Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/323830343a346430633a3a2f33322d3332203d3e20323637343039.roa
File:                     323830343a346430633a3a2f33322d3332203d3e20323637343039.roa (raw, json)
Hash identifier:          CCmuONpjc+ZpCbhBLunQALQNaHncHriyfSCEHM46vnc=
Subject key identifier:   87:37:95:49:30:BB:03:AF:16:23:CF:42:9F:6F:23:0C:BF:EF:C4:7C
Certificate issuer:       /CN=914016D20FC6BF392388EBF2192D8F5AA78B8FD3
Certificate serial:       289CC8433B997FCEDEAA14C43ADD5E5582383BD2
Authority key identifier: 91:40:16:D2:0F:C6:BF:39:23:88:EB:F2:19:2D:8F:5A:A7:8B:8F:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/914016D20FC6BF392388EBF2192D8F5AA78B8FD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/323830343a346430633a3a2f33322d3332203d3e20323637343039.roa
Signing time:             Fri 21 Feb 2025 13:44:37 +0000
ROA not before:           Fri 21 Feb 2025 13:39:37 +0000
ROA not after:            Fri 20 Feb 2026 13:44:37 +0000
asID:                     267409
IP address blocks:        2804:4d0c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:9c:c8:43:3b:99:7f:ce:de:aa:14:c4:3a:dd:5e:55:82:38:3b:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=914016D20FC6BF392388EBF2192D8F5AA78B8FD3
        Validity
            Not Before: Feb 21 13:39:37 2025 GMT
            Not After : Feb 20 13:44:37 2026 GMT
        Subject: CN=8737954930BB03AF1623CF429F6F230CBFEFC47C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f4:ad:3d:ed:f0:1a:85:67:04:ec:2e:7a:0d:
                    42:7c:3c:90:c5:92:d0:0b:32:2e:fd:49:b3:f4:d5:
                    69:f6:0d:01:e6:ae:e9:95:29:ac:2b:95:f0:c9:55:
                    0d:ca:23:01:2e:ba:4a:65:a2:2b:1f:76:21:ce:2e:
                    0d:72:80:fe:f5:e0:f3:e1:71:8c:b0:3a:e4:3e:9e:
                    df:ae:62:68:d0:62:31:67:5f:09:84:da:07:80:ea:
                    43:d2:1e:ed:87:2b:be:d6:a7:24:12:38:81:0c:d4:
                    c5:a9:ca:17:e3:a1:b3:52:2f:77:7e:21:2e:4e:75:
                    b4:4c:13:8e:9f:35:f5:ff:d2:20:f2:62:3c:e8:6d:
                    8e:c3:76:95:a2:68:00:61:6a:98:18:45:a9:17:f7:
                    ee:08:77:5d:8e:e9:e1:f5:11:bc:18:10:30:ea:9d:
                    f4:9e:d7:a6:ad:86:e4:df:5f:1a:1d:0c:35:f9:47:
                    bb:c1:b9:78:1d:53:f1:75:61:5b:da:67:d7:7d:60:
                    06:db:64:51:b5:eb:d2:23:c2:0d:5b:f8:53:a1:91:
                    65:76:07:57:60:dd:3c:54:fc:51:3f:95:0c:60:21:
                    db:fc:00:63:34:b4:de:fc:2b:33:cb:f2:09:84:f2:
                    20:89:d1:6e:9e:d7:0b:e8:6f:a2:d4:a3:24:be:be:
                    19:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:37:95:49:30:BB:03:AF:16:23:CF:42:9F:6F:23:0C:BF:EF:C4:7C
            X509v3 Authority Key Identifier:
                keyid:91:40:16:D2:0F:C6:BF:39:23:88:EB:F2:19:2D:8F:5A:A7:8B:8F:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/914016D20FC6BF392388EBF2192D8F5AA78B8FD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/914016D20FC6BF392388EBF2192D8F5AA78B8FD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/323830343a346430633a3a2f33322d3332203d3e20323637343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d0c::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:76:c0:8a:6d:80:87:d2:5b:d6:e7:6e:29:5b:6a:8e:ba:71:
         ee:e8:cd:93:30:94:7c:40:d7:db:48:df:2e:a4:1e:b2:07:a1:
         dc:74:e4:10:20:4c:8d:03:35:46:79:ac:b7:88:43:d6:f0:52:
         52:38:cf:df:eb:57:99:eb:77:06:ce:ad:f0:cf:e9:25:6e:33:
         51:17:32:e2:6f:0a:68:6f:0e:c3:b1:7f:3c:1e:7e:dd:4b:7b:
         8a:29:4c:78:ba:ac:35:ea:c3:53:7d:66:09:71:78:ae:21:d9:
         ed:d4:f8:2b:4b:a6:bd:3f:9a:40:d8:4b:ee:42:b5:55:19:55:
         00:61:f8:dc:d6:56:00:34:1f:57:35:b2:23:97:66:c0:5c:3a:
         e4:ec:d5:70:9f:e9:d0:65:96:d6:0b:58:32:cf:e6:7c:91:9d:
         fe:36:ba:9a:70:03:90:ce:19:a2:a2:47:1a:65:0d:f5:43:c5:
         36:e5:a9:9c:d8:7c:69:f0:dc:b1:ff:06:f1:67:1c:17:7f:f4:
         f0:52:8a:4e:91:e5:4b:08:b9:eb:66:fa:80:40:0b:b3:a0:25:
         13:4f:01:f9:86:e0:a0:88:37:55:5d:e1:ab:09:f3:a1:29:56:
         93:51:a1:a5:a1:6a:a6:94:13:61:7f:69:56:3c:06:6f:52:47:
         8d:f1:1b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:16:13 2025 by rpki-client