Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/323830343a313934633a3a2f33322d3332203d3e203631373835.roa
File:                     323830343a313934633a3a2f33322d3332203d3e203631373835.roa (raw, json)
Hash identifier:          jcTuoiTEUXBeQ04llb8+x/mxgLniWnnFqpwy+dbcwOI=
Subject key identifier:   35:51:9B:4A:25:15:57:22:CE:B2:FA:C2:24:15:94:0C:CD:29:2C:33
Certificate issuer:       /CN=5D02A9D5EA4562DFA1998A8F4C882ACD6908671E
Certificate serial:       42639EC77BACD6A148E9FA1E6AC436D2E23EEB1E
Authority key identifier: 5D:02:A9:D5:EA:45:62:DF:A1:99:8A:8F:4C:88:2A:CD:69:08:67:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D02A9D5EA4562DFA1998A8F4C882ACD6908671E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/323830343a313934633a3a2f33322d3332203d3e203631373835.roa
Signing time:             Tue 21 Jan 2025 14:07:43 +0000
ROA not before:           Tue 21 Jan 2025 14:02:43 +0000
ROA not after:            Tue 20 Jan 2026 14:07:43 +0000
asID:                     61785
IP address blocks:        2804:194c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:63:9e:c7:7b:ac:d6:a1:48:e9:fa:1e:6a:c4:36:d2:e2:3e:eb:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D02A9D5EA4562DFA1998A8F4C882ACD6908671E
        Validity
            Not Before: Jan 21 14:02:43 2025 GMT
            Not After : Jan 20 14:07:43 2026 GMT
        Subject: CN=35519B4A25155722CEB2FAC22415940CCD292C33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:82:e0:cc:ae:08:3e:40:32:c8:09:18:33:2d:
                    2d:47:d8:49:aa:c4:45:47:27:fd:b1:dc:09:9c:7d:
                    89:a4:5e:cd:e9:13:78:3a:7b:bf:93:65:ff:b7:c9:
                    26:58:4d:68:64:79:af:b3:2b:27:fc:52:24:8c:03:
                    a8:ed:1a:36:f0:7c:2a:9f:94:13:04:3e:45:f1:6d:
                    3d:4e:0d:ec:65:d0:66:39:81:44:66:04:79:d6:2a:
                    73:33:5b:29:97:03:cd:49:af:f2:88:80:35:95:d2:
                    19:27:24:15:a5:11:e7:7e:31:3a:40:53:d1:ae:65:
                    37:82:f7:a3:79:9b:d0:64:b8:18:13:da:8f:e9:46:
                    df:dd:29:c4:ee:15:04:5c:26:c1:a0:93:b8:1f:4f:
                    bb:b8:07:71:14:9f:de:7f:85:6a:5c:28:90:b6:69:
                    5d:ae:7f:3e:cf:4f:8f:b7:aa:f7:88:03:a2:8a:0a:
                    97:df:c0:46:6d:e2:94:3c:d7:4a:4b:19:61:52:38:
                    65:87:22:a8:58:cb:62:07:a0:66:3f:65:fa:9e:01:
                    7a:7c:4d:f6:62:1b:c4:ab:81:3b:ad:99:94:84:73:
                    b6:49:12:1a:c5:5f:31:3b:7b:d6:9d:82:51:53:14:
                    56:fb:05:f0:f9:2c:7e:04:66:58:33:98:62:f0:53:
                    ab:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:51:9B:4A:25:15:57:22:CE:B2:FA:C2:24:15:94:0C:CD:29:2C:33
            X509v3 Authority Key Identifier:
                keyid:5D:02:A9:D5:EA:45:62:DF:A1:99:8A:8F:4C:88:2A:CD:69:08:67:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/5D02A9D5EA4562DFA1998A8F4C882ACD6908671E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D02A9D5EA4562DFA1998A8F4C882ACD6908671E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/323830343a313934633a3a2f33322d3332203d3e203631373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:194c::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:f6:cf:24:2f:60:09:79:fe:98:05:47:c2:06:f0:1a:b7:85:
         ae:19:15:e8:f9:ba:87:bd:07:85:40:b3:94:6f:0b:42:9d:0f:
         f4:fa:8d:22:c2:52:13:16:c1:4a:0e:43:1f:24:c6:fe:c8:b3:
         a7:ca:48:04:d2:c5:61:05:75:61:de:57:f5:c8:2b:70:ba:65:
         7f:9a:8b:43:f0:22:6b:1b:7e:68:b0:c1:14:cb:87:fd:05:74:
         bd:69:54:50:9d:7e:2a:d3:8c:f9:e2:37:dd:6b:e7:5f:43:d2:
         42:95:54:4c:11:fa:53:58:48:e8:e2:4c:19:55:a8:43:45:8b:
         bc:cf:87:34:62:4c:22:cc:1a:77:5b:cd:21:db:b1:fd:9a:0d:
         8a:d4:39:a3:75:1d:ab:00:58:6d:e2:a9:78:ee:e0:a8:29:e7:
         0c:c0:c2:90:04:d2:36:2c:f3:8d:b8:84:c6:25:0e:2e:92:61:
         3e:b7:fa:90:a7:30:76:fa:b6:4c:de:71:88:12:16:f2:43:5b:
         79:09:50:e8:b3:05:4f:87:8b:47:e8:fb:cb:25:e9:4a:22:35:
         a3:07:64:0b:ab:8f:a4:6b:c0:25:0f:12:b4:07:06:84:7f:13:
         84:41:f3:5b:98:b9:4b:a3:90:86:61:23:16:1d:04:01:4f:d0:
         a0:74:f6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 04:06:30 2025 by rpki-client