Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfARKZfAYVhFh5NZeR5KM19Xn86EEkYneH4LzJoPP2o9/0/323830343a376635343a3a2f33322d313238203d3e20323731363831.roa
File:                     323830343a376635343a3a2f33322d313238203d3e20323731363831.roa (raw, json)
Hash identifier:          nWL/7V7TPgjpMki9358a25C2ZKBYDlQd6dO82Mq/vVQ=
Subject key identifier:   67:60:2B:C5:B9:94:5D:7D:AF:C7:C6:F7:39:C8:FA:1C:3C:7A:2C:81
Certificate issuer:       /CN=4CAD72F1E7054DCB5DB77A0B245F7AAD63A83E84
Certificate serial:       65F3936F728C4221C7C1242ED12F83332E478A7E
Authority key identifier: 4C:AD:72:F1:E7:05:4D:CB:5D:B7:7A:0B:24:5F:7A:AD:63:A8:3E:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CAD72F1E7054DCB5DB77A0B245F7AAD63A83E84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfARKZfAYVhFh5NZeR5KM19Xn86EEkYneH4LzJoPP2o9/0/323830343a376635343a3a2f33322d313238203d3e20323731363831.roa
Signing time:             Thu 16 Jan 2025 18:56:34 +0000
ROA not before:           Thu 16 Jan 2025 18:51:34 +0000
ROA not after:            Thu 15 Jan 2026 18:56:34 +0000
asID:                     271681
IP address blocks:        2804:7f54::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:f3:93:6f:72:8c:42:21:c7:c1:24:2e:d1:2f:83:33:2e:47:8a:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CAD72F1E7054DCB5DB77A0B245F7AAD63A83E84
        Validity
            Not Before: Jan 16 18:51:34 2025 GMT
            Not After : Jan 15 18:56:34 2026 GMT
        Subject: CN=67602BC5B9945D7DAFC7C6F739C8FA1C3C7A2C81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f6:cd:9e:0a:11:75:19:2b:91:70:3f:9b:d2:
                    45:b7:9e:dd:ff:5a:75:bb:66:be:c6:4f:91:68:d1:
                    3e:6e:dd:79:59:a8:b1:31:4c:29:41:d3:2a:23:3e:
                    e8:00:41:05:41:26:0c:84:d1:79:cc:5c:65:cc:36:
                    8f:df:81:f9:1a:1e:b9:da:8c:02:8e:04:57:0d:bb:
                    e6:7b:59:be:cd:58:49:dc:d7:09:be:57:87:b7:f9:
                    a7:c6:8d:ac:ce:20:10:f5:1c:90:0d:e1:86:14:0f:
                    be:b7:f0:ae:2d:51:ff:64:29:44:34:10:41:42:10:
                    cb:8f:aa:48:0c:5e:e8:c2:d9:3d:4a:5f:73:57:0f:
                    8e:6c:23:79:2d:7c:b3:38:2b:f4:43:0e:e0:82:58:
                    8d:53:02:14:93:e7:db:73:f0:a3:fb:d5:77:a9:f9:
                    f9:a7:0f:55:63:7d:b1:d9:31:f4:bf:b6:8f:d0:e2:
                    6e:24:57:d0:8c:12:8b:5c:fc:04:21:bc:80:fb:59:
                    3d:1e:7b:a3:46:7e:58:2b:eb:e1:5d:8d:c4:9d:e3:
                    0f:d8:a6:08:8e:49:b3:dd:ad:1d:8c:22:b7:a8:8c:
                    af:26:29:5c:f9:1e:a9:3b:dd:3f:0c:6b:14:13:50:
                    4c:09:2a:ba:51:5a:51:a5:50:2a:02:68:7c:f9:7e:
                    39:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:60:2B:C5:B9:94:5D:7D:AF:C7:C6:F7:39:C8:FA:1C:3C:7A:2C:81
            X509v3 Authority Key Identifier:
                keyid:4C:AD:72:F1:E7:05:4D:CB:5D:B7:7A:0B:24:5F:7A:AD:63:A8:3E:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfARKZfAYVhFh5NZeR5KM19Xn86EEkYneH4LzJoPP2o9/0/4CAD72F1E7054DCB5DB77A0B245F7AAD63A83E84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CAD72F1E7054DCB5DB77A0B245F7AAD63A83E84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfARKZfAYVhFh5NZeR5KM19Xn86EEkYneH4LzJoPP2o9/0/323830343a376635343a3a2f33322d313238203d3e20323731363831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7f54::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:e9:ab:9e:cb:e8:0c:3c:bc:ed:25:11:a5:e1:46:02:63:ca:
         a0:20:3a:74:f6:96:0d:6f:1e:62:cc:7e:f4:33:bf:9b:5f:14:
         4b:f8:4b:75:30:f0:8e:79:87:1b:83:4e:dd:ff:a1:2b:63:96:
         02:b0:51:9b:6a:3e:65:f1:1e:d0:b8:0a:87:8c:8b:ce:98:a1:
         aa:2b:a7:aa:94:9a:00:f8:9b:cc:ed:a0:6f:d1:6a:c5:c0:b1:
         03:bf:86:00:cf:dd:6b:82:b3:84:1b:de:ac:8e:2e:fe:89:80:
         98:f0:42:02:b4:6b:1a:13:c5:3e:22:29:1e:0f:97:ec:b7:8c:
         16:3a:b9:29:e5:86:a3:5e:39:ee:a3:b6:3d:e0:3d:43:91:84:
         40:a5:54:38:1f:54:34:b6:77:f0:ed:4a:d2:03:fc:fb:1a:6f:
         89:df:a1:26:16:89:e1:20:33:ec:0e:48:9a:62:c5:08:24:0a:
         de:3f:fb:c3:7a:86:8f:4e:16:99:fc:4e:c9:db:46:1f:90:08:
         52:29:0c:3b:a5:8a:11:57:52:2b:ab:25:9e:1a:0b:78:f6:12:
         cc:d5:38:64:1b:b4:02:b3:92:46:fd:84:bb:f3:f0:82:90:aa:
         12:78:51:2b:2a:17:3d:7d:f9:03:37:a3:80:a9:a1:d3:e4:50:
         c1:ad:3b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:33:03 2025 by rpki-client