Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/323830343a353462303a3a2f33322d313238203d3e20323638363635.roa
File:                     323830343a353462303a3a2f33322d313238203d3e20323638363635.roa (raw, json)
Hash identifier:          8pJDd/4rZBRroUVZzGxtml/QvWmk+SkPfyR9CpOF5Gs=
Subject key identifier:   60:42:76:9B:ED:B2:1F:4F:7E:2D:47:FB:41:7C:6C:27:93:1D:93:C0
Certificate issuer:       /CN=4C479CEB551A9E85D5C69926651F44DFE8F354D4
Certificate serial:       131CFCBE13B29F453DC64350854B2FD3B10F83F8
Authority key identifier: 4C:47:9C:EB:55:1A:9E:85:D5:C6:99:26:65:1F:44:DF:E8:F3:54:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C479CEB551A9E85D5C69926651F44DFE8F354D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/323830343a353462303a3a2f33322d313238203d3e20323638363635.roa
Signing time:             Fri 21 Feb 2025 18:33:10 +0000
ROA not before:           Fri 21 Feb 2025 18:28:10 +0000
ROA not after:            Fri 20 Feb 2026 18:33:10 +0000
asID:                     268665
IP address blocks:        2804:54b0::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:1c:fc:be:13:b2:9f:45:3d:c6:43:50:85:4b:2f:d3:b1:0f:83:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C479CEB551A9E85D5C69926651F44DFE8F354D4
        Validity
            Not Before: Feb 21 18:28:10 2025 GMT
            Not After : Feb 20 18:33:10 2026 GMT
        Subject: CN=6042769BEDB21F4F7E2D47FB417C6C27931D93C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:26:ef:09:72:f5:e5:e5:0b:db:ef:69:3e:2b:
                    45:97:0a:24:76:2b:46:3b:fc:90:76:d0:27:da:7e:
                    97:9b:07:b7:48:5a:aa:26:ba:22:25:13:86:32:2e:
                    27:0c:ad:bb:e8:34:5f:c6:52:db:93:24:51:14:b3:
                    62:5e:34:02:51:1e:7a:52:8d:7a:1c:2d:9d:ba:ad:
                    87:50:eb:16:9a:6a:4d:d8:51:20:eb:85:60:f5:1d:
                    f8:9d:dd:69:06:af:39:c1:d7:84:54:94:95:bc:d8:
                    a5:a2:3d:42:15:f6:a9:e8:02:ed:aa:ce:2f:9e:b8:
                    e6:65:1f:01:b6:79:63:b1:ee:45:8c:c8:fa:15:80:
                    74:f0:f1:68:17:6e:63:3a:27:fe:07:38:55:75:96:
                    21:c3:2b:36:9c:4f:42:f9:70:2d:66:bd:e1:70:a4:
                    de:48:2a:9c:d4:aa:6e:00:40:7e:e7:2e:8d:37:25:
                    38:12:b7:1f:ed:a5:6f:38:db:c0:19:9d:54:82:79:
                    c9:a9:54:c8:c9:e6:9d:32:93:94:7c:db:58:d8:9b:
                    a9:95:3a:0d:47:40:f7:6f:57:19:f2:cc:fb:b4:93:
                    42:37:dd:a5:d4:a7:4c:f6:69:db:83:4c:0d:d9:7f:
                    f0:3b:2b:98:b1:57:d4:49:e6:38:64:ef:34:3b:d7:
                    e3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:42:76:9B:ED:B2:1F:4F:7E:2D:47:FB:41:7C:6C:27:93:1D:93:C0
            X509v3 Authority Key Identifier:
                keyid:4C:47:9C:EB:55:1A:9E:85:D5:C6:99:26:65:1F:44:DF:E8:F3:54:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/4C479CEB551A9E85D5C69926651F44DFE8F354D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C479CEB551A9E85D5C69926651F44DFE8F354D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/323830343a353462303a3a2f33322d313238203d3e20323638363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:94:34:e7:af:6e:a4:e4:60:44:9d:5a:15:71:4d:6b:6c:54:
         1c:d4:58:ee:18:ce:d1:ad:a0:6f:73:4e:cb:fa:a6:36:08:3e:
         90:2a:fc:f2:db:24:65:f4:ea:2a:6d:43:39:e0:06:f7:9b:7d:
         26:1f:e3:27:ca:7a:b1:ae:6c:5c:e4:7f:f8:8e:9e:f6:33:49:
         83:99:ba:5f:3d:9f:95:e9:83:e4:3b:c9:c4:8c:5f:ad:07:37:
         da:e7:57:a0:f3:8e:e9:11:e4:98:64:c4:8d:ce:64:b0:db:f3:
         98:d1:f4:ed:9f:ed:98:03:9a:4a:e8:42:44:29:34:2d:e4:58:
         c4:84:b5:45:d6:39:4a:86:dd:ba:0e:66:34:70:c3:17:1d:ed:
         70:00:6c:5c:a8:16:e9:ea:e1:a0:6f:37:18:a3:49:e9:4f:be:
         10:cc:d7:e0:9c:f9:d9:83:76:3b:81:13:75:06:a9:ef:99:a4:
         28:e0:66:50:fd:75:fe:88:3c:3c:23:b3:97:86:71:38:3b:34:
         f3:e6:14:3a:a9:2e:4d:14:51:67:a3:42:e5:6d:99:91:74:a3:
         1b:a5:c8:2f:9a:67:1c:16:38:92:08:92:54:d0:a8:71:2c:86:
         c1:5e:8c:89:7c:4a:2f:1e:0b:41:3b:bd:7a:cc:75:b2:27:31:
         e4:43:7a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:40:20 2025 by rpki-client