Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/323830343a333161343a383030303a3a2f33332d3333203d3e20323635303238.roa
File:                     323830343a333161343a383030303a3a2f33332d3333203d3e20323635303238.roa (raw, json)
Hash identifier:          1tlvQb4YErq8iznobjDK+X/vlIWqk0ovksPTpgFlxNY=
Subject key identifier:   4B:F9:25:51:3B:61:83:C3:58:5D:C1:C1:EB:64:C5:06:09:8C:39:84
Certificate issuer:       /CN=C4166A65EE236AE1374D5247D277915D8AFD9220
Certificate serial:       527BDA74CD426C0EBCE0C79A43CF77C773D0AE41
Authority key identifier: C4:16:6A:65:EE:23:6A:E1:37:4D:52:47:D2:77:91:5D:8A:FD:92:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C4166A65EE236AE1374D5247D277915D8AFD9220.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/323830343a333161343a383030303a3a2f33332d3333203d3e20323635303238.roa
Signing time:             Tue 18 Apr 2023 14:06:17 +0000
ROA not before:           Tue 18 Apr 2023 14:01:17 +0000
ROA not after:            Tue 16 Apr 2024 14:06:17 +0000
asID:                     265028
IP address blocks:        2804:31a4:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:7b:da:74:cd:42:6c:0e:bc:e0:c7:9a:43:cf:77:c7:73:d0:ae:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4166A65EE236AE1374D5247D277915D8AFD9220
        Validity
            Not Before: Apr 18 14:01:17 2023 GMT
            Not After : Apr 16 14:06:17 2024 GMT
        Subject: CN=4BF925513B6183C3585DC1C1EB64C506098C3984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fd:55:3b:f5:9e:24:90:fe:8a:86:fe:17:e7:
                    5d:86:25:ba:77:67:8f:0d:3b:52:83:e1:e1:44:d6:
                    9f:be:f5:53:45:49:6d:1d:ac:0d:e4:07:cd:74:e8:
                    62:8f:a0:ce:89:43:62:26:fc:53:3a:5f:1a:87:0f:
                    b4:98:b3:b6:5a:1d:f2:a0:2b:27:ed:4f:bc:1e:1d:
                    c3:b0:5e:95:9f:a5:05:4d:ea:bc:48:c3:f7:96:ff:
                    90:12:6e:d2:5e:37:a6:be:c3:f7:67:ce:22:ed:3c:
                    18:e6:2c:d4:21:ad:23:0d:60:01:f4:43:29:60:36:
                    aa:f1:5b:c0:91:d8:7f:87:20:35:1e:6d:61:0f:ba:
                    46:cf:bc:70:75:27:b6:7b:ef:6a:5b:78:09:e4:17:
                    b8:b6:ec:8b:88:fa:1c:53:b5:ab:5f:93:ef:3b:69:
                    ac:f3:5c:3a:00:fd:2c:bf:15:83:48:57:ed:f3:e1:
                    34:07:ef:73:10:d8:a1:5d:86:7e:04:00:6f:83:f2:
                    68:04:4e:31:85:f9:8f:2f:0e:be:85:2a:32:65:f7:
                    15:b1:05:94:c5:04:1a:f2:47:c4:b3:23:b1:70:c2:
                    1c:c6:0b:92:40:89:ed:87:92:ad:20:fc:22:70:98:
                    1c:b2:09:fd:69:31:c0:82:d6:31:18:63:68:5b:1b:
                    dc:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F9:25:51:3B:61:83:C3:58:5D:C1:C1:EB:64:C5:06:09:8C:39:84
            X509v3 Authority Key Identifier:
                keyid:C4:16:6A:65:EE:23:6A:E1:37:4D:52:47:D2:77:91:5D:8A:FD:92:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/C4166A65EE236AE1374D5247D277915D8AFD9220.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C4166A65EE236AE1374D5247D277915D8AFD9220.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/323830343a333161343a383030303a3a2f33332d3333203d3e20323635303238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:31a4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         1b:ad:ee:3e:39:f9:db:fa:6c:e9:c0:e9:a1:34:49:fb:41:17:
         0b:9e:dd:cc:10:22:75:0e:f4:24:19:03:4e:c2:ff:f9:a2:23:
         3b:2d:cc:71:13:cd:57:21:bd:cb:6f:bb:b9:71:06:ed:d2:ff:
         74:1a:07:1f:a8:25:8b:78:fd:f8:f9:b6:69:1b:b0:ad:ed:34:
         22:a5:82:26:48:73:f3:2b:86:1b:e9:3c:d6:27:6c:00:c0:e4:
         68:16:0c:e6:2a:d2:fa:1a:bc:86:a4:cb:84:6b:a3:b5:88:29:
         4d:e1:fd:06:19:30:17:23:04:a5:36:9b:6f:d4:13:28:63:2f:
         4d:1b:57:8c:6b:f4:e3:0b:2d:d5:56:91:60:f7:ea:5d:70:dc:
         ce:fb:fd:4b:60:06:b8:be:5d:11:72:7f:f9:73:b1:b0:95:db:
         2f:b1:93:10:14:c4:aa:4f:ca:e9:25:cc:26:e6:56:51:0c:ef:
         e2:b8:f5:ee:10:da:00:79:01:7e:64:8a:40:0d:e7:a7:fc:54:
         02:0c:2a:19:be:55:91:1c:98:dd:75:90:dd:5f:87:0c:97:1e:
         dc:9d:e6:23:d1:72:d1:e6:8a:36:1a:4b:f3:ea:68:03:d4:ac:
         a5:a9:3b:7b:04:a3:1e:6b:5d:95:e1:83:08:fd:89:db:da:0e:
         92:02:21:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:32:03 2025 by rpki-client