Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/2/323830343a366137343a3a2f33332d3438203d3e20323730333337.roa
File:                     323830343a366137343a3a2f33332d3438203d3e20323730333337.roa (raw, json)
Hash identifier:          tOFniVTujRRlk5cK2q3y+CU0Gm5pSUOodB0uD12fl+s=
Subject key identifier:   9C:48:C6:BC:8D:92:AD:D6:56:B7:3E:60:A0:A9:EB:A9:8C:07:D7:B4
Certificate issuer:       /CN=102E8D201FEFBD18DA17FA1622858BB27784D51F
Certificate serial:       3F213D20F30750172302B1D0232F14C222E3E210
Authority key identifier: 10:2E:8D:20:1F:EF:BD:18:DA:17:FA:16:22:85:8B:B2:77:84:D5:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/102E8D201FEFBD18DA17FA1622858BB27784D51F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/2/323830343a366137343a3a2f33332d3438203d3e20323730333337.roa
Signing time:             Thu 06 Mar 2025 14:52:21 +0000
ROA not before:           Thu 06 Mar 2025 14:47:21 +0000
ROA not after:            Thu 05 Mar 2026 14:52:21 +0000
asID:                     270337
IP address blocks:        2804:6a74::/33 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:21:3d:20:f3:07:50:17:23:02:b1:d0:23:2f:14:c2:22:e3:e2:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=102E8D201FEFBD18DA17FA1622858BB27784D51F
        Validity
            Not Before: Mar  6 14:47:21 2025 GMT
            Not After : Mar  5 14:52:21 2026 GMT
        Subject: CN=9C48C6BC8D92ADD656B73E60A0A9EBA98C07D7B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c5:8a:ba:c7:83:2a:0c:1c:47:5b:10:49:b5:
                    0a:d5:b4:b5:a3:c6:61:99:72:ef:86:9f:3d:99:82:
                    14:ef:91:97:60:24:da:b0:2a:6e:64:be:d7:8b:ed:
                    92:7c:bb:81:75:3c:1c:b1:31:4a:39:15:18:bc:36:
                    c7:b1:f6:2d:f8:65:b7:3a:85:9b:0f:08:c6:5f:3e:
                    64:28:4c:f6:7c:c7:e9:db:cb:d9:ef:d0:dd:27:c9:
                    ba:48:f6:e0:d2:dc:13:ba:a2:85:27:ea:c1:d3:9c:
                    17:43:e9:14:c1:6e:cb:b6:48:94:be:17:55:ef:1a:
                    2c:86:cf:8d:70:d4:b8:e5:73:86:02:fa:2f:b6:f5:
                    83:a8:f2:d2:1e:e4:5c:fc:0a:ca:9a:e1:7a:66:e9:
                    a6:e5:e6:75:27:22:f8:15:41:2d:59:f4:cc:80:de:
                    03:13:2e:20:b9:a0:11:30:68:9c:89:c9:78:43:a3:
                    61:46:b0:4f:3d:ee:ec:9a:a1:bf:5d:fb:af:68:fb:
                    9e:65:be:09:e6:c3:1c:06:e4:6b:ec:b3:9d:5a:b1:
                    6d:b0:48:37:43:50:0b:fd:4d:b6:d7:13:1b:20:69:
                    a8:7a:4e:fd:66:6b:9d:9c:43:b5:d3:90:1c:97:26:
                    22:34:ab:87:f6:c3:ee:ee:e8:04:2d:55:7e:a2:6f:
                    a9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:48:C6:BC:8D:92:AD:D6:56:B7:3E:60:A0:A9:EB:A9:8C:07:D7:B4
            X509v3 Authority Key Identifier:
                keyid:10:2E:8D:20:1F:EF:BD:18:DA:17:FA:16:22:85:8B:B2:77:84:D5:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/2/102E8D201FEFBD18DA17FA1622858BB27784D51F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/102E8D201FEFBD18DA17FA1622858BB27784D51F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/2/323830343a366137343a3a2f33332d3438203d3e20323730333337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a74::/33

    Signature Algorithm: sha256WithRSAEncryption
         5f:32:6b:3c:96:90:78:b9:9a:0b:c0:32:3d:19:e2:30:41:41:
         95:25:29:ac:5e:14:46:4e:32:10:d9:63:bb:e5:07:72:31:c2:
         c0:f7:69:2a:bf:7b:21:ce:5f:4b:fd:e5:cf:51:7a:1a:3e:a9:
         64:d4:65:08:64:34:86:78:90:b2:94:55:c8:bb:aa:f3:60:9b:
         37:72:bb:c7:8d:8f:9c:93:71:8d:dc:6e:6a:f1:af:2f:45:c5:
         79:97:18:6d:5a:08:53:ec:42:08:d0:34:5c:10:6d:ff:f7:27:
         01:92:76:02:1a:55:14:c6:b8:c6:8c:a4:47:4a:ca:59:14:cf:
         31:7d:b1:30:28:3c:f7:02:94:ec:a1:b1:fa:6d:aa:62:d6:58:
         65:47:f5:08:46:09:ae:5d:c8:48:b7:e0:9d:08:0d:72:88:54:
         46:13:9b:4c:37:6f:54:3b:e9:57:76:4c:85:e1:17:16:c6:1d:
         ed:c3:47:77:cb:61:f1:4d:10:d5:cf:0f:bb:c2:0e:7d:db:e4:
         aa:75:f7:57:e2:b4:0c:22:c2:04:9f:0c:41:30:b7:99:f5:54:
         49:fc:b6:6b:8d:94:ac:06:02:8f:1d:ae:6e:65:cd:8f:0e:69:
         da:0c:f7:b3:2b:84:18:f7:ba:62:02:14:9d:45:1d:c3:58:d6:
         a0:e5:c0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:18:23 2025 by rpki-client