Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/323830343a313934383a3a2f33322d313238203d3e203631373834.roa
File:                     323830343a313934383a3a2f33322d313238203d3e203631373834.roa (raw, json)
Hash identifier:          c4qHtAaRVCfHGye+AmZjvOdvXcBA17zzyqsMVQdybL8=
Subject key identifier:   23:B5:CD:F0:D5:69:0A:41:1F:59:A0:29:DC:9F:73:DE:03:3E:47:32
Certificate issuer:       /CN=8DADF2625ADA58A1BBED95A105F350C79962F7DF
Certificate serial:       4B0D65DB056411AC5B3CE7B7B580FCB4E8FC9D58
Authority key identifier: 8D:AD:F2:62:5A:DA:58:A1:BB:ED:95:A1:05:F3:50:C7:99:62:F7:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DADF2625ADA58A1BBED95A105F350C79962F7DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/323830343a313934383a3a2f33322d313238203d3e203631373834.roa
Signing time:             Sun 16 Mar 2025 23:08:19 +0000
ROA not before:           Sun 16 Mar 2025 23:03:19 +0000
ROA not after:            Sun 15 Mar 2026 23:08:19 +0000
asID:                     61784
IP address blocks:        2804:1948::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:0d:65:db:05:64:11:ac:5b:3c:e7:b7:b5:80:fc:b4:e8:fc:9d:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DADF2625ADA58A1BBED95A105F350C79962F7DF
        Validity
            Not Before: Mar 16 23:03:19 2025 GMT
            Not After : Mar 15 23:08:19 2026 GMT
        Subject: CN=23B5CDF0D5690A411F59A029DC9F73DE033E4732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4e:21:74:6e:0e:ee:9c:60:9d:17:f2:21:5d:
                    ff:b1:c4:85:c8:e1:c7:28:5d:67:6b:34:e3:9b:7c:
                    92:01:f4:ff:f5:f4:95:05:ca:bd:41:55:b9:73:f7:
                    ab:48:01:df:5f:de:34:f1:ff:cc:04:fd:07:94:33:
                    11:8d:10:f5:b3:da:ec:46:c8:d1:d8:64:4f:e2:d0:
                    b5:de:2d:34:b2:11:28:68:2b:f5:9f:dd:05:21:03:
                    21:97:e3:b2:57:3a:58:58:c3:33:1d:40:70:de:06:
                    5f:7c:98:f7:3a:76:d0:9a:03:01:a0:94:de:38:f0:
                    66:3b:3f:2d:41:7a:75:84:9b:4c:a1:a9:02:5a:9e:
                    67:fd:a4:01:c5:59:be:a9:ae:6d:2a:04:c8:cd:31:
                    6c:c8:e0:3a:49:b3:75:f6:a4:85:6d:b7:03:4d:54:
                    76:47:6d:b1:b2:71:c9:70:f8:1d:b5:0d:5c:14:d7:
                    f8:bc:da:f3:99:ea:fd:12:b6:29:ba:be:93:03:a3:
                    47:4c:c6:57:84:a6:e9:b1:76:41:c1:a8:22:96:a7:
                    a1:de:46:37:12:3b:5d:21:dd:4c:e5:b1:89:30:0d:
                    b4:ce:6c:31:28:e6:2c:ec:b3:16:ed:45:9a:80:91:
                    8b:2a:97:c6:05:6b:6a:de:83:32:91:a0:44:5e:fa:
                    11:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B5:CD:F0:D5:69:0A:41:1F:59:A0:29:DC:9F:73:DE:03:3E:47:32
            X509v3 Authority Key Identifier:
                keyid:8D:AD:F2:62:5A:DA:58:A1:BB:ED:95:A1:05:F3:50:C7:99:62:F7:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/8DADF2625ADA58A1BBED95A105F350C79962F7DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DADF2625ADA58A1BBED95A105F350C79962F7DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/323830343a313934383a3a2f33322d313238203d3e203631373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1948::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:00:81:32:a0:b3:21:5b:cf:99:ae:c5:0a:2c:6f:e3:15:f1:
         15:eb:6e:c0:34:fb:63:4e:1d:bd:1b:1f:ae:1c:7b:57:1f:dd:
         a8:4a:0b:88:62:bd:7c:1a:6a:39:af:d0:42:d0:71:89:8c:5e:
         b1:b8:e5:b2:46:53:6f:ae:20:bf:87:80:ee:63:68:9b:1d:3f:
         26:84:ca:4d:2e:fd:33:64:8e:16:47:17:a9:2f:a9:23:5b:24:
         41:da:27:b6:cc:23:5e:65:16:71:ac:19:88:e4:b2:16:99:f4:
         bb:da:b0:a5:75:2d:d7:35:8f:6c:43:2c:26:ae:46:1f:3a:3c:
         29:03:3d:cc:d8:b1:86:da:92:22:aa:bd:57:68:ef:c5:5b:f3:
         6b:11:c2:ec:86:c8:c8:a7:db:ed:ad:01:b7:ba:b0:6b:e5:ee:
         e0:35:9e:48:86:d2:11:ad:c2:2d:ca:0b:61:66:cc:f2:af:3c:
         51:ff:ad:92:87:f6:b8:c7:10:06:e5:3d:cb:e1:16:33:d0:21:
         d6:3b:25:e3:02:f7:fa:fd:44:94:ed:8d:da:52:1d:11:d6:29:
         5e:d0:29:60:6b:b0:f2:80:aa:cd:99:b1:b5:ab:0f:b0:d1:8e:
         ef:8d:16:60:0b:f9:04:3e:18:8a:3e:39:43:94:3b:de:1d:28:
         f0:72:d6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:36:40 2025 by rpki-client