Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/323830343a363765303a633030303a3a2f33342d3334203d3e20323639363536.roa
File:                     323830343a363765303a633030303a3a2f33342d3334203d3e20323639363536.roa (raw, json)
Hash identifier:          g1tZXk4A1GeLdW1x8oL2z/REtmwP+x4FOeOSRXqNGkc=
Subject key identifier:   CD:A6:08:64:B1:25:FA:6D:F2:9F:75:9D:39:C0:AC:B0:C7:AD:9E:26
Certificate issuer:       /CN=49C708D013D5FE74999800FB265B16FDF89861D3
Certificate serial:       39EF1B8EF91467CB4F589ED5928C53BBA6C7946B
Authority key identifier: 49:C7:08:D0:13:D5:FE:74:99:98:00:FB:26:5B:16:FD:F8:98:61:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C708D013D5FE74999800FB265B16FDF89861D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/323830343a363765303a633030303a3a2f33342d3334203d3e20323639363536.roa
Signing time:             Thu 05 Dec 2024 18:15:23 +0000
ROA not before:           Thu 05 Dec 2024 18:10:23 +0000
ROA not after:            Thu 04 Dec 2025 18:15:23 +0000
asID:                     269656
IP address blocks:        2804:67e0:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:ef:1b:8e:f9:14:67:cb:4f:58:9e:d5:92:8c:53:bb:a6:c7:94:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49C708D013D5FE74999800FB265B16FDF89861D3
        Validity
            Not Before: Dec  5 18:10:23 2024 GMT
            Not After : Dec  4 18:15:23 2025 GMT
        Subject: CN=CDA60864B125FA6DF29F759D39C0ACB0C7AD9E26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4d:7e:da:02:40:54:d4:b4:ff:8c:82:34:c1:
                    5c:33:7f:0c:5d:2b:ed:06:0f:b6:b2:75:ba:89:a2:
                    26:32:af:48:75:a8:0b:00:20:04:8b:93:55:2e:67:
                    54:37:a7:10:68:66:81:48:a8:02:63:e8:78:37:9b:
                    bc:c8:21:a3:f9:ea:a1:c5:dd:45:f1:8d:3f:52:52:
                    fb:e0:d6:b2:0e:c6:fd:a7:d1:fa:67:25:22:d3:69:
                    a2:f5:cf:46:3a:8d:18:61:29:f1:91:d9:87:e3:2b:
                    ec:93:95:8d:2b:6f:21:37:f5:88:f7:e4:9e:0c:ad:
                    74:33:98:eb:ab:28:07:6d:19:05:17:c0:04:40:a0:
                    30:0b:00:18:39:58:84:d0:69:38:d5:07:0e:1a:f8:
                    a2:b8:30:64:e8:b1:c2:cd:72:21:d8:7a:ed:ca:58:
                    6c:80:f4:30:da:98:ea:38:f9:22:ff:47:84:6c:75:
                    fe:83:4e:f3:36:1b:f8:0d:f0:f7:82:b4:e5:91:95:
                    5f:b7:ca:30:a7:43:fd:5f:fe:7c:09:48:a6:e9:31:
                    78:75:c2:99:bc:a1:5a:70:58:23:37:31:41:90:b9:
                    8d:34:a4:25:eb:12:1c:3e:b4:44:5d:6e:f8:9e:ce:
                    86:25:29:eb:ec:0d:07:60:b3:f5:b0:e8:11:01:e9:
                    bd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A6:08:64:B1:25:FA:6D:F2:9F:75:9D:39:C0:AC:B0:C7:AD:9E:26
            X509v3 Authority Key Identifier:
                keyid:49:C7:08:D0:13:D5:FE:74:99:98:00:FB:26:5B:16:FD:F8:98:61:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/49C708D013D5FE74999800FB265B16FDF89861D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C708D013D5FE74999800FB265B16FDF89861D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/323830343a363765303a633030303a3a2f33342d3334203d3e20323639363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67e0:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         2a:33:18:8e:78:11:02:e7:cd:8c:ac:ea:43:59:0c:e8:5a:8a:
         85:e3:c0:15:7a:40:1f:b9:37:db:36:e6:2c:1d:6b:62:6e:59:
         67:c0:40:6b:43:98:40:2a:8e:6d:02:75:10:79:6c:a6:9d:24:
         9f:75:97:54:3f:d4:40:da:71:9f:18:8f:72:eb:e5:e0:97:09:
         5b:ae:2d:10:4d:e4:5a:a8:11:dd:7e:79:32:8c:b1:55:e4:b0:
         bf:bd:34:9d:be:0e:02:c7:f7:37:54:d5:34:1e:44:44:2c:36:
         ac:da:dd:6a:20:77:59:73:59:10:8b:ac:bd:fb:17:6c:93:23:
         1c:25:f3:62:3d:71:2c:c2:88:92:df:47:6b:15:2c:0d:2b:8e:
         b6:00:d9:5d:d6:c2:57:e6:fd:3d:f7:68:44:68:53:0d:f2:e8:
         c1:a4:19:ad:a1:dc:65:46:d6:8f:63:35:8e:bb:2d:d5:c8:4d:
         83:96:11:ac:d8:29:9c:36:f0:93:59:ed:e3:6f:fa:a8:cd:37:
         1c:3c:07:19:a7:ed:f5:4c:ef:9a:94:19:f4:ae:dc:c6:4d:07:
         5f:bc:cc:78:81:f3:3a:ea:20:ec:6b:44:4d:c0:da:35:10:45:
         29:bc:c9:61:9f:6d:ac:2f:ae:f2:61:ab:6c:e9:48:ab:c0:3c:
         40:df:0c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 17:44:30 2025 by rpki-client