Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CUuGHcVvX8Q4Kvkdji7XGwfV2JcNrpFvo31h7VY83dPn/0/323830343a336138383a3a2f33322d3438203d3e20323636303934.roa
File:                     323830343a336138383a3a2f33322d3438203d3e20323636303934.roa (raw, json)
Hash identifier:          4qyarmN0CQ02TYoAmk9DzgIuCEWq/yO7gx3Y7Z4iql8=
Subject key identifier:   E1:69:6C:56:89:64:DC:FD:91:64:DF:C8:AD:5B:18:0E:BC:34:20:6D
Certificate issuer:       /CN=44193E585B74C4D75B7FE4725353647532369A29
Certificate serial:       572C349501101C985128AF0399CF13E77AABFA4A
Authority key identifier: 44:19:3E:58:5B:74:C4:D7:5B:7F:E4:72:53:53:64:75:32:36:9A:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44193E585B74C4D75B7FE4725353647532369A29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CUuGHcVvX8Q4Kvkdji7XGwfV2JcNrpFvo31h7VY83dPn/0/323830343a336138383a3a2f33322d3438203d3e20323636303934.roa
Signing time:             Thu 27 Mar 2025 14:28:34 +0000
ROA not before:           Thu 27 Mar 2025 14:23:34 +0000
ROA not after:            Thu 26 Mar 2026 14:28:34 +0000
asID:                     266094
IP address blocks:        2804:3a88::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:2c:34:95:01:10:1c:98:51:28:af:03:99:cf:13:e7:7a:ab:fa:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44193E585B74C4D75B7FE4725353647532369A29
        Validity
            Not Before: Mar 27 14:23:34 2025 GMT
            Not After : Mar 26 14:28:34 2026 GMT
        Subject: CN=E1696C568964DCFD9164DFC8AD5B180EBC34206D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:14:05:d5:62:cf:45:90:12:e5:e3:68:8f:22:
                    2e:3b:8d:4a:40:27:bf:3c:b8:26:ef:67:57:21:b4:
                    31:56:37:07:f8:84:fe:40:f0:ce:c0:78:f4:b4:b8:
                    8e:18:4b:a7:f8:92:8e:1e:54:a1:1f:36:cd:20:b4:
                    3c:3c:ad:3a:eb:51:1a:45:30:48:ec:a5:cf:de:31:
                    7b:c1:74:fe:52:20:f8:0a:5b:0a:72:30:14:4c:82:
                    e9:79:ec:8e:6b:bb:aa:f6:08:40:04:e8:fb:98:1c:
                    f5:2f:45:20:ab:27:24:69:f1:57:70:9f:46:62:e1:
                    e7:80:81:f5:06:35:7c:89:97:53:17:de:82:c3:c4:
                    c3:e8:d6:4d:40:d2:90:f8:60:15:e0:73:e4:56:82:
                    f3:57:79:97:39:db:26:a2:ae:1e:32:74:88:d3:29:
                    08:60:60:db:96:67:3f:19:ca:57:62:b2:57:b7:ec:
                    1b:7e:fa:85:7a:01:ab:96:5c:5f:d2:55:cf:ca:8a:
                    7e:33:26:85:57:73:2d:aa:00:a6:85:dc:3e:ef:fe:
                    8d:de:50:5f:56:f8:7d:0a:af:01:01:4b:77:57:9b:
                    7d:bb:05:d3:64:6e:ea:36:5e:56:ec:ce:2a:b0:b2:
                    e6:2e:a0:7f:c0:14:33:64:0b:8f:f7:71:31:36:db:
                    db:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:69:6C:56:89:64:DC:FD:91:64:DF:C8:AD:5B:18:0E:BC:34:20:6D
            X509v3 Authority Key Identifier:
                keyid:44:19:3E:58:5B:74:C4:D7:5B:7F:E4:72:53:53:64:75:32:36:9A:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CUuGHcVvX8Q4Kvkdji7XGwfV2JcNrpFvo31h7VY83dPn/0/44193E585B74C4D75B7FE4725353647532369A29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44193E585B74C4D75B7FE4725353647532369A29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CUuGHcVvX8Q4Kvkdji7XGwfV2JcNrpFvo31h7VY83dPn/0/323830343a336138383a3a2f33322d3438203d3e20323636303934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a88::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:e6:5b:c5:d2:42:e9:5d:12:69:80:ec:2f:1d:93:12:b6:b7:
         29:13:6a:fe:69:a2:c7:73:e9:d8:1d:f1:cb:d2:88:c0:db:28:
         9d:22:8f:12:8d:fb:29:90:30:53:70:14:0c:88:5e:ce:fa:76:
         1c:9b:1d:78:1d:9c:86:7a:a1:58:e8:4c:a5:e4:0c:5c:1e:dc:
         da:70:59:e7:88:d9:30:05:4c:a7:7a:e9:52:72:af:4b:cd:e1:
         a3:06:fc:1b:46:6e:e5:2f:07:8e:17:37:67:cf:7b:8f:5a:a1:
         c9:bd:0f:5f:10:c2:8e:71:cf:0a:f3:3a:ef:e1:a7:e1:87:8c:
         9a:91:1b:8d:70:b7:e9:5b:06:91:4a:b7:ee:66:e4:64:12:d1:
         06:02:b3:b0:ee:56:c4:79:f3:78:3a:5c:51:f0:e0:a4:bc:8b:
         96:54:5a:e3:50:43:49:bf:c9:53:a4:0a:11:2a:5f:76:ad:be:
         41:06:e0:28:45:7b:c2:55:3a:3e:9a:af:47:68:34:9e:95:65:
         b9:3e:6e:84:30:88:13:4c:56:e0:79:5c:1a:13:04:df:30:1b:
         5b:a6:03:4e:6c:19:c9:d2:26:16:0f:f6:3c:0f:ac:3e:f5:59:
         f6:93:56:72:b7:d2:62:cd:51:02:e5:e4:78:00:1c:d5:f9:3c:
         bc:5d:65:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:40:13 2025 by rpki-client