Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a3a2f33342d3334203d3e20323633393730.roa
File:                     323830343a323839633a3a2f33342d3334203d3e20323633393730.roa (raw, json)
Hash identifier:          a6e+D/Wc5TceypMLViUGTd6Tr68fYuGk1welBTJM6Cs=
Subject key identifier:   7E:7D:A0:45:C2:0D:58:21:5E:0B:FB:B1:8C:57:92:74:D9:D0:8F:93
Certificate issuer:       /CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Certificate serial:       4A2762ADB2372CD69D520943643B1FD3C981499E
Authority key identifier: 44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a3a2f33342d3334203d3e20323633393730.roa
Signing time:             Mon 20 Jan 2025 11:48:01 +0000
ROA not before:           Mon 20 Jan 2025 11:43:01 +0000
ROA not after:            Mon 19 Jan 2026 11:48:01 +0000
asID:                     263970
IP address blocks:        2804:289c::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:27:62:ad:b2:37:2c:d6:9d:52:09:43:64:3b:1f:d3:c9:81:49:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
        Validity
            Not Before: Jan 20 11:43:01 2025 GMT
            Not After : Jan 19 11:48:01 2026 GMT
        Subject: CN=7E7DA045C20D58215E0BFBB18C579274D9D08F93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3f:1e:aa:e6:24:18:1e:14:87:3b:65:2e:24:
                    5d:2b:70:cf:e1:0d:e2:bc:61:c5:3a:e2:7a:4d:03:
                    65:be:47:d6:47:63:20:55:63:cb:ed:eb:b3:b7:eb:
                    9b:35:0d:8f:f9:5d:81:dc:93:9e:e3:68:14:04:6a:
                    e8:b9:96:36:be:c5:fa:41:16:eb:30:bb:f1:f8:a8:
                    c9:16:31:85:0e:59:ba:77:03:20:d6:20:ab:ee:ec:
                    0b:0f:1c:72:07:5a:e2:02:86:91:df:c2:77:bf:0e:
                    db:ae:b1:77:c9:08:20:aa:92:56:ec:92:7d:ea:46:
                    1d:fd:00:92:4c:af:6a:c2:44:14:ed:a4:74:84:8c:
                    13:72:8d:54:92:91:73:02:86:00:96:4a:16:77:58:
                    a0:87:ed:6d:db:87:6f:6f:5d:18:14:f3:01:eb:4b:
                    34:a8:69:5f:39:63:a3:81:cf:a0:20:b5:31:dc:e5:
                    4e:44:ce:5b:3c:5e:7f:95:4c:e2:87:8e:07:76:ac:
                    ea:d2:62:ea:72:c3:84:31:e4:42:c9:7f:4f:fb:17:
                    12:07:a0:14:18:53:14:da:8b:35:63:03:ca:85:7d:
                    44:49:af:39:8b:86:66:d0:81:e1:23:5b:d2:6f:15:
                    d1:05:6c:53:0d:d3:fc:82:aa:ca:fd:fe:47:3b:30:
                    ab:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:7D:A0:45:C2:0D:58:21:5E:0B:FB:B1:8C:57:92:74:D9:D0:8F:93
            X509v3 Authority Key Identifier:
                keyid:44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/44D7F23D5E330CBCE5452DA8159460000FACF7DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a3a2f33342d3334203d3e20323633393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:289c::/34

    Signature Algorithm: sha256WithRSAEncryption
         29:d9:f6:1c:5b:8d:52:30:f3:da:64:3e:5f:b8:93:be:b3:85:
         25:94:b7:a5:79:7d:ed:b5:08:68:52:17:7e:b6:04:de:6e:d3:
         96:f6:fd:a6:41:da:e9:09:10:cb:48:a8:8b:63:33:1a:46:bb:
         af:eb:3a:1e:46:e3:f1:e8:97:e2:fa:56:8b:1a:7a:5a:d4:76:
         fb:aa:86:56:69:3d:ce:7c:a2:f5:6b:37:b3:c2:6e:ca:60:9b:
         1e:8d:bc:c0:dc:40:10:95:1e:25:91:42:19:21:4b:13:2d:5e:
         07:c6:08:f3:11:cc:c9:aa:69:07:93:f0:18:4c:d8:26:b0:77:
         cd:cd:50:b3:e2:5b:54:9f:37:36:38:8e:05:4e:a9:f1:ac:bd:
         5e:68:ee:7e:f0:1e:00:ed:e5:1d:6b:3a:05:c0:c8:22:8e:6a:
         27:68:c6:f3:e6:26:d5:7f:ad:6a:99:6b:8b:85:7e:a7:cd:67:
         6a:41:4f:54:25:f0:25:01:7a:6a:d7:15:5f:d4:6f:08:e4:a4:
         bd:50:8f:6f:18:92:e3:ce:53:7f:9f:f6:f7:c4:0f:a0:6e:9d:
         ea:4d:2f:e3:02:b0:5e:9d:bc:1c:60:b4:66:5d:82:84:c0:ab:
         76:0a:48:f1:d4:6e:0e:01:10:a0:4a:12:c0:1e:e8:0b:e8:02:
         cd:12:81:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:46:26 2025 by rpki-client