Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/323830343a336437633a3a2f33322d3438203d3e20323636353334.roa
File:                     323830343a336437633a3a2f33322d3438203d3e20323636353334.roa (raw, json)
Hash identifier:          pEdY0WORsMoto3D0l6iQyl4uwPycDlwz4UUbyVDxv74=
Subject key identifier:   0E:8B:3B:5D:8D:D5:94:79:BB:D6:0A:3F:6D:3C:32:56:22:24:27:35
Certificate issuer:       /CN=ACEF8FA1F536657A209246B168B346C65044943D
Certificate serial:       547C9937A58BEFAFD10564FD2D2F236EFCF09875
Authority key identifier: AC:EF:8F:A1:F5:36:65:7A:20:92:46:B1:68:B3:46:C6:50:44:94:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACEF8FA1F536657A209246B168B346C65044943D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/323830343a336437633a3a2f33322d3438203d3e20323636353334.roa
Signing time:             Thu 19 Dec 2024 17:27:03 +0000
ROA not before:           Thu 19 Dec 2024 17:22:03 +0000
ROA not after:            Thu 18 Dec 2025 17:27:03 +0000
asID:                     266534
IP address blocks:        2804:3d7c::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:7c:99:37:a5:8b:ef:af:d1:05:64:fd:2d:2f:23:6e:fc:f0:98:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACEF8FA1F536657A209246B168B346C65044943D
        Validity
            Not Before: Dec 19 17:22:03 2024 GMT
            Not After : Dec 18 17:27:03 2025 GMT
        Subject: CN=0E8B3B5D8DD59479BBD60A3F6D3C325622242735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:31:c1:02:53:32:41:c1:d1:5a:1c:29:49:80:
                    f8:c2:fa:f6:79:e1:06:d0:c3:21:e3:4b:b6:4b:49:
                    9b:46:67:9c:69:93:7f:0c:55:9b:65:3b:fe:71:21:
                    58:f5:22:76:b1:9f:95:ed:35:11:f3:de:d2:a3:47:
                    c7:2b:89:95:eb:36:07:78:1f:37:91:10:cc:ce:fb:
                    38:33:3b:3e:19:30:7b:52:11:d9:62:3c:16:c3:93:
                    ea:5c:a9:00:cc:18:09:f2:5d:6d:58:03:c7:fc:c9:
                    43:03:1f:7c:4e:e2:b7:cc:2a:3f:f5:11:d1:11:c0:
                    af:b0:cd:40:8a:b9:c8:51:1f:0f:c6:2c:4b:c7:35:
                    c6:03:f2:7b:f5:2e:91:9d:f9:01:73:a3:85:b3:f2:
                    41:3a:ea:f2:ac:f0:7e:45:d2:fc:ad:2e:e3:00:65:
                    63:4b:5d:d7:1d:9c:c1:8a:f0:03:1c:0e:76:ba:32:
                    b0:40:6a:e7:c7:bc:cc:6a:0c:f7:ed:81:86:6c:f9:
                    be:59:6c:f7:a1:db:0d:9b:53:4c:2a:68:55:32:30:
                    40:f4:c9:a1:94:f8:f1:4f:f9:a8:6c:e8:32:bd:ef:
                    9e:35:91:b6:be:6f:5f:60:61:11:83:2a:05:69:8d:
                    dc:f8:60:85:a5:08:a5:42:d0:53:5c:d2:fa:63:9f:
                    93:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:8B:3B:5D:8D:D5:94:79:BB:D6:0A:3F:6D:3C:32:56:22:24:27:35
            X509v3 Authority Key Identifier:
                keyid:AC:EF:8F:A1:F5:36:65:7A:20:92:46:B1:68:B3:46:C6:50:44:94:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/ACEF8FA1F536657A209246B168B346C65044943D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACEF8FA1F536657A209246B168B346C65044943D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/323830343a336437633a3a2f33322d3438203d3e20323636353334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:6b:23:38:6e:f7:f2:fb:22:2f:31:90:26:a7:4a:d9:50:6e:
         cc:a1:2f:3c:1b:59:ec:26:6a:58:75:96:90:df:ac:1c:0c:a4:
         a1:ee:59:e3:75:41:1c:ce:23:4f:31:3e:c7:c1:1a:b6:61:02:
         f5:82:86:e0:e7:67:24:7e:ba:f9:21:de:fd:c0:c9:09:59:c0:
         6f:99:3d:8b:0f:30:b3:8c:ea:cc:3d:4d:3f:09:28:25:2b:d5:
         16:72:7e:8f:6f:1e:95:6a:b6:a6:69:ec:8b:d2:cc:89:68:55:
         46:84:be:4f:36:ec:cc:8f:a2:1c:3b:63:de:bd:e1:3a:4c:08:
         ca:93:8a:3e:25:7a:68:92:6b:dc:ec:44:da:12:1c:b9:e9:a6:
         97:bd:82:16:88:4f:b1:8f:30:4a:47:e0:e9:e9:79:e9:97:6b:
         98:77:66:d8:87:22:22:21:89:c9:66:ff:54:41:8e:17:c5:b7:
         1c:0f:b5:29:ec:b4:bf:d2:a8:a5:c1:af:94:77:e3:4b:be:bf:
         67:74:e8:54:11:c1:c9:4e:1b:5d:6b:b2:a8:6f:87:40:4f:e3:
         95:4b:e9:73:82:f2:a2:9d:21:21:ac:f9:47:49:df:c8:e5:22:
         c3:39:19:e5:09:2d:50:21:e0:e3:0d:8d:17:c0:a7:a0:c1:6d:
         32:82:6c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:30:48 2025 by rpki-client