Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/2/323830343a383762633a646330343a3a2f34382d3438203d3e203631363039.roa
File:                     323830343a383762633a646330343a3a2f34382d3438203d3e203631363039.roa (raw, json)
Hash identifier:          W4Y5CF2ch/1yaJXrE3D1OR8aOv/n9OM/AkzueyPswOI=
Subject key identifier:   E4:4E:83:BD:61:C2:B6:CA:D4:E4:0F:52:BB:62:5F:B8:B5:49:ED:AD
Certificate issuer:       /CN=B3766E21D786D36B5EDF132F06FAC1FA6C934B63
Certificate serial:       70773913BE57F13F4891566F2AD6DFFE3BC32355
Authority key identifier: B3:76:6E:21:D7:86:D3:6B:5E:DF:13:2F:06:FA:C1:FA:6C:93:4B:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3766E21D786D36B5EDF132F06FAC1FA6C934B63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/2/323830343a383762633a646330343a3a2f34382d3438203d3e203631363039.roa
Signing time:             Mon 17 Mar 2025 12:31:17 +0000
ROA not before:           Mon 17 Mar 2025 12:26:17 +0000
ROA not after:            Mon 16 Mar 2026 12:31:17 +0000
asID:                     61609
IP address blocks:        2804:87bc:dc04::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:77:39:13:be:57:f1:3f:48:91:56:6f:2a:d6:df:fe:3b:c3:23:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3766E21D786D36B5EDF132F06FAC1FA6C934B63
        Validity
            Not Before: Mar 17 12:26:17 2025 GMT
            Not After : Mar 16 12:31:17 2026 GMT
        Subject: CN=E44E83BD61C2B6CAD4E40F52BB625FB8B549EDAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c8:90:ee:21:34:d9:b8:11:06:be:78:33:b3:
                    e5:ab:1f:0f:ad:cf:39:9f:6b:99:b7:bb:f9:7e:1f:
                    ac:6d:94:05:d4:40:7d:8e:fa:e8:a9:83:90:e0:81:
                    a4:2d:9a:7a:33:13:30:20:4d:01:b5:23:03:71:e8:
                    19:d0:56:bb:50:7e:c0:5f:f8:30:2a:89:45:f9:70:
                    9c:a9:60:f5:0f:c2:53:5f:cc:bb:b0:28:f0:86:94:
                    ac:07:48:69:8e:2b:c1:c1:d7:c3:2e:8e:ae:c7:9b:
                    b8:66:eb:cb:cb:96:1a:2f:7c:2e:de:be:ef:8c:15:
                    dd:02:b7:9a:ef:fd:26:80:ec:f9:21:70:8e:35:07:
                    11:70:f1:d8:54:bd:03:42:ec:77:96:dc:01:2c:93:
                    50:37:cd:a0:8c:5c:33:ce:1b:67:bf:8a:74:72:dc:
                    d6:67:78:c9:0e:15:26:b5:b1:eb:72:7b:4c:09:be:
                    d2:75:f0:1e:45:8d:ad:7f:20:82:b6:34:f5:94:3c:
                    b8:0d:26:9d:0a:fb:16:00:4e:09:d1:71:cd:31:38:
                    ae:af:5b:8a:34:9d:dd:bc:f0:e6:34:8f:0c:fa:dc:
                    56:cd:e7:f7:55:82:ee:e5:be:7a:29:1f:6b:79:f6:
                    42:7b:07:9d:74:ef:6a:50:7a:c4:ad:ce:21:ba:f2:
                    9e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:4E:83:BD:61:C2:B6:CA:D4:E4:0F:52:BB:62:5F:B8:B5:49:ED:AD
            X509v3 Authority Key Identifier:
                keyid:B3:76:6E:21:D7:86:D3:6B:5E:DF:13:2F:06:FA:C1:FA:6C:93:4B:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/2/B3766E21D786D36B5EDF132F06FAC1FA6C934B63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3766E21D786D36B5EDF132F06FAC1FA6C934B63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/2/323830343a383762633a646330343a3a2f34382d3438203d3e203631363039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:87bc:dc04::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:22:e3:5f:ca:22:5c:65:a7:9f:7f:d0:6f:39:92:85:29:98:
         b8:e1:99:9f:3f:20:7d:49:8f:bc:cf:4b:ac:b8:0f:de:30:ac:
         57:7c:bb:1e:a2:c1:4b:c0:ab:25:29:4c:9f:4b:74:b4:58:92:
         35:c5:46:eb:7a:56:25:73:26:48:42:5b:67:54:fb:1a:01:ef:
         29:bf:cf:9f:a6:a6:a2:86:d9:f9:63:56:a1:fd:30:46:ff:fa:
         a8:95:17:91:13:f3:b3:d4:59:07:b3:2b:37:92:90:9d:cb:41:
         93:cb:08:bb:4c:45:d4:06:eb:0a:ff:fe:c4:40:5f:1e:09:a0:
         4f:f5:4f:82:c3:ce:90:a2:f6:6c:40:6c:eb:ef:bb:9a:6a:0a:
         82:5c:51:dc:1f:a4:2c:43:97:fa:d7:0d:1a:a3:4f:8b:7b:a5:
         0f:13:25:8a:a2:28:c2:c5:77:11:4c:c4:c3:be:1c:69:f9:1a:
         a9:6f:35:79:38:0e:7c:b0:fc:49:1b:fc:06:c9:4d:b8:13:95:
         54:81:5c:03:3f:99:b4:08:15:8c:f5:4f:bf:05:c9:d5:84:27:
         a3:fd:9f:e5:15:8a:17:46:4e:0c:10:6d:18:2a:57:ea:83:0a:
         b0:a0:1e:0f:9c:9c:71:8b:dd:82:a1:7d:5a:d4:03:c9:38:1c:
         e8:2a:c7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:22:58 2025 by rpki-client