Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/1/323830343a373138303a3a2f34302d3430203d3e20323730373933.roa
File:                     323830343a373138303a3a2f34302d3430203d3e20323730373933.roa (raw, json)
Hash identifier:          xYCMB1rRxESxt8GBP2UqDn22o3ZkKIXXga1VL+qef6k=
Subject key identifier:   14:49:7B:E8:C4:74:A3:69:2B:C7:06:B9:E5:2F:54:A4:A3:1D:F5:BA
Certificate issuer:       /CN=4334AE73C75D6CEBFACB6CBE89A979919ADD4DF2
Certificate serial:       1240A10FBB5630A9300476676D2851934ADF599F
Authority key identifier: 43:34:AE:73:C7:5D:6C:EB:FA:CB:6C:BE:89:A9:79:91:9A:DD:4D:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4334AE73C75D6CEBFACB6CBE89A979919ADD4DF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/1/323830343a373138303a3a2f34302d3430203d3e20323730373933.roa
Signing time:             Mon 21 Aug 2023 13:42:20 +0000
ROA not before:           Mon 21 Aug 2023 13:37:20 +0000
ROA not after:            Mon 19 Aug 2024 13:42:20 +0000
asID:                     270793
IP address blocks:        2804:7180::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:40:a1:0f:bb:56:30:a9:30:04:76:67:6d:28:51:93:4a:df:59:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4334AE73C75D6CEBFACB6CBE89A979919ADD4DF2
        Validity
            Not Before: Aug 21 13:37:20 2023 GMT
            Not After : Aug 19 13:42:20 2024 GMT
        Subject: CN=14497BE8C474A3692BC706B9E52F54A4A31DF5BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:da:c3:d2:ff:e9:8e:e7:3e:af:87:73:89:9e:
                    f1:61:ca:0e:b9:82:83:56:69:86:89:60:94:d7:9f:
                    33:83:12:85:e7:56:a7:74:28:68:92:2b:09:e3:f0:
                    e4:df:d0:d6:86:20:b7:4a:3d:4a:7f:c2:ee:21:b2:
                    34:5d:c9:e7:76:23:b3:3c:b6:06:61:1f:03:1d:00:
                    98:57:6b:73:8e:50:0f:b3:8d:82:56:f8:f0:57:65:
                    c7:cc:e9:20:1c:0e:38:55:e6:01:8b:32:51:1f:82:
                    e6:9d:a4:f0:63:74:96:f4:65:6c:da:20:34:e6:46:
                    9e:bc:2e:1d:84:f3:d9:d3:6c:47:7c:39:24:2b:67:
                    50:50:ef:7a:6c:d5:45:a2:33:03:32:52:72:51:0d:
                    c9:2b:a6:24:66:b1:a8:1a:81:1d:72:b0:8c:be:fe:
                    c4:cb:eb:48:e2:0f:0b:86:4b:f5:d5:4b:da:6e:d7:
                    27:b1:c9:64:a5:e9:0f:97:a5:2f:f9:86:fe:e8:20:
                    b4:77:16:b2:8d:84:0c:97:46:e8:89:a4:00:ec:87:
                    bd:99:b9:13:6d:f3:52:17:33:28:a5:0e:fc:85:6b:
                    7b:e2:f8:4c:2c:b7:86:22:bc:73:b1:24:f7:8c:c2:
                    92:44:c7:f8:2d:2b:20:bc:53:98:ab:26:f6:51:f2:
                    e5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:49:7B:E8:C4:74:A3:69:2B:C7:06:B9:E5:2F:54:A4:A3:1D:F5:BA
            X509v3 Authority Key Identifier:
                keyid:43:34:AE:73:C7:5D:6C:EB:FA:CB:6C:BE:89:A9:79:91:9A:DD:4D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/1/4334AE73C75D6CEBFACB6CBE89A979919ADD4DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4334AE73C75D6CEBFACB6CBE89A979919ADD4DF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/1/323830343a373138303a3a2f34302d3430203d3e20323730373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7180::/40

    Signature Algorithm: sha256WithRSAEncryption
         09:74:98:cb:4c:0c:1f:1b:63:3d:0d:7b:c1:03:47:f8:09:ec:
         13:6b:e4:b2:80:e5:c6:f2:93:9e:11:31:68:9a:cb:c5:ea:56:
         fa:cc:9d:d4:b6:fb:1c:8c:30:f2:de:c2:dc:20:16:8a:05:62:
         5d:96:bb:ce:38:d3:8d:b0:7c:0b:a1:d8:87:6f:68:1e:57:1a:
         a9:71:39:b8:98:7b:e1:c8:bb:12:55:03:7a:12:da:a7:59:45:
         a2:85:79:96:0b:c8:d9:e7:77:6e:92:28:da:03:ad:82:cb:d2:
         2a:61:b6:ed:d1:d7:ef:d5:4f:c8:bb:87:55:4b:15:05:30:18:
         64:d7:4f:00:31:27:5c:58:22:9a:86:39:9f:d5:fb:7c:a7:a8:
         3c:24:d2:2c:a8:a2:7d:01:25:f0:44:90:24:ca:05:13:94:8c:
         3b:a7:28:01:0c:fd:4f:e7:0c:67:91:fd:ed:c4:c9:f1:bf:19:
         dd:e3:b2:07:51:4b:8e:88:b7:4b:aa:6c:a6:50:6f:19:65:64:
         e2:c5:2a:aa:65:f5:77:dd:b8:36:46:63:39:38:f4:43:a1:86:
         44:70:00:9b:6f:21:dc:47:cb:be:c8:76:c9:9e:b3:c4:6e:a4:
         4d:2d:b0:46:9b:e8:1b:6b:30:c9:da:9c:10:c2:de:c2:ce:75:
         eb:9f:38:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:04:03 2025 by rpki-client