Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AoPFVyLjCn6KEcLrNWJaS9J91BzNrdLBfNioGr5gS5bF/0/323830343a383163633a3a2f33322d3334203d3e20323732343737.roa
File:                     323830343a383163633a3a2f33322d3334203d3e20323732343737.roa (raw, json)
Hash identifier:          DdjQdnGq4QS0g3MU25rF19w259/Lsqo3igJAnVXNm3U=
Subject key identifier:   D4:F7:F5:B9:31:24:0A:55:8D:B8:34:6C:BE:EA:05:D9:E9:90:A6:68
Certificate issuer:       /CN=1CC433397CD57D8AF8108695329E89CD1AAAAB74
Certificate serial:       4BE2F624830EED2E370627AAF02C5605FAF29530
Authority key identifier: 1C:C4:33:39:7C:D5:7D:8A:F8:10:86:95:32:9E:89:CD:1A:AA:AB:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CC433397CD57D8AF8108695329E89CD1AAAAB74.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AoPFVyLjCn6KEcLrNWJaS9J91BzNrdLBfNioGr5gS5bF/0/323830343a383163633a3a2f33322d3334203d3e20323732343737.roa
Signing time:             Wed 18 Sep 2024 11:58:46 +0000
ROA not before:           Wed 18 Sep 2024 11:53:46 +0000
ROA not after:            Wed 17 Sep 2025 11:58:46 +0000
asID:                     272477
IP address blocks:        2804:81cc::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:e2:f6:24:83:0e:ed:2e:37:06:27:aa:f0:2c:56:05:fa:f2:95:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CC433397CD57D8AF8108695329E89CD1AAAAB74
        Validity
            Not Before: Sep 18 11:53:46 2024 GMT
            Not After : Sep 17 11:58:46 2025 GMT
        Subject: CN=D4F7F5B931240A558DB8346CBEEA05D9E990A668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:89:0e:a3:ca:cf:04:e9:e2:49:47:5d:58:ba:
                    cf:33:81:75:f4:7f:d3:c7:5a:05:b4:b0:b6:a4:98:
                    f3:b9:f0:30:32:b5:5c:57:83:5f:c9:84:f1:73:0e:
                    5c:ea:0f:b6:d1:5e:67:db:02:02:06:a4:0e:7a:11:
                    01:d1:d9:42:83:34:d5:eb:16:f3:35:26:07:40:40:
                    d2:57:0d:8f:eb:ef:39:ca:b4:a2:d9:9e:73:37:5a:
                    6e:6f:1a:f9:0e:fc:c9:32:24:1a:b5:ad:b1:82:6f:
                    fc:18:b5:fa:48:f7:29:f8:7c:cd:84:35:d4:44:56:
                    d7:8c:35:b5:59:57:e8:2f:0d:21:69:ff:43:b0:60:
                    3f:32:09:9c:d8:fd:05:43:92:21:8d:a2:f4:9a:27:
                    4d:27:92:0a:d2:c1:b1:c3:24:93:b1:68:54:84:b3:
                    6d:d6:3f:74:c0:11:dc:03:31:19:57:70:10:85:d4:
                    85:23:25:6f:4a:6f:18:9c:06:47:73:62:9f:af:67:
                    63:be:b5:fc:97:38:67:15:24:97:c8:ff:d1:ce:68:
                    0c:2d:33:05:d7:86:58:30:d3:5a:99:6b:09:97:9e:
                    38:be:e0:5c:a8:94:6e:0a:8d:52:27:ec:6d:52:8e:
                    95:c5:e1:e0:02:8d:91:aa:38:d0:64:d7:3d:9d:94:
                    69:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F7:F5:B9:31:24:0A:55:8D:B8:34:6C:BE:EA:05:D9:E9:90:A6:68
            X509v3 Authority Key Identifier:
                keyid:1C:C4:33:39:7C:D5:7D:8A:F8:10:86:95:32:9E:89:CD:1A:AA:AB:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AoPFVyLjCn6KEcLrNWJaS9J91BzNrdLBfNioGr5gS5bF/0/1CC433397CD57D8AF8108695329E89CD1AAAAB74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CC433397CD57D8AF8108695329E89CD1AAAAB74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoPFVyLjCn6KEcLrNWJaS9J91BzNrdLBfNioGr5gS5bF/0/323830343a383163633a3a2f33322d3334203d3e20323732343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:81cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:95:e5:55:3b:12:74:ba:72:98:06:fb:8d:96:b7:83:86:ab:
         81:68:43:2e:c1:f4:ce:1a:af:ab:32:63:f2:bb:47:31:27:aa:
         e4:98:ce:0b:3e:37:03:87:2d:9b:4a:87:c2:c6:e0:c1:2f:58:
         c3:aa:a4:c9:22:03:04:93:82:92:fa:9e:c0:bf:64:c0:09:67:
         40:35:5e:b8:93:11:f7:b9:80:d9:96:5d:ab:87:34:7c:96:e1:
         6a:d2:56:17:94:b4:cf:91:b3:93:4a:88:ee:bd:16:ac:12:8b:
         75:40:6b:f1:67:64:8a:2e:df:2e:37:ba:35:b8:10:41:b3:84:
         0a:27:20:35:d9:ef:0b:6f:5c:e5:04:08:a1:c0:3e:b6:76:77:
         8f:89:f3:1f:a0:9c:93:f7:d4:1b:ee:c2:a0:f4:6d:3c:d2:6a:
         e6:ef:c5:8c:fe:d6:3e:0e:ef:ca:a9:88:ba:8c:47:21:e8:a3:
         ac:e2:6b:f5:3f:45:94:f1:79:0d:dc:89:95:11:67:12:3d:3f:
         76:73:40:d9:bd:3a:d3:be:8e:dc:61:1d:7d:bb:7e:26:4c:85:
         21:8c:ef:95:2d:ef:1c:93:3e:9e:fb:eb:57:63:05:f6:2b:6d:
         1f:37:e5:4c:02:7a:7a:36:32:37:38:6a:82:fa:cc:35:fe:e0:
         7f:13:49:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:39:49 2025 by rpki-client