Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/0/323830343a373337633a3a2f33322d3332203d3e20323730393138.roa
File:                     323830343a373337633a3a2f33322d3332203d3e20323730393138.roa (raw, json)
Hash identifier:          7Fl2954HbMSLFKV+y4kKeIBPHphh5FO9fI03TuoJ2Zk=
Subject key identifier:   17:DC:17:3D:64:42:A7:78:EB:A8:2B:B5:D8:89:4F:CF:1E:3B:C2:CB
Certificate issuer:       /CN=4F565A5812728624EE4199A0244BE5407F1AAAB0
Certificate serial:       261DC4EEAAD9AF690DE07029EAC2733A9CD0D06A
Authority key identifier: 4F:56:5A:58:12:72:86:24:EE:41:99:A0:24:4B:E5:40:7F:1A:AA:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F565A5812728624EE4199A0244BE5407F1AAAB0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/0/323830343a373337633a3a2f33322d3332203d3e20323730393138.roa
Signing time:             Thu 13 Feb 2025 19:03:47 +0000
ROA not before:           Thu 13 Feb 2025 18:58:47 +0000
ROA not after:            Thu 12 Feb 2026 19:03:47 +0000
asID:                     270918
IP address blocks:        2804:737c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:1d:c4:ee:aa:d9:af:69:0d:e0:70:29:ea:c2:73:3a:9c:d0:d0:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F565A5812728624EE4199A0244BE5407F1AAAB0
        Validity
            Not Before: Feb 13 18:58:47 2025 GMT
            Not After : Feb 12 19:03:47 2026 GMT
        Subject: CN=17DC173D6442A778EBA82BB5D8894FCF1E3BC2CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:dd:8e:09:06:11:88:14:fd:e0:06:22:eb:5c:
                    2b:c5:90:98:14:0d:67:de:9b:51:df:b9:04:04:f0:
                    b3:f3:a1:f9:92:f9:59:00:d7:7e:3a:fa:4e:18:6d:
                    24:18:33:52:21:25:b6:82:c0:04:1f:58:88:77:6f:
                    40:7c:67:9d:a7:2b:b4:e2:4f:85:8e:d7:68:1d:e0:
                    ae:67:11:66:48:45:14:7a:40:ed:32:8d:fd:89:e6:
                    1b:d0:be:19:6b:fe:85:df:dc:90:5d:5e:20:19:b1:
                    2e:41:19:92:ca:c4:17:b6:0d:db:ea:4d:e8:8c:61:
                    b9:95:25:02:3d:97:6f:1b:30:83:50:c3:c1:19:5a:
                    ed:70:d9:8f:fb:f4:3a:d7:72:bb:12:23:9c:73:7d:
                    d5:31:b2:dc:68:2f:25:b5:9d:9f:44:66:64:fb:ad:
                    23:9c:8b:65:f2:0f:83:31:f4:15:e7:6d:6a:7f:11:
                    be:e7:7c:65:69:36:58:79:ee:f6:7c:e2:f6:86:a2:
                    9c:4c:61:ac:7c:40:64:1b:8c:a3:08:c4:77:2e:26:
                    67:79:32:4c:76:87:28:0b:1e:f5:da:c2:9f:6d:fa:
                    52:be:cc:d0:b3:55:a6:fd:70:1e:d1:f7:89:24:c8:
                    80:2f:5f:dd:8e:30:61:48:0e:51:60:6f:22:53:d2:
                    20:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:DC:17:3D:64:42:A7:78:EB:A8:2B:B5:D8:89:4F:CF:1E:3B:C2:CB
            X509v3 Authority Key Identifier:
                keyid:4F:56:5A:58:12:72:86:24:EE:41:99:A0:24:4B:E5:40:7F:1A:AA:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/0/4F565A5812728624EE4199A0244BE5407F1AAAB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F565A5812728624EE4199A0244BE5407F1AAAB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/0/323830343a373337633a3a2f33322d3332203d3e20323730393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:737c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:f9:ef:b2:3d:21:9d:d6:59:29:c1:30:9c:aa:8e:0e:3c:17:
         04:66:7a:d1:de:83:e1:c2:9a:92:9d:e0:55:59:74:80:f1:df:
         a2:77:7f:d1:37:47:4f:1d:be:be:7f:59:c0:96:bf:3d:e5:23:
         f5:8e:f7:73:16:88:8c:b0:b7:33:39:73:db:3c:d1:aa:9c:88:
         3c:6f:17:15:8e:10:03:86:47:9d:e3:93:f5:2a:d1:33:7e:2b:
         9e:d0:a5:34:37:c0:ea:21:8a:56:23:ec:fc:22:18:06:8e:e9:
         a1:3c:96:f5:9e:fb:e2:13:58:22:8a:28:19:bb:2b:92:e6:52:
         97:ab:26:7b:5d:4c:88:b9:01:a8:06:a3:5c:cd:5d:dc:57:43:
         d3:01:c5:b2:89:8e:2a:8d:d1:94:3a:7f:54:fe:5c:c9:61:ac:
         4d:55:9a:9b:6f:d4:a7:44:07:a4:a3:94:8a:ce:84:49:9d:a8:
         22:04:ee:f0:04:be:04:31:fc:e2:cd:9b:6d:08:6c:f1:1a:dd:
         35:c0:a3:de:11:e6:3b:1d:8a:34:a4:81:6b:80:7b:4b:e6:cf:
         2b:01:d4:3d:bc:37:e8:1f:0d:f6:ae:50:1d:5d:cb:aa:af:47:
         60:be:ae:73:74:e0:9f:d1:99:4f:1b:ef:b6:87:24:80:5f:72:
         3f:36:8c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:26:11 2025 by rpki-client