Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/323830343a313164633a613030303a3a2f33362d3336203d3e20323633343434.roa
File:                     323830343a313164633a613030303a3a2f33362d3336203d3e20323633343434.roa (raw, json)
Hash identifier:          DqMMLJj1X7miokVrKCScNevTPuLPcOMn1T8C/6CIpf4=
Subject key identifier:   83:51:CD:9D:41:DD:0B:A3:CC:37:92:3B:5D:FA:9B:3D:DE:16:3C:C2
Certificate issuer:       /CN=414013A25F77129C74B069C1772DF23C085FA9FC
Certificate serial:       42196A4FAB058EDB4FFBF1253FB9FD8A0329F961
Authority key identifier: 41:40:13:A2:5F:77:12:9C:74:B0:69:C1:77:2D:F2:3C:08:5F:A9:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/414013A25F77129C74B069C1772DF23C085FA9FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/323830343a313164633a613030303a3a2f33362d3336203d3e20323633343434.roa
Signing time:             Thu 07 Nov 2024 01:23:51 +0000
ROA not before:           Thu 07 Nov 2024 01:18:51 +0000
ROA not after:            Thu 06 Nov 2025 01:23:51 +0000
asID:                     263444
IP address blocks:        2804:11dc:a000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:19:6a:4f:ab:05:8e:db:4f:fb:f1:25:3f:b9:fd:8a:03:29:f9:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=414013A25F77129C74B069C1772DF23C085FA9FC
        Validity
            Not Before: Nov  7 01:18:51 2024 GMT
            Not After : Nov  6 01:23:51 2025 GMT
        Subject: CN=8351CD9D41DD0BA3CC37923B5DFA9B3DDE163CC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f5:35:52:0a:b1:2c:d0:53:44:a8:69:23:6b:
                    94:2f:07:4e:da:81:ba:59:e1:2c:f8:1d:67:f6:ce:
                    b3:6a:93:05:78:1b:ce:07:bc:8f:24:ca:15:b4:a7:
                    68:6c:28:ab:e5:15:03:f7:24:e2:51:24:28:72:f5:
                    83:45:9d:e5:f6:6c:3d:43:10:5a:4b:0d:85:a8:87:
                    b5:22:e9:f6:16:27:fb:61:1a:a9:8d:2c:a0:17:88:
                    8e:70:20:4f:e0:43:4b:be:3b:f8:ab:a5:77:29:79:
                    5a:60:c2:63:86:07:17:e0:a8:73:ca:9c:5c:64:ab:
                    39:9d:76:e0:0d:35:58:ec:d6:4a:f9:ee:5c:5e:1f:
                    45:ad:b9:5b:79:56:d2:4c:0e:56:64:b8:5a:da:17:
                    7a:97:e6:5c:ab:b7:de:d6:9e:25:43:a5:2e:73:90:
                    d6:a3:09:f7:21:68:38:c8:be:60:e9:50:6d:6e:15:
                    ae:64:a0:3c:74:af:05:c7:24:54:05:87:b9:2f:b8:
                    0b:7d:bf:99:d2:f2:a2:c5:b4:bb:7a:8c:3a:a1:7f:
                    59:4b:78:be:d5:36:d6:63:36:41:89:da:51:4c:b4:
                    ee:e9:f2:21:60:cc:82:04:72:2a:af:a4:1e:c0:4d:
                    96:1a:08:8c:78:06:47:09:d9:4d:85:d5:56:24:7d:
                    34:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:51:CD:9D:41:DD:0B:A3:CC:37:92:3B:5D:FA:9B:3D:DE:16:3C:C2
            X509v3 Authority Key Identifier:
                keyid:41:40:13:A2:5F:77:12:9C:74:B0:69:C1:77:2D:F2:3C:08:5F:A9:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/414013A25F77129C74B069C1772DF23C085FA9FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/414013A25F77129C74B069C1772DF23C085FA9FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/323830343a313164633a613030303a3a2f33362d3336203d3e20323633343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:11dc:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         08:c6:f7:95:01:5c:df:22:bc:31:ca:ba:5e:16:23:ee:76:5c:
         b4:42:d2:66:22:ef:bf:a8:9e:bb:08:c3:52:f7:ea:9a:ed:e1:
         01:6c:88:0c:55:72:13:b6:1e:43:91:b4:70:e4:85:49:0c:c6:
         a5:70:ff:ad:e0:af:d3:60:01:a3:03:7f:09:1f:96:cf:83:12:
         78:f4:47:76:67:7b:05:93:06:fa:c2:8b:8f:81:c5:a3:b9:35:
         a2:0e:71:56:1f:d1:c0:84:6a:9a:a9:0b:46:3e:d7:37:f8:81:
         ef:02:09:3a:1e:0b:fa:6e:0f:74:c1:8a:1b:b1:dc:fa:46:83:
         77:6a:a2:da:df:a9:8e:a9:ab:ab:83:38:39:6c:e6:40:c2:75:
         ef:c1:b5:21:f6:2f:68:6e:fb:21:87:02:00:0c:e2:d5:6d:33:
         e0:62:af:5f:07:38:06:f9:a8:74:2a:d8:fe:15:2e:64:0b:3f:
         63:d0:56:43:fd:8a:66:cf:57:31:90:40:23:8b:60:87:05:09:
         02:4a:92:c9:5a:63:c3:de:d7:5c:24:b3:ae:50:06:19:0b:f3:
         17:20:df:97:c7:d9:3b:b0:0b:16:9b:dc:db:3a:1e:ee:8c:19:
         69:a8:48:e9:36:eb:8c:04:50:0e:90:b5:39:56:24:7a:00:f0:
         97:b5:41:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:43:39 2025 by rpki-client