Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/323830343a326233303a3a2f33332d3333203d3e20323632373431.roa
File:                     323830343a326233303a3a2f33332d3333203d3e20323632373431.roa (raw, json)
Hash identifier:          ljQEzl3RNbtYSR1QPfbhe97HErHLBZwD2/YC6VkXDVk=
Subject key identifier:   69:DD:C4:F9:09:93:85:CB:D2:C5:4F:D4:A5:D4:DC:E3:8A:5F:A3:E6
Certificate issuer:       /CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Certificate serial:       78F7DCE6ACAC9DB6599FA3EAF9610E57242C5167
Authority key identifier: 04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/323830343a326233303a3a2f33332d3333203d3e20323632373431.roa
Signing time:             Tue 09 Jan 2024 21:00:06 +0000
ROA not before:           Tue 09 Jan 2024 20:55:06 +0000
ROA not after:            Tue 07 Jan 2025 21:00:06 +0000
asID:                     262741
IP address blocks:        2804:2b30::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f7:dc:e6:ac:ac:9d:b6:59:9f:a3:ea:f9:61:0e:57:24:2c:51:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
        Validity
            Not Before: Jan  9 20:55:06 2024 GMT
            Not After : Jan  7 21:00:06 2025 GMT
        Subject: CN=69DDC4F9099385CBD2C54FD4A5D4DCE38A5FA3E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:15:57:37:d5:73:7b:16:9c:e3:cf:21:b6:e1:
                    1d:db:2c:94:91:0c:e5:55:d9:d8:3f:39:44:3c:e6:
                    54:72:74:5f:18:b5:0a:77:84:ba:93:af:99:ea:a2:
                    76:27:96:ee:d5:b8:84:ec:a3:8a:2f:b9:8f:c1:0e:
                    ba:5e:0c:c7:5d:da:f1:41:6a:29:87:8d:c4:be:f5:
                    03:eb:bf:a8:4c:5d:7c:8a:d0:a7:57:fe:58:8b:8e:
                    70:c2:5c:41:a7:e8:6f:95:95:54:15:fb:b3:92:2b:
                    d6:24:49:58:a8:a6:94:e4:51:7e:de:77:18:97:82:
                    fd:cd:1f:b4:2b:b4:ca:8e:f8:6c:0f:82:c9:68:49:
                    7a:9c:69:4c:c4:db:db:d1:c7:06:28:7b:53:38:aa:
                    10:81:fe:ff:84:4e:f5:e4:ef:89:5b:47:61:94:af:
                    97:3f:38:c6:04:79:9e:57:05:0d:cf:d3:ec:db:a8:
                    f0:3e:e6:2d:f6:dc:b1:c3:75:27:13:75:6b:5b:4d:
                    7b:8a:5d:ff:9e:cb:fb:e6:a6:bd:4b:33:e6:b0:c5:
                    4c:5c:85:71:dc:9b:4d:17:76:7d:95:d0:bb:14:32:
                    58:fc:e9:cd:2b:e2:e3:10:a8:3f:a0:87:11:93:ae:
                    c3:8f:1f:cc:df:72:5c:18:69:40:9c:78:55:58:34:
                    fa:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:DD:C4:F9:09:93:85:CB:D2:C5:4F:D4:A5:D4:DC:E3:8A:5F:A3:E6
            X509v3 Authority Key Identifier:
                keyid:04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/323830343a326233303a3a2f33332d3333203d3e20323632373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b30::/33

    Signature Algorithm: sha256WithRSAEncryption
         89:f4:42:13:5e:69:ac:ad:27:a1:ea:ac:2d:9b:3f:5a:66:a6:
         ce:21:2a:87:ec:39:97:74:44:d0:21:2a:91:11:19:22:2d:df:
         b9:51:50:80:3d:d4:0d:e8:80:52:25:63:75:76:d9:e3:a0:ce:
         38:6d:a8:51:0f:ce:35:32:9b:cb:f8:08:2a:75:60:88:3a:9e:
         66:42:b8:77:89:a1:e3:e9:12:cc:30:9d:ee:b4:43:3c:54:d5:
         74:87:46:e7:b7:38:b8:ff:12:4c:d0:41:38:22:2f:55:1c:b4:
         f9:e1:be:ae:77:48:df:7b:01:4f:ce:b0:02:93:f5:88:4d:ae:
         61:aa:a0:44:1d:c8:8f:36:ac:1f:a4:8b:f9:e9:e6:3b:23:4b:
         a8:94:8b:40:a2:e9:e9:e7:0c:26:89:01:0a:49:10:87:4b:f2:
         85:01:a7:f9:0c:dd:10:54:f2:a7:23:0f:07:3d:8c:c7:31:96:
         04:93:e7:ce:d2:d9:cc:d1:c2:e3:b4:ff:3a:f8:3e:9b:3f:dd:
         14:01:86:4d:81:14:b4:bf:0b:76:f7:56:62:62:fb:ee:b0:65:
         67:e6:3a:0d:6a:23:5a:91:76:9d:9e:e4:e4:fd:b7:22:fc:6a:
         91:86:55:7c:ac:6c:00:22:3f:ee:c4:4d:87:0c:4e:62:aa:63:
         a2:be:ca:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:39 2025 by rpki-client