Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/1/323830343a313638343a3a2f33322d313238203d3e203533313639.roa
File:                     323830343a313638343a3a2f33322d313238203d3e203533313639.roa (raw, json)
Hash identifier:          gq2mst8Yd3drJgjGRWiPyS70IGVAlugG8LJQr+CR+LA=
Subject key identifier:   6A:04:67:6F:84:25:22:99:5F:B9:CE:39:44:C6:30:25:99:7B:AC:FF
Certificate issuer:       /CN=14DABC9061A328905E8120751E9528DFE978C501
Certificate serial:       4CB5787E843E54206EF054D84527FFF9063C4D05
Authority key identifier: 14:DA:BC:90:61:A3:28:90:5E:81:20:75:1E:95:28:DF:E9:78:C5:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14DABC9061A328905E8120751E9528DFE978C501.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/1/323830343a313638343a3a2f33322d313238203d3e203533313639.roa
Signing time:             Wed 05 Mar 2025 21:14:14 +0000
ROA not before:           Wed 05 Mar 2025 21:09:14 +0000
ROA not after:            Wed 04 Mar 2026 21:14:14 +0000
asID:                     53169
IP address blocks:        2804:1684::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:b5:78:7e:84:3e:54:20:6e:f0:54:d8:45:27:ff:f9:06:3c:4d:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14DABC9061A328905E8120751E9528DFE978C501
        Validity
            Not Before: Mar  5 21:09:14 2025 GMT
            Not After : Mar  4 21:14:14 2026 GMT
        Subject: CN=6A04676F842522995FB9CE3944C63025997BACFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:30:7d:c5:fa:88:28:b4:b3:31:fd:c4:d7:3b:
                    b2:59:1b:3f:4c:5b:4c:65:0a:03:50:b1:c6:49:d3:
                    8b:df:ee:2b:b6:bc:18:1a:69:68:5b:79:ff:0a:14:
                    65:5a:9d:82:1a:c0:3c:7a:16:a1:0e:80:e5:fb:ab:
                    b0:a6:1a:19:92:c0:b0:13:63:e8:7e:48:7f:be:76:
                    53:0c:44:30:7f:6d:d2:dd:c3:55:ac:4a:3d:9e:f9:
                    98:cf:19:9a:90:d9:b7:39:13:e4:0b:b3:86:42:61:
                    dd:40:d7:27:a8:d5:d2:e1:81:17:88:81:f7:89:5b:
                    04:55:36:d9:7b:c7:4b:08:83:2a:06:34:9e:7d:1e:
                    49:93:26:34:7d:03:6f:b1:36:06:e0:e1:87:04:c5:
                    52:ad:29:d5:6f:f8:1a:91:0b:55:4e:bb:c4:76:71:
                    29:31:bf:73:60:2f:c8:60:70:ca:df:20:91:5e:a0:
                    7d:91:9b:e5:48:5b:1b:dc:04:0b:86:15:cd:fe:63:
                    1d:69:32:85:2f:5e:24:9e:6e:f1:ca:79:a9:5f:f4:
                    7b:c1:8c:30:31:00:5f:d7:ed:51:77:63:53:75:1b:
                    d5:0e:e0:a1:3c:3e:a1:d8:05:8c:06:b1:89:15:49:
                    f9:ef:c2:ef:77:70:a8:a3:4e:dd:d6:54:6e:66:36:
                    b1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:04:67:6F:84:25:22:99:5F:B9:CE:39:44:C6:30:25:99:7B:AC:FF
            X509v3 Authority Key Identifier:
                keyid:14:DA:BC:90:61:A3:28:90:5E:81:20:75:1E:95:28:DF:E9:78:C5:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/1/14DABC9061A328905E8120751E9528DFE978C501.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14DABC9061A328905E8120751E9528DFE978C501.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/1/323830343a313638343a3a2f33322d313238203d3e203533313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1684::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:23:48:7c:3a:15:23:d8:93:d1:f8:45:e3:be:79:ec:39:f5:
         de:19:27:8f:5b:57:30:d3:72:72:cd:b5:6c:d4:ab:b2:a1:67:
         ae:d6:43:32:b5:f1:fd:fe:b9:ed:c1:92:cd:d0:cf:e8:ea:29:
         f4:dd:ef:cc:3e:53:ed:a5:7c:be:4a:5c:11:99:a8:db:f0:f1:
         81:8b:f6:8b:17:c7:bb:2a:0e:d3:d2:4d:17:8d:21:06:ca:a3:
         e4:34:30:55:c0:c9:45:73:8c:54:67:2b:40:09:21:15:37:96:
         56:a4:ad:2f:29:82:08:ab:38:f9:9e:5e:33:62:ee:c9:fc:40:
         a9:d5:b6:67:81:89:06:31:e7:d9:d1:6c:59:27:ab:27:bb:bc:
         47:ab:ee:f4:a8:bb:d0:2f:d6:e4:6e:08:8d:ad:5e:bc:b3:3f:
         af:b3:0c:0a:a0:d1:df:a5:bb:33:7b:8e:2e:0a:29:20:ed:e9:
         9d:35:f0:73:3f:04:a0:7c:ae:31:5b:51:b8:86:3d:0d:08:21:
         67:66:b9:c3:ae:eb:e7:7b:43:de:99:a4:fd:df:73:72:24:99:
         72:4b:e4:ce:e8:ba:90:57:66:0e:41:0b:fb:08:a4:26:af:5a:
         71:9a:a5:47:58:90:5b:2b:f1:d1:f5:8b:96:f7:cc:45:fa:f8:
         3f:2a:41:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:47:08 2025 by rpki-client