Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/323830343a386532633a3a2f33322d3332203d3e20323733343038.roa
File:                     323830343a386532633a3a2f33322d3332203d3e20323733343038.roa (raw, json)
Hash identifier:          TjL3QIhlmwMUKANzVUvY5FMIsc8Y38WpOg1RmfVYWm0=
Subject key identifier:   4D:93:26:28:0A:EF:1F:10:EB:E7:17:D3:A2:0C:A4:89:00:39:EE:3E
Certificate issuer:       /CN=1033FD7652BC4E5027EFF9C0EA4634A97B32A7CA
Certificate serial:       15AB6BD0064B2A48E52EB47EFB3CB92F76F1B19E
Authority key identifier: 10:33:FD:76:52:BC:4E:50:27:EF:F9:C0:EA:46:34:A9:7B:32:A7:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1033FD7652BC4E5027EFF9C0EA4634A97B32A7CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/323830343a386532633a3a2f33322d3332203d3e20323733343038.roa
Signing time:             Fri 27 Dec 2024 19:21:16 +0000
ROA not before:           Fri 27 Dec 2024 19:16:16 +0000
ROA not after:            Fri 26 Dec 2025 19:21:16 +0000
asID:                     273408
IP address blocks:        2804:8e2c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ab:6b:d0:06:4b:2a:48:e5:2e:b4:7e:fb:3c:b9:2f:76:f1:b1:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1033FD7652BC4E5027EFF9C0EA4634A97B32A7CA
        Validity
            Not Before: Dec 27 19:16:16 2024 GMT
            Not After : Dec 26 19:21:16 2025 GMT
        Subject: CN=4D9326280AEF1F10EBE717D3A20CA4890039EE3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2c:28:82:f3:0d:9c:00:e4:4d:dd:77:7e:be:
                    07:6f:03:59:c9:e0:d1:4b:30:a0:e3:e6:d7:46:17:
                    e7:ea:44:d4:85:a3:3b:0d:64:89:ed:17:99:3b:a3:
                    97:f9:01:9e:d6:06:41:83:dc:60:07:44:fc:8a:75:
                    21:7a:3e:27:30:4d:6c:ad:c0:35:a5:0a:20:e4:d6:
                    38:b0:45:aa:50:1f:9f:91:6c:d7:1f:91:c2:79:a8:
                    5f:e1:37:87:d3:60:b6:28:1e:0f:80:54:dc:f6:37:
                    e1:d6:c7:a9:d5:b2:15:f7:9c:56:f5:54:47:c3:1d:
                    61:f4:d0:db:f6:e1:bf:70:bb:67:be:7d:8f:24:b3:
                    e2:98:70:dd:dc:82:20:90:07:62:c6:2d:31:d0:ca:
                    19:ab:22:1b:58:2c:36:27:65:8d:cc:6c:f8:6a:a8:
                    34:58:c5:3a:c3:74:f4:38:45:4d:7f:b1:f9:5c:f0:
                    59:ab:9f:91:4b:10:f4:fa:ac:cc:58:36:0b:42:9c:
                    24:27:b1:90:27:8c:d6:2e:3e:a9:70:8a:54:88:ca:
                    f5:9f:15:03:ec:05:4b:2c:44:b2:f2:39:cf:3a:e3:
                    67:52:eb:b4:dc:bd:58:ab:cd:1d:fa:b9:f8:c7:3b:
                    f0:a0:7a:6b:cc:2c:e0:f4:3d:c4:4d:77:a1:88:71:
                    9c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:93:26:28:0A:EF:1F:10:EB:E7:17:D3:A2:0C:A4:89:00:39:EE:3E
            X509v3 Authority Key Identifier:
                keyid:10:33:FD:76:52:BC:4E:50:27:EF:F9:C0:EA:46:34:A9:7B:32:A7:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/1033FD7652BC4E5027EFF9C0EA4634A97B32A7CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1033FD7652BC4E5027EFF9C0EA4634A97B32A7CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/323830343a386532633a3a2f33322d3332203d3e20323733343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8e2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:ae:16:d6:4b:27:ea:b8:89:d1:4e:5e:42:a7:5e:ab:4c:e5:
         3e:67:1b:60:74:fb:51:7c:44:02:17:0f:d1:13:69:71:df:ca:
         e1:91:78:0b:7a:7c:a3:56:d9:70:b9:74:6d:43:97:13:a0:d4:
         1f:c0:7b:7c:81:c0:11:83:1c:a0:e3:02:2b:9b:b7:85:7d:79:
         f4:1b:b3:bd:e5:70:e7:96:64:dd:1f:ff:0b:87:fb:49:99:cc:
         e1:ae:e1:e1:a6:79:e8:0a:af:66:5c:4e:bb:38:f3:f6:01:d3:
         4f:d1:4c:90:c2:f2:bf:3f:d2:50:9e:22:08:68:66:f4:ec:e7:
         be:9f:98:4f:e8:55:75:bd:7e:8b:3a:ca:7d:82:57:34:08:95:
         b0:b0:2a:f7:90:70:76:6a:dd:6a:c3:3b:8f:41:8f:d9:78:96:
         a2:72:49:78:7b:bc:f8:a5:eb:0f:f8:55:c1:95:c1:00:cd:c7:
         2e:2a:b7:3c:8f:17:83:dd:67:cd:f3:de:7a:95:33:24:c7:e9:
         29:51:96:82:50:47:a8:9c:b5:c2:e8:c2:08:2d:54:dd:de:86:
         cf:98:28:dd:c0:c2:a9:37:db:c6:41:1a:33:de:32:cc:b5:98:
         1c:fb:81:7b:b8:87:ab:2a:80:12:ff:7c:51:12:b0:db:6e:c4:
         99:56:3d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:36:53 2025 by rpki-client