Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/323830343a343032633a3a2f33322d3332203d3e20323635393432.roa
File:                     323830343a343032633a3a2f33322d3332203d3e20323635393432.roa (raw, json)
Hash identifier:          pbBKSA9i6HMgz5Nd/fcO90eB0Jc3QjvnIpYzdR99phQ=
Subject key identifier:   B8:D9:74:42:75:AF:8E:85:57:F2:68:33:02:76:48:83:1A:32:6C:A4
Certificate issuer:       /CN=CF4F3244B4C4478154236189E948BC8868D07EF9
Certificate serial:       247330AC042B0E63DBE34712B2B371BADBCF9084
Authority key identifier: CF:4F:32:44:B4:C4:47:81:54:23:61:89:E9:48:BC:88:68:D0:7E:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF4F3244B4C4478154236189E948BC8868D07EF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/323830343a343032633a3a2f33322d3332203d3e20323635393432.roa
Signing time:             Thu 20 Mar 2025 16:56:21 +0000
ROA not before:           Thu 20 Mar 2025 16:51:21 +0000
ROA not after:            Thu 19 Mar 2026 16:56:21 +0000
asID:                     265942
IP address blocks:        2804:402c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:73:30:ac:04:2b:0e:63:db:e3:47:12:b2:b3:71:ba:db:cf:90:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF4F3244B4C4478154236189E948BC8868D07EF9
        Validity
            Not Before: Mar 20 16:51:21 2025 GMT
            Not After : Mar 19 16:56:21 2026 GMT
        Subject: CN=B8D9744275AF8E8557F26833027648831A326CA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e3:22:8e:87:33:2e:15:6d:15:0e:ba:4d:7d:
                    d7:f0:2c:e3:ef:04:37:fb:b3:0c:81:dc:78:c1:c0:
                    35:ac:cc:35:da:90:94:94:3c:5e:ea:53:d5:b2:58:
                    c7:f9:a1:05:87:cc:55:20:6f:73:94:9b:49:21:66:
                    b4:07:e8:98:e2:fc:dc:55:de:f6:7b:ce:54:4e:14:
                    97:7d:c1:87:5e:04:94:7c:f5:a1:b2:31:3b:da:5e:
                    c3:ab:7c:06:06:f4:b7:1a:e5:7c:ab:ac:33:fb:f0:
                    8d:37:fe:85:f9:15:96:4a:bf:f4:b5:17:63:70:03:
                    41:86:80:7e:4c:fc:7b:c5:2c:0c:eb:ab:17:de:dc:
                    20:61:2e:77:0a:24:e1:33:64:85:58:8a:fc:cc:d5:
                    cd:15:5d:f3:74:b1:b6:da:52:1a:f6:74:3a:2a:87:
                    99:4c:fb:4c:ab:43:0c:4b:c7:83:e2:9f:08:f8:ca:
                    97:35:ba:12:ee:15:13:54:d5:3c:7e:35:fb:d3:02:
                    88:75:93:f4:01:e2:57:0b:70:d5:8b:3d:b1:ab:91:
                    c4:b2:59:82:4a:6f:bc:b1:17:a7:52:f5:c0:45:20:
                    2a:fb:6b:f6:63:62:2e:e6:ab:c7:50:47:53:ed:67:
                    e7:22:2a:6d:1d:44:66:ae:8a:16:7e:a6:44:2b:23:
                    f3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D9:74:42:75:AF:8E:85:57:F2:68:33:02:76:48:83:1A:32:6C:A4
            X509v3 Authority Key Identifier:
                keyid:CF:4F:32:44:B4:C4:47:81:54:23:61:89:E9:48:BC:88:68:D0:7E:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/CF4F3244B4C4478154236189E948BC8868D07EF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF4F3244B4C4478154236189E948BC8868D07EF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/323830343a343032633a3a2f33322d3332203d3e20323635393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:402c::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:6f:ab:15:a6:46:47:96:e1:56:5f:27:d1:30:cf:c4:95:59:
         7a:5c:f3:eb:10:1f:4b:15:a3:c2:b2:61:ce:a2:ba:fc:22:d8:
         27:11:21:31:ba:21:e2:29:20:d6:d8:45:b6:b4:e6:a4:62:68:
         cb:ee:9f:37:3a:af:23:2f:58:64:d2:93:f6:30:b7:ec:e4:3e:
         91:09:88:1d:bd:8c:fb:6b:6b:3a:6f:0d:b3:87:30:38:0f:50:
         f2:71:15:65:34:6b:a1:ae:d4:06:47:75:74:89:51:69:8c:07:
         39:0f:7a:04:c3:77:bd:36:4b:2e:6e:98:68:80:30:bb:12:13:
         20:4f:36:e6:cf:68:97:66:6d:14:5d:00:9b:7e:1e:36:4d:e4:
         28:36:58:92:22:86:fc:30:ab:c4:03:29:38:2b:ea:cf:b4:39:
         54:74:16:15:f7:46:71:91:6d:42:6a:d8:02:1d:29:ea:eb:b1:
         ba:91:18:60:5c:d6:16:de:57:87:02:21:d1:f5:63:31:e0:ac:
         95:8a:a3:12:9f:30:71:78:4b:8c:5d:c1:f9:ba:b4:36:f9:6f:
         6e:86:dc:27:74:e7:6a:8c:a1:88:16:99:0d:f9:18:2a:25:74:
         48:7b:fe:6f:66:03:f0:85:5c:5d:b4:bb:60:e9:c9:48:5c:99:
         e6:56:d9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:16:00 2025 by rpki-client