Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/323830343a313239303a633030303a3a2f33342d3334203d3e20323633343834.roa
File:                     323830343a313239303a633030303a3a2f33342d3334203d3e20323633343834.roa (raw, json)
Hash identifier:          gt00ZPker94aWWX1R7D5BSp0Vym6YRsVbnEJWIpxGDQ=
Subject key identifier:   1C:A9:9C:48:73:AD:6D:A6:F9:5D:55:2D:3B:E4:07:69:10:D1:50:BB
Certificate issuer:       /CN=1698795302C7E2A145BFA93BF0B8C9B149DFD43D
Certificate serial:       4AAB2834BD58CC36DD4B3272F1E6C2D198A92C23
Authority key identifier: 16:98:79:53:02:C7:E2:A1:45:BF:A9:3B:F0:B8:C9:B1:49:DF:D4:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1698795302C7E2A145BFA93BF0B8C9B149DFD43D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/323830343a313239303a633030303a3a2f33342d3334203d3e20323633343834.roa
Signing time:             Wed 04 Dec 2024 14:43:51 +0000
ROA not before:           Wed 04 Dec 2024 14:38:51 +0000
ROA not after:            Wed 03 Dec 2025 14:43:51 +0000
asID:                     263484
IP address blocks:        2804:1290:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ab:28:34:bd:58:cc:36:dd:4b:32:72:f1:e6:c2:d1:98:a9:2c:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1698795302C7E2A145BFA93BF0B8C9B149DFD43D
        Validity
            Not Before: Dec  4 14:38:51 2024 GMT
            Not After : Dec  3 14:43:51 2025 GMT
        Subject: CN=1CA99C4873AD6DA6F95D552D3BE4076910D150BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:33:1f:f3:b6:76:46:61:91:f7:8f:8d:cf:71:
                    c4:16:22:01:d7:50:d3:ac:23:09:46:5e:0a:41:57:
                    e0:a3:62:ff:38:b9:6e:15:db:b8:7e:69:a1:bf:7d:
                    f5:2b:7d:aa:6c:f6:c6:af:56:cd:12:e9:70:90:b5:
                    32:ce:80:ef:fb:2a:1f:2e:02:90:d9:4c:b1:b9:47:
                    12:81:cf:e4:7b:6d:63:aa:cb:34:06:7a:f1:3c:6c:
                    aa:e4:cc:14:ee:ce:62:33:fb:ec:a2:65:aa:84:e4:
                    1d:ea:65:57:5d:6a:bd:25:cd:06:92:71:41:87:4d:
                    32:22:85:14:59:c2:99:6c:ea:45:a2:9a:00:1a:21:
                    d2:b6:96:2e:c1:37:10:49:d0:34:1b:97:ed:13:7e:
                    4b:b4:c6:2f:67:3e:1f:a4:0d:9e:56:ef:6d:e2:da:
                    6d:2c:27:97:db:27:52:df:60:e9:00:5e:a4:d1:ca:
                    18:d4:f0:8f:48:86:dc:6b:3e:bb:c0:b6:ed:90:51:
                    6b:65:cd:3e:8c:93:b0:b4:a9:9e:af:d0:da:92:f8:
                    3a:2b:a7:44:56:5d:d7:ea:d0:5b:8a:a5:a7:6a:6b:
                    c2:3a:3e:87:18:0e:3a:c7:05:a6:8b:2a:40:e3:2a:
                    7a:19:17:83:1a:26:21:40:9b:d3:48:89:2f:cf:38:
                    9f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A9:9C:48:73:AD:6D:A6:F9:5D:55:2D:3B:E4:07:69:10:D1:50:BB
            X509v3 Authority Key Identifier:
                keyid:16:98:79:53:02:C7:E2:A1:45:BF:A9:3B:F0:B8:C9:B1:49:DF:D4:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/1698795302C7E2A145BFA93BF0B8C9B149DFD43D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1698795302C7E2A145BFA93BF0B8C9B149DFD43D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/323830343a313239303a633030303a3a2f33342d3334203d3e20323633343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1290:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         75:43:ac:ec:11:fa:db:af:13:e2:9e:8b:d5:77:85:35:44:09:
         96:d4:68:e7:27:38:39:0e:37:5f:d9:e5:9c:a2:7f:27:45:07:
         37:a9:96:8b:95:c0:0c:57:1f:84:68:ab:18:db:f9:31:2e:ce:
         52:41:1c:83:78:40:7b:d9:89:26:52:3f:36:1a:55:fa:57:0c:
         26:67:5d:41:cf:08:2d:c8:a5:76:27:b3:5a:b6:f8:e3:00:c9:
         e1:75:17:b8:25:cc:bb:bb:00:94:9a:45:0c:92:f4:1e:3c:94:
         2d:05:cc:c4:02:79:c1:cb:09:02:c1:20:1f:da:61:4a:c8:e4:
         47:9a:f6:5f:40:49:9f:56:d5:15:39:b7:c1:36:07:5c:f0:6c:
         aa:ff:40:2a:d0:76:8d:a2:c1:7a:02:87:22:5a:83:19:50:fb:
         52:67:86:f6:eb:37:12:b4:4b:68:09:78:3e:57:d4:cf:36:a0:
         6b:db:b4:64:bd:e7:4a:34:46:89:67:dd:d4:7e:d7:60:fd:30:
         f5:da:ff:be:5d:18:6c:d3:4d:2c:a2:98:15:95:cc:02:1d:32:
         34:88:26:64:63:07:ec:75:a9:9e:a1:a4:40:fe:c4:23:0f:c4:
         13:92:9b:49:1a:c1:19:6e:6d:f8:00:e0:7f:07:e5:0b:0b:2e:
         02:af:9c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:01:09 2025 by rpki-client