Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/323830343a356230633a3a2f33322d3332203d3e20323638383135.roa
File:                     323830343a356230633a3a2f33322d3332203d3e20323638383135.roa (raw, json)
Hash identifier:          rDAAUxyN6fR3dwEMm5P/glLKK6XtLhCO/xAtKnkYMbI=
Subject key identifier:   89:84:5D:B6:26:DC:CA:98:84:75:10:48:50:B2:AF:56:88:09:7C:72
Certificate issuer:       /CN=148870ED8BFB6BE8F6D0A9E969336D8D39D40081
Certificate serial:       04B49B21022A601F645E0190D25C87269C5E789C
Authority key identifier: 14:88:70:ED:8B:FB:6B:E8:F6:D0:A9:E9:69:33:6D:8D:39:D4:00:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/148870ED8BFB6BE8F6D0A9E969336D8D39D40081.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/323830343a356230633a3a2f33322d3332203d3e20323638383135.roa
Signing time:             Fri 13 Dec 2024 19:16:25 +0000
ROA not before:           Fri 13 Dec 2024 19:11:25 +0000
ROA not after:            Fri 12 Dec 2025 19:16:25 +0000
asID:                     268815
IP address blocks:        2804:5b0c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:b4:9b:21:02:2a:60:1f:64:5e:01:90:d2:5c:87:26:9c:5e:78:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=148870ED8BFB6BE8F6D0A9E969336D8D39D40081
        Validity
            Not Before: Dec 13 19:11:25 2024 GMT
            Not After : Dec 12 19:16:25 2025 GMT
        Subject: CN=89845DB626DCCA988475104850B2AF5688097C72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f1:44:7b:8f:57:6a:d2:d2:65:41:9f:26:c5:
                    b2:88:bd:8b:4e:9f:fc:47:a7:60:d0:78:4f:29:b8:
                    9b:7b:fe:1f:82:4a:a3:05:02:a3:65:b5:e6:b5:43:
                    4d:83:97:dd:33:d3:04:be:e3:9c:e5:a5:52:4f:f1:
                    13:50:92:d0:48:94:42:6d:32:f2:ca:5f:17:15:44:
                    b6:34:9f:f1:d4:9a:9f:8b:21:c6:07:42:09:61:ea:
                    c0:c3:31:29:2b:5c:b4:94:dd:98:95:7b:c8:0e:c6:
                    b6:b6:dc:4e:b2:05:1f:c8:6e:ce:a2:e7:59:27:2c:
                    a2:2f:23:f7:56:52:39:fe:b2:da:28:6b:1a:d4:58:
                    cf:8a:65:62:47:f9:95:e5:a4:2d:40:b4:05:0c:be:
                    12:eb:73:97:bc:22:c8:0e:9c:86:92:33:7d:6d:65:
                    d9:f8:d2:14:f5:2c:3d:2f:ed:3d:5c:61:79:45:9c:
                    ad:da:01:7f:72:50:e8:84:08:b4:4a:db:2f:b5:8e:
                    63:40:da:a7:36:20:53:aa:9e:e8:87:28:8f:42:ec:
                    67:7c:c6:2a:2c:7d:0d:65:3c:a4:de:2b:40:f9:24:
                    3d:4d:e4:73:98:d4:aa:7e:c5:de:fc:9f:c7:11:09:
                    94:61:54:a1:c0:55:0a:87:af:ab:e7:1c:fa:75:68:
                    65:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:84:5D:B6:26:DC:CA:98:84:75:10:48:50:B2:AF:56:88:09:7C:72
            X509v3 Authority Key Identifier:
                keyid:14:88:70:ED:8B:FB:6B:E8:F6:D0:A9:E9:69:33:6D:8D:39:D4:00:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/148870ED8BFB6BE8F6D0A9E969336D8D39D40081.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/148870ED8BFB6BE8F6D0A9E969336D8D39D40081.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/323830343a356230633a3a2f33322d3332203d3e20323638383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b0c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:d4:11:71:ae:8f:f6:5a:7b:70:3e:21:53:73:88:5c:11:c3:
         40:ec:f4:50:d6:49:76:cd:7a:f6:1f:74:60:79:14:b7:df:2a:
         5f:1b:78:9f:1f:48:a6:49:18:f2:27:0a:62:27:de:28:01:b1:
         88:d4:2b:07:1c:59:ec:1c:a3:c7:7b:2f:55:d5:52:52:30:a5:
         45:54:5d:aa:56:02:a0:86:ff:1f:85:67:21:e4:20:1f:3c:4d:
         86:b2:cd:62:27:92:4b:f8:02:77:69:19:41:2e:30:d8:47:e7:
         ed:b1:26:fc:c8:c4:9d:5d:8f:f6:05:3b:18:fb:99:b4:14:dc:
         e4:f8:28:2f:de:f5:4e:2a:2e:fd:2a:48:c9:f2:9d:78:41:3b:
         d8:e4:04:3b:0e:68:d6:e6:bd:5e:17:87:85:10:a8:ab:f6:a8:
         ff:35:19:94:cb:8d:27:99:ca:bc:bd:1b:db:93:32:84:a6:08:
         f2:80:22:6c:78:a3:5c:c7:86:a4:f6:67:a3:ef:14:50:42:06:
         1a:63:67:94:bd:b4:6e:c7:d2:18:6e:1d:36:50:1b:fa:b2:03:
         95:71:f4:e9:ad:47:73:02:af:5a:24:eb:47:62:c9:90:a6:60:
         3e:2f:54:09:f2:82:32:3b:86:76:7e:33:83:9e:6c:17:a4:2a:
         56:f0:e3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:31:41 2025 by rpki-client