Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/323830343a323739633a3a2f33322d313238203d3e20323633393133.roa
File:                     323830343a323739633a3a2f33322d313238203d3e20323633393133.roa (raw, json)
Hash identifier:          h4aehNvUFfPzja3E0Q/2lsnoy3PiQ4DAf9yex/zgaRc=
Subject key identifier:   F7:62:6E:BD:F6:E5:69:3E:13:6A:42:1F:60:F2:A2:EE:FE:70:62:47
Certificate issuer:       /CN=13B48D144CCB1B4DE47F34FF8FF3AEF82D87144B
Certificate serial:       43FB57D66973274AE587BDD58C82E7B807C8F704
Authority key identifier: 13:B4:8D:14:4C:CB:1B:4D:E4:7F:34:FF:8F:F3:AE:F8:2D:87:14:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13B48D144CCB1B4DE47F34FF8FF3AEF82D87144B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/323830343a323739633a3a2f33322d313238203d3e20323633393133.roa
Signing time:             Thu 09 Jan 2025 12:57:43 +0000
ROA not before:           Thu 09 Jan 2025 12:52:43 +0000
ROA not after:            Thu 08 Jan 2026 12:57:43 +0000
asID:                     263913
IP address blocks:        2804:279c::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:fb:57:d6:69:73:27:4a:e5:87:bd:d5:8c:82:e7:b8:07:c8:f7:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13B48D144CCB1B4DE47F34FF8FF3AEF82D87144B
        Validity
            Not Before: Jan  9 12:52:43 2025 GMT
            Not After : Jan  8 12:57:43 2026 GMT
        Subject: CN=F7626EBDF6E5693E136A421F60F2A2EEFE706247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8d:a2:68:b6:58:7f:87:5d:ce:f2:78:ea:89:
                    34:2b:49:05:92:88:46:bf:7d:3b:b3:d7:d2:2d:28:
                    d0:4b:72:1e:02:54:d7:fa:02:34:27:c4:1d:26:2c:
                    cc:b2:47:7e:94:9b:3d:f4:b4:85:8a:ef:8a:c2:1e:
                    1d:02:48:ca:67:0e:5e:d6:5e:8d:9c:e7:6b:2b:cf:
                    fe:53:a4:65:9a:a2:0f:24:a9:72:f5:33:a0:6b:b3:
                    ff:36:7a:ff:28:ee:38:e1:e1:02:a6:fe:5b:37:5c:
                    7b:57:c4:b7:c2:6c:91:4b:6c:45:61:e8:ca:35:83:
                    74:36:10:4b:88:9c:c2:b0:0a:28:a9:87:f3:10:90:
                    e2:79:f7:9d:4c:8b:f2:75:a9:40:63:99:8c:ee:7d:
                    79:68:c7:cf:55:36:66:25:3e:e0:b5:31:3d:2f:27:
                    d5:22:fc:db:d4:ac:c3:72:4c:03:78:72:96:0d:b6:
                    2b:7f:bd:c5:61:49:de:47:af:cd:31:8e:c1:be:91:
                    ee:56:20:de:39:bf:0f:55:a3:d5:ed:d9:66:02:74:
                    02:71:4c:61:27:f6:60:45:ed:5b:32:c5:e5:e9:32:
                    77:ee:4b:1d:7e:eb:b0:65:08:92:94:fb:ba:01:6b:
                    fe:67:97:e3:e0:f0:7b:90:f1:95:9b:b0:fe:14:50:
                    01:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:62:6E:BD:F6:E5:69:3E:13:6A:42:1F:60:F2:A2:EE:FE:70:62:47
            X509v3 Authority Key Identifier:
                keyid:13:B4:8D:14:4C:CB:1B:4D:E4:7F:34:FF:8F:F3:AE:F8:2D:87:14:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/13B48D144CCB1B4DE47F34FF8FF3AEF82D87144B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13B48D144CCB1B4DE47F34FF8FF3AEF82D87144B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/323830343a323739633a3a2f33322d313238203d3e20323633393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:279c::/32

    Signature Algorithm: sha256WithRSAEncryption
         bf:36:93:7a:a8:0e:64:1e:74:10:48:d5:e5:06:3f:47:6a:22:
         5a:16:24:7a:fc:9f:36:0b:fe:f4:6f:c8:47:66:03:a9:70:71:
         7d:46:73:ec:c0:dd:27:de:66:5d:41:4c:40:58:aa:54:eb:61:
         2c:3d:ea:2e:bb:e2:e9:cc:b0:b6:24:a6:66:ed:34:6c:04:c3:
         f5:d1:ab:33:57:62:46:bc:8a:a9:d4:88:06:c2:8a:18:2a:4b:
         14:b4:26:17:84:59:ad:5f:0e:7b:67:c0:1a:99:6e:c1:2a:9f:
         6e:aa:e8:3c:00:9a:58:15:bf:9a:79:23:0a:f5:ff:91:84:24:
         11:0f:73:76:63:60:bf:4d:ed:3f:61:46:78:b8:fc:74:d1:d7:
         1f:65:30:5a:86:87:32:47:bc:68:92:45:51:a5:48:e2:78:66:
         5b:f6:18:fb:f4:7e:5c:c1:77:09:ec:ee:af:f9:fd:de:a3:a6:
         d7:46:03:e8:bc:65:64:88:4c:31:19:1b:16:e1:99:e1:11:b5:
         af:89:a8:f3:ad:ae:ae:0c:00:16:9b:aa:f4:a0:cb:28:d1:f8:
         38:76:db:f4:3b:5a:54:b6:45:e2:e2:fe:a0:2a:c9:9f:72:80:
         38:f6:42:2d:f3:45:99:97:a5:6d:9f:2c:86:00:59:a7:e9:cd:
         41:cf:35:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:06:26 2025 by rpki-client