Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a3a2f33322d3332203d3e20323633393730.roa
File:                     323830343a323839633a3a2f33322d3332203d3e20323633393730.roa (raw, json)
Hash identifier:          SWFdCNoFAWepkAUayZenR+zXpymuq8zAlfgpcpZOYUk=
Subject key identifier:   90:65:08:A9:AD:5D:C1:5D:45:39:8A:3E:28:0D:F7:6A:4D:13:6D:01
Certificate issuer:       /CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Certificate serial:       5E8A11B3A70564B46926AB46FA07CEAF35928BBC
Authority key identifier: 44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a3a2f33322d3332203d3e20323633393730.roa
Signing time:             Mon 20 Jan 2025 11:48:01 +0000
ROA not before:           Mon 20 Jan 2025 11:43:01 +0000
ROA not after:            Mon 19 Jan 2026 11:48:01 +0000
asID:                     263970
IP address blocks:        2804:289c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:8a:11:b3:a7:05:64:b4:69:26:ab:46:fa:07:ce:af:35:92:8b:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
        Validity
            Not Before: Jan 20 11:43:01 2025 GMT
            Not After : Jan 19 11:48:01 2026 GMT
        Subject: CN=906508A9AD5DC15D45398A3E280DF76A4D136D01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e8:f4:8f:9a:30:82:ad:97:35:a1:2e:83:bd:
                    54:8c:ab:cc:17:7e:32:02:89:4f:b4:7a:97:3f:88:
                    c1:e2:e4:91:4b:23:23:1c:95:f2:e9:e1:2e:53:62:
                    32:66:ef:1e:e7:8a:a6:aa:54:d9:a3:f6:cc:cf:a1:
                    21:1a:77:ee:da:7a:4a:5f:69:ec:f7:d1:3e:9e:4a:
                    37:ea:2f:2e:62:26:21:14:62:54:f7:b5:ab:6c:2e:
                    cc:e9:28:80:70:58:eb:b8:14:ba:51:6f:27:ca:a1:
                    a3:56:be:53:f8:9a:95:03:f4:97:06:7b:6b:1f:67:
                    49:5f:24:62:d7:07:92:b4:d9:0e:b2:1a:ee:96:a9:
                    5d:eb:fa:bd:00:55:df:07:1f:cc:5f:8f:13:ce:ad:
                    a0:88:03:3d:e2:92:a8:9d:08:68:7e:39:ca:79:b7:
                    05:9d:99:09:38:ba:fe:0d:d5:5f:5b:d0:25:83:cf:
                    cb:72:bf:a2:b0:f5:9b:04:a2:18:43:eb:81:28:a7:
                    a1:70:03:77:d8:06:c1:a7:ae:b6:6f:61:f8:f5:83:
                    6c:53:7f:32:15:29:84:3e:08:bb:dd:8b:36:95:10:
                    e7:45:4b:09:f6:3b:4c:7d:a5:46:28:f6:cd:36:e7:
                    a6:b6:9b:54:77:c4:0a:c4:de:11:b0:70:9a:dc:43:
                    a7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:65:08:A9:AD:5D:C1:5D:45:39:8A:3E:28:0D:F7:6A:4D:13:6D:01
            X509v3 Authority Key Identifier:
                keyid:44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/44D7F23D5E330CBCE5452DA8159460000FACF7DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a3a2f33322d3332203d3e20323633393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:289c::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:a0:1d:ff:b1:8b:df:54:b2:8c:ea:ef:f0:ba:ab:67:77:06:
         e4:e2:95:63:b0:91:5f:79:b9:f8:c3:ea:f7:54:2c:a5:eb:38:
         3e:44:ea:78:b2:27:45:9a:3a:05:34:03:e6:40:61:bd:a2:10:
         5a:0c:d3:af:a4:91:a3:f2:3d:93:c7:f3:23:03:95:34:7b:b9:
         d9:59:3b:69:36:70:17:be:2b:79:cc:7f:41:a0:f9:db:27:c8:
         33:1e:6f:18:81:46:03:c3:9c:4e:a9:51:77:1e:ce:c2:df:28:
         ad:5b:dd:8a:5f:bc:84:b2:bb:97:a6:71:cd:e4:51:17:56:af:
         6c:7b:2b:39:19:ef:a1:6e:e2:60:47:46:ae:c5:16:fb:55:c9:
         d9:22:c8:3d:7c:ea:d9:54:21:18:24:98:b4:38:dc:98:fd:94:
         8a:43:1b:fe:0a:09:f8:7e:40:c2:25:68:b2:90:19:30:22:4e:
         52:d4:a3:d5:bf:1b:db:2d:d0:c3:04:9a:f6:c9:e5:72:55:d0:
         98:1d:05:6f:68:62:9b:5e:9e:1e:84:58:61:5a:42:7d:b0:75:
         cd:d9:17:56:69:43:ea:34:c1:df:a3:bf:e1:5c:e6:e7:ff:53:
         1e:02:1a:44:3d:f3:fe:c6:23:1f:64:fa:ad:44:60:dd:9d:a0:
         6e:5c:e7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:28:00 2025 by rpki-client