2:18:43:c3:d3:59:d7:6e:a0:9c:25:04:f3:fb:f6:
         b0:84:b7:4b:05:2f:55:41:af:78:fc:73:2f:26:82:2d:81:ee:
         c2:27:28:98:55:e6:a4:a7:6c:ea:bb:ac:24:b9:b1:2d:24:52:
         92:b6:e8:4a:64:12:4a:71:5d:e5:cf:00:12:1b:74:f1:c0:03:
         75:d2:41:ff:7b:f2:cb:d2:e1:50:5b:21:71:0e:1b:5a:c3:0c:
         87:fd:ab:43:db:3d:6f:e3:10:0b:73:47:69:2f:93:82:fc:10:
         ff:29:9e:71:3e:77:bd:18:9a:a6:40:ae:28:a3:d0:4d:64:96:
         50:d2:14:02:4f:df:bb:81:10:c3:94:bd:fc:71:1d:7f:b9:ba:
         a4:6b:8e:27:40:2a:f0:b4:66:88:9e:d2:4a:f3:f5:f8:bf:95:
         54:7f:b9:0c:97:52:21:cd:60:15:c8:5d:bd:c9:4a:e1:4c:a7:
         4e:ef:ce:78:a0:e0:ab:38:1e:07:18:ad:a1:c2:86:79:df:fd:
         80:46:e2:36:01:8b:89:21:8f:22:20:fd:9a:37:a0:f4:4c:f5:
         e0:93:4f:4e:40:34:7d:21:33:47:07:a2:3f:65:64:05:9a:fe:
         14:2c:67:cf:44:1a:ea:23:cd:c6:7d:f4:ea:f7:4e:f8:e2:24:
         23:4a:be:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:37:12 2025 by rpki-client