Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/323830343a343332383a3a2f33322d3438203d3e20323637353532.roa
File:                     323830343a343332383a3a2f33322d3438203d3e20323637353532.roa (raw, json)
Hash identifier:          i9dgkchDWpUjIuwxJIvdqk0oHi1uBPedLWXIZsPN7nc=
Subject key identifier:   B4:A8:58:7F:8A:31:03:72:CA:6E:E4:E4:15:F4:3C:AD:E3:3E:96:46
Certificate issuer:       /CN=69DD5B45F4C78A4D25F8A9A1F36172BDC268A058
Certificate serial:       2952C2060D7AEF17B0DB171A0B43F8747AC0E8AA
Authority key identifier: 69:DD:5B:45:F4:C7:8A:4D:25:F8:A9:A1:F3:61:72:BD:C2:68:A0:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69DD5B45F4C78A4D25F8A9A1F36172BDC268A058.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/323830343a343332383a3a2f33322d3438203d3e20323637353532.roa
Signing time:             Mon 14 Jul 2025 18:25:34 +0000
ROA not before:           Mon 14 Jul 2025 18:20:34 +0000
ROA not after:            Mon 13 Jul 2026 18:25:34 +0000
asID:                     267552
IP address blocks:        2804:4328::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:52:c2:06:0d:7a:ef:17:b0:db:17:1a:0b:43:f8:74:7a:c0:e8:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69DD5B45F4C78A4D25F8A9A1F36172BDC268A058
        Validity
            Not Before: Jul 14 18:20:34 2025 GMT
            Not After : Jul 13 18:25:34 2026 GMT
        Subject: CN=B4A8587F8A310372CA6EE4E415F43CADE33E9646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:84:43:2c:5f:84:ee:1e:fb:78:20:90:19:0f:
                    27:ea:e0:26:25:68:cf:b9:1a:34:40:38:7a:f1:e7:
                    d2:ff:55:81:c7:81:05:c3:e9:8e:52:bf:50:89:65:
                    84:f1:11:2c:cc:fb:45:79:51:c0:98:db:86:30:2c:
                    60:40:75:77:8a:90:06:77:27:ab:39:9f:78:4a:f9:
                    90:2c:1e:9e:61:b8:98:b4:d5:60:05:41:7c:10:8a:
                    9e:2d:d8:1a:b1:c0:50:dd:7a:2a:b7:85:ca:2b:02:
                    b8:d3:46:d4:eb:9f:56:3e:c6:73:1d:f1:97:e1:12:
                    f8:f7:44:f0:45:07:03:70:fd:c8:c6:e4:b3:68:17:
                    6b:b7:b3:62:08:2c:b9:d1:12:e8:2a:e9:be:68:3a:
                    ad:48:7c:ce:4d:b5:71:f5:82:53:46:21:dc:f3:72:
                    01:c8:69:f6:9d:2c:9e:f6:93:22:70:39:64:8f:a6:
                    0e:e9:3b:02:e3:9f:7d:96:ba:f6:44:15:47:d4:42:
                    55:e2:ff:b6:de:7a:bc:af:3d:24:ae:e2:33:a7:fa:
                    ea:48:bd:90:db:82:89:ac:07:6f:37:d3:17:1d:d1:
                    af:c8:66:a4:a5:ba:3a:a0:eb:12:b3:47:68:01:31:
                    77:fa:91:c1:47:3c:14:34:3e:4a:0a:95:dc:86:c0:
                    b6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A8:58:7F:8A:31:03:72:CA:6E:E4:E4:15:F4:3C:AD:E3:3E:96:46
            X509v3 Authority Key Identifier:
                keyid:69:DD:5B:45:F4:C7:8A:4D:25:F8:A9:A1:F3:61:72:BD:C2:68:A0:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/69DD5B45F4C78A4D25F8A9A1F36172BDC268A058.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69DD5B45F4C78A4D25F8A9A1F36172BDC268A058.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/323830343a343332383a3a2f33322d3438203d3e20323637353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4328::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:fc:32:39:f1:b9:8f:69:b2:94:0d:a4:30:b9:55:29:ad:f5:
         c3:3a:a7:81:51:48:49:b9:79:54:6c:e0:de:4f:2f:a5:2b:04:
         2b:ae:41:5b:14:17:fc:fb:d4:9d:b7:bf:af:5d:f9:ad:5c:65:
         a6:37:28:1a:a1:6b:2f:81:ca:4d:9b:eb:24:6a:1a:f6:69:06:
         66:73:99:06:21:ac:ea:b1:32:ad:df:1d:25:2b:93:f4:f6:5c:
         28:7d:c7:32:7d:3c:c6:ff:a7:0a:1b:9c:7a:b8:e0:08:7a:c2:
         6a:26:7a:dd:4d:17:35:4d:34:18:f4:13:6c:e3:3a:4b:1a:a9:
         60:69:46:2c:d3:be:c5:40:96:a8:51:ae:5c:55:30:f0:0e:59:
         d0:5e:55:0a:6a:8c:30:bd:3c:a8:a3:32:3d:7a:7c:d3:ae:8d:
         4a:52:1c:e8:6f:65:e4:0c:76:e4:b5:e2:20:0e:20:38:8b:a5:
         e3:ae:aa:75:c2:35:85:a2:08:74:58:41:c4:25:5f:a7:86:e9:
         f6:a7:96:bc:be:3c:7d:21:e7:44:c4:ae:86:12:9d:bc:b5:56:
         91:ba:b7:06:5d:57:fd:07:d9:ba:43:df:68:1b:96:ad:a0:13:
         e3:df:d2:6a:09:3d:3c:7f:7e:f5:15:8c:4e:7d:7e:c1:5d:ad:
         47:0c:a3:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 01:38:32 2025 by rpki-client