Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/323830343a316134633a3a2f33322d313238203d3e203631383531.roa
File:                     323830343a316134633a3a2f33322d313238203d3e203631383531.roa (raw, json)
Hash identifier:          uweTDb22raQviKMIWtAabNxjj+wMrM9MdkzbgS5d+Jo=
Subject key identifier:   27:92:44:75:A0:D1:EE:60:70:FE:EF:7D:AA:22:74:CE:AE:23:E0:8C
Certificate issuer:       /CN=B07267C68D91254F5CE400BAF235C12DCD2D2C0F
Certificate serial:       6493A03ACCC2CD978A504526B6765F8CD6501320
Authority key identifier: B0:72:67:C6:8D:91:25:4F:5C:E4:00:BA:F2:35:C1:2D:CD:2D:2C:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B07267C68D91254F5CE400BAF235C12DCD2D2C0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/323830343a316134633a3a2f33322d313238203d3e203631383531.roa
Signing time:             Tue 03 Dec 2024 19:48:47 +0000
ROA not before:           Tue 03 Dec 2024 19:43:47 +0000
ROA not after:            Tue 02 Dec 2025 19:48:47 +0000
asID:                     61851
IP address blocks:        2804:1a4c::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:93:a0:3a:cc:c2:cd:97:8a:50:45:26:b6:76:5f:8c:d6:50:13:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B07267C68D91254F5CE400BAF235C12DCD2D2C0F
        Validity
            Not Before: Dec  3 19:43:47 2024 GMT
            Not After : Dec  2 19:48:47 2025 GMT
        Subject: CN=27924475A0D1EE6070FEEF7DAA2274CEAE23E08C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d4:4c:f6:ab:7b:47:4f:57:f0:bf:e1:25:fe:
                    a7:be:72:e8:98:c4:0d:8d:ce:4b:ef:c7:22:96:50:
                    93:03:c8:1b:45:20:93:2e:79:6c:d8:c6:c2:45:35:
                    a8:d6:f6:9f:d3:48:fc:25:a8:f6:4b:82:75:12:18:
                    52:1e:58:0e:03:39:91:b0:1e:4c:c5:a2:0f:35:68:
                    14:e1:f7:1a:4a:8d:0e:0d:9c:c0:95:b2:9a:af:db:
                    2c:43:54:d4:23:a4:30:d2:23:80:0e:9e:26:e2:a7:
                    7d:b5:d5:d6:55:4a:e3:fc:9c:00:66:07:2c:60:9b:
                    e3:23:ca:3f:15:b1:19:12:ba:5e:a8:0c:ee:95:8d:
                    d6:be:5e:d0:7c:b5:2e:ca:82:52:56:5a:ea:dd:e6:
                    66:cb:79:91:2e:b5:34:fc:2a:d6:aa:b2:06:d2:ee:
                    fb:6c:e3:b6:e9:7a:19:12:fd:4b:7a:c8:52:d1:9a:
                    fe:20:51:77:28:ee:8e:ba:1e:3e:04:da:6b:e5:7b:
                    aa:cf:2d:ac:42:3c:c3:2d:be:54:b0:99:2f:44:67:
                    1a:a7:f5:a6:7b:6a:e2:09:61:5b:df:08:26:74:44:
                    ea:39:ab:12:3c:1e:2f:45:9f:0a:a1:45:42:01:ce:
                    02:6d:78:93:54:c3:fd:c0:39:bc:40:a3:cf:9f:d1:
                    4e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:92:44:75:A0:D1:EE:60:70:FE:EF:7D:AA:22:74:CE:AE:23:E0:8C
            X509v3 Authority Key Identifier:
                keyid:B0:72:67:C6:8D:91:25:4F:5C:E4:00:BA:F2:35:C1:2D:CD:2D:2C:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/B07267C68D91254F5CE400BAF235C12DCD2D2C0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B07267C68D91254F5CE400BAF235C12DCD2D2C0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/323830343a316134633a3a2f33322d313238203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:7b:f1:1a:57:ee:45:91:cc:d3:84:20:9a:01:88:0e:96:30:
         a3:c5:9c:4c:8e:d9:79:bc:bc:d6:ee:80:53:8b:29:c8:76:62:
         b9:45:d1:c2:4c:8d:89:f4:75:31:40:9c:92:45:b9:e3:9e:83:
         40:f4:f2:53:d5:b5:96:96:24:09:83:40:54:38:fc:cf:18:ec:
         a3:10:54:b8:16:fd:d8:a0:ad:a7:a5:68:85:77:b7:aa:7e:06:
         11:00:9e:da:0d:52:cd:03:e4:82:fc:44:9a:00:0c:2f:82:2c:
         bb:dd:f1:c9:d6:2d:76:0a:f2:bd:e7:f1:a7:7d:62:fc:1d:7c:
         52:fd:2c:c8:04:6e:6c:cf:a4:c5:0c:51:de:4e:83:6c:aa:1a:
         3b:10:28:99:cc:f5:7d:e9:66:04:6e:7c:29:96:e6:a9:b8:7a:
         81:5c:36:1e:bf:5d:b4:15:3a:4b:be:07:da:8f:e1:cb:e9:74:
         9c:c6:40:0b:85:e8:4d:74:4f:3d:66:83:7b:a5:25:0d:2e:03:
         ec:db:82:38:3d:02:b7:a3:2b:56:f8:5d:bf:e2:33:6e:fc:cd:
         8c:c4:da:7c:01:2d:a8:c9:c8:3f:6f:44:68:48:6e:24:7b:36:
         84:00:7a:61:fa:70:4c:db:16:e6:42:a9:e9:78:c9:57:ef:d5:
         90:f5:36:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:02:50 2025 by rpki-client