Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fm49kGxNCMffxFq7Kxo87HAhnuVoQfWLXiSUPcVYz7LA/1/323830343a326534383a3a2f33322d3438203d3e20323635333336.roa
File:                     323830343a326534383a3a2f33322d3438203d3e20323635333336.roa (raw, json)
Hash identifier:          piOHhu3nzEeU9qbgifvHwFpirQuCffeSHQa0qzecP1E=
Subject key identifier:   3B:4A:8E:CE:F4:98:77:5D:1C:BC:BD:8C:45:18:48:CB:85:43:4F:0E
Certificate issuer:       /CN=BE92508DBF6757ABDFF51EA95A61411D3261EEF3
Certificate serial:       687B325A0F0579AE55899015D53E7025384F7AF7
Authority key identifier: BE:92:50:8D:BF:67:57:AB:DF:F5:1E:A9:5A:61:41:1D:32:61:EE:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE92508DBF6757ABDFF51EA95A61411D3261EEF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fm49kGxNCMffxFq7Kxo87HAhnuVoQfWLXiSUPcVYz7LA/1/323830343a326534383a3a2f33322d3438203d3e20323635333336.roa
Signing time:             Thu 06 Mar 2025 11:40:30 +0000
ROA not before:           Thu 06 Mar 2025 11:35:30 +0000
ROA not after:            Thu 05 Mar 2026 11:40:30 +0000
asID:                     265336
IP address blocks:        2804:2e48::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:7b:32:5a:0f:05:79:ae:55:89:90:15:d5:3e:70:25:38:4f:7a:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE92508DBF6757ABDFF51EA95A61411D3261EEF3
        Validity
            Not Before: Mar  6 11:35:30 2025 GMT
            Not After : Mar  5 11:40:30 2026 GMT
        Subject: CN=3B4A8ECEF498775D1CBCBD8C451848CB85434F0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f9:5f:72:93:d2:7f:99:bf:36:42:20:bd:10:
                    23:ab:18:af:f9:a9:f4:88:3b:ef:e5:7e:17:94:38:
                    b2:59:01:51:6c:d2:53:ae:ba:a6:59:41:da:19:93:
                    b8:0d:18:a2:f0:0c:33:bb:66:b2:fa:dc:89:90:74:
                    81:ba:d2:fe:f2:0b:dc:ec:4b:36:fb:d0:75:bc:8f:
                    59:53:b7:68:db:44:d9:ca:19:c8:92:0d:57:eb:9d:
                    15:ae:ea:e9:1b:a5:82:50:7e:0b:8b:9c:aa:28:4f:
                    38:57:43:e5:75:f9:8a:37:76:8d:d3:ca:a8:11:85:
                    d8:05:71:89:7f:b9:5c:fd:9a:40:3f:11:78:ce:b4:
                    14:8f:c9:6c:71:fd:e8:a5:63:db:ac:4a:a0:8a:9d:
                    62:2a:8a:3c:3e:e2:69:b4:70:71:ce:1e:c8:08:e9:
                    8e:a5:0b:bb:61:34:33:f7:40:fe:e5:e7:c4:52:43:
                    6f:d5:c0:9a:07:bb:6c:35:a6:4d:51:c4:99:7d:b0:
                    dc:dc:96:fe:80:8e:32:a8:42:46:2a:69:47:4c:94:
                    cf:1a:1a:f4:89:cd:d9:09:a4:5c:e3:ea:c9:7a:20:
                    0c:5d:dd:0c:6e:2f:7b:d8:af:9b:b4:bf:45:81:d0:
                    5b:b0:c1:7a:87:30:5b:b9:3f:08:58:46:a1:24:1b:
                    60:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:4A:8E:CE:F4:98:77:5D:1C:BC:BD:8C:45:18:48:CB:85:43:4F:0E
            X509v3 Authority Key Identifier:
                keyid:BE:92:50:8D:BF:67:57:AB:DF:F5:1E:A9:5A:61:41:1D:32:61:EE:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fm49kGxNCMffxFq7Kxo87HAhnuVoQfWLXiSUPcVYz7LA/1/BE92508DBF6757ABDFF51EA95A61411D3261EEF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE92508DBF6757ABDFF51EA95A61411D3261EEF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fm49kGxNCMffxFq7Kxo87HAhnuVoQfWLXiSUPcVYz7LA/1/323830343a326534383a3a2f33322d3438203d3e20323635333336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e48::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:80:89:f1:a0:f1:28:87:f8:29:34:4b:fd:95:4a:e1:a8:06:
         76:74:46:d5:c7:cb:c6:b0:4a:06:7a:43:5e:c3:22:79:83:0c:
         3e:3e:d7:c8:64:49:41:bd:56:e7:5b:47:7d:6d:ad:fa:81:c1:
         7d:c5:59:78:01:1e:9d:73:f2:06:a1:ce:07:85:14:a1:ca:7f:
         d7:c7:b6:8d:5e:1b:af:22:13:75:44:3c:73:3f:6e:3b:b8:e5:
         db:44:27:13:e9:67:f3:39:af:be:c3:0a:63:ec:e2:12:9b:4f:
         ac:64:db:18:3f:ca:c8:44:e0:9f:1f:3d:60:0c:26:96:0c:c3:
         f5:93:5c:d9:42:39:21:f7:a9:a9:77:5b:e3:2e:5d:3d:c4:8d:
         21:8e:f2:8d:e0:82:16:c3:6a:8f:e1:c4:35:ed:43:26:6e:37:
         8d:0c:b6:53:2e:a8:e2:32:90:91:94:7f:31:18:19:e6:92:67:
         74:f7:28:85:3a:7d:bc:f9:d6:d7:87:f7:8b:e1:b7:0d:00:d0:
         af:48:23:56:86:0d:97:d3:4e:05:e2:f7:50:19:2e:58:20:a3:
         3b:a2:78:3a:f9:ff:ba:03:df:10:b6:f1:fe:82:0b:30:dc:d9:
         e4:8a:c8:e8:d5:b8:98:f2:1b:63:28:1b:ee:15:0f:36:1c:48:
         cb:8e:ac:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:20:35 2025 by rpki-client