Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/323830343a346332303a3a2f33322d313238203d3e20323637333531.roa
File:                     323830343a346332303a3a2f33322d313238203d3e20323637333531.roa (raw, json)
Hash identifier:          AWQ7YkDE4uqyTndYWc0SsbNLFy8vkdFOxhrouBBKZHc=
Subject key identifier:   F1:74:9C:C6:11:D4:EF:58:0F:01:11:5F:CD:51:D2:AF:29:9A:72:F6
Certificate issuer:       /CN=F703FB4F49BC7EA394CC4955D3BBD7B5B40FAAF5
Certificate serial:       3032EFFB7D36FDBAF8ED08151122F6BDD5A6F1E6
Authority key identifier: F7:03:FB:4F:49:BC:7E:A3:94:CC:49:55:D3:BB:D7:B5:B4:0F:AA:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F703FB4F49BC7EA394CC4955D3BBD7B5B40FAAF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/323830343a346332303a3a2f33322d313238203d3e20323637333531.roa
Signing time:             Wed 12 Feb 2025 00:59:32 +0000
ROA not before:           Wed 12 Feb 2025 00:54:32 +0000
ROA not after:            Wed 11 Feb 2026 00:59:32 +0000
asID:                     267351
IP address blocks:        2804:4c20::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:32:ef:fb:7d:36:fd:ba:f8:ed:08:15:11:22:f6:bd:d5:a6:f1:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F703FB4F49BC7EA394CC4955D3BBD7B5B40FAAF5
        Validity
            Not Before: Feb 12 00:54:32 2025 GMT
            Not After : Feb 11 00:59:32 2026 GMT
        Subject: CN=F1749CC611D4EF580F01115FCD51D2AF299A72F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:23:31:e4:64:23:45:82:e8:9c:6c:d1:53:72:
                    19:19:4d:76:52:5a:9c:62:84:0b:6d:72:aa:3a:07:
                    3a:98:c3:c5:d1:78:ac:7f:4e:d5:33:b8:51:59:69:
                    97:c0:7a:78:12:2f:37:00:d1:99:73:9e:02:77:a1:
                    ac:3d:4a:f2:8e:03:b0:54:cc:32:fb:ae:b2:3b:6c:
                    ac:49:9c:f7:44:3f:fe:54:16:2b:90:34:e3:b3:a6:
                    5a:06:7f:99:3d:d9:b3:4a:9e:da:92:a8:2e:b9:17:
                    98:3a:09:56:4f:1a:b3:2b:a1:f0:05:a9:55:15:5d:
                    19:5d:8e:8b:70:da:80:be:76:08:40:58:85:bf:53:
                    82:38:54:9c:4b:3b:1b:5d:f2:e2:24:ae:79:6a:f2:
                    38:76:1a:7a:17:a4:54:08:fd:a8:5c:06:08:3e:69:
                    3d:69:11:7e:85:2c:43:4e:3c:da:c0:32:21:a1:90:
                    26:01:5a:17:eb:6b:2a:0d:51:a8:74:e4:07:61:be:
                    c2:f4:e3:78:67:d2:cd:19:5f:3d:96:3e:a5:a9:a2:
                    28:ec:8c:f2:25:a9:d1:ac:8c:00:44:34:22:df:91:
                    a4:ee:93:27:a3:e1:aa:7e:fb:54:03:c6:bf:d9:0e:
                    ef:b7:2d:f0:db:8d:8c:72:5d:74:26:d4:63:33:64:
                    f4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:74:9C:C6:11:D4:EF:58:0F:01:11:5F:CD:51:D2:AF:29:9A:72:F6
            X509v3 Authority Key Identifier:
                keyid:F7:03:FB:4F:49:BC:7E:A3:94:CC:49:55:D3:BB:D7:B5:B4:0F:AA:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/F703FB4F49BC7EA394CC4955D3BBD7B5B40FAAF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F703FB4F49BC7EA394CC4955D3BBD7B5B40FAAF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/323830343a346332303a3a2f33322d313238203d3e20323637333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:c5:f9:cd:96:64:18:eb:8b:4a:d4:50:ee:65:51:d3:42:9a:
         79:64:bb:46:ab:99:6d:a8:5f:9a:32:e0:fd:54:41:f6:6a:88:
         8b:ea:4b:56:08:9a:ea:04:72:7d:c8:2b:fd:91:d8:4e:78:51:
         4b:ea:3d:f6:a3:4c:08:0d:62:56:43:32:80:68:99:77:92:f4:
         8d:b1:18:e6:39:62:f7:12:f9:be:00:4b:93:0f:dd:68:99:bb:
         9d:49:c3:f3:a9:34:d6:af:6e:b5:b2:c5:17:22:5e:6f:43:26:
         16:d2:e7:18:dd:69:b5:7a:26:b2:d7:e6:27:92:97:dd:58:d3:
         19:f3:1e:e3:2b:c3:4a:5c:4b:e1:e6:b5:ca:22:ab:96:f8:8c:
         b0:14:48:66:65:4b:0e:96:28:75:d9:d0:8a:03:58:76:71:c9:
         3b:e7:f7:7c:ef:2d:f1:c6:56:03:16:5a:d0:a4:8b:53:3f:71:
         e7:de:28:d6:93:03:77:41:6f:a6:75:08:3b:2b:63:9a:b0:ef:
         5c:29:d8:34:96:79:24:7d:2b:8c:cc:26:f4:0b:f7:c6:1c:26:
         dc:ee:fa:f1:7c:ed:70:67:12:35:74:7e:9e:78:f5:1a:ec:fb:
         77:f1:55:b3:e4:b5:dc:80:5b:d0:e9:c3:da:2f:f6:01:0b:2a:
         a5:eb:92:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:29:08 2025 by rpki-client