Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/323830343a363437383a3a2f33322d3336203d3e203533313233.roa
File:                     323830343a363437383a3a2f33322d3336203d3e203533313233.roa (raw, json)
Hash identifier:          lYMRaPNiObXCiUGYuwf8SaMWnc0q8c/sQCvZ3CUuow8=
Subject key identifier:   FD:DC:36:C3:22:2F:ED:3F:CE:98:0B:34:86:82:11:9F:FB:0D:E9:97
Certificate issuer:       /CN=930921834A46BE8FE060F8D1ADB5C24EF2001ED3
Certificate serial:       73CB5A628F966B2CD37B1E823ABD0912E25908B7
Authority key identifier: 93:09:21:83:4A:46:BE:8F:E0:60:F8:D1:AD:B5:C2:4E:F2:00:1E:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/930921834A46BE8FE060F8D1ADB5C24EF2001ED3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/323830343a363437383a3a2f33322d3336203d3e203533313233.roa
Signing time:             Wed 22 Jan 2025 14:58:34 +0000
ROA not before:           Wed 22 Jan 2025 14:53:34 +0000
ROA not after:            Wed 21 Jan 2026 14:58:34 +0000
asID:                     53123
IP address blocks:        2804:6478::/32 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:cb:5a:62:8f:96:6b:2c:d3:7b:1e:82:3a:bd:09:12:e2:59:08:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=930921834A46BE8FE060F8D1ADB5C24EF2001ED3
        Validity
            Not Before: Jan 22 14:53:34 2025 GMT
            Not After : Jan 21 14:58:34 2026 GMT
        Subject: CN=FDDC36C3222FED3FCE980B348682119FFB0DE997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d1:58:59:af:b5:26:5a:fb:87:1c:d7:b0:0b:
                    4d:f5:79:55:27:de:d1:ab:26:ca:2f:30:21:c9:12:
                    cd:f2:ba:1c:79:42:e0:43:ec:13:44:6f:71:46:25:
                    b4:21:86:98:5e:bb:73:c6:8e:e2:20:9e:c0:48:fa:
                    91:3e:36:de:00:7d:57:15:57:1b:d7:c4:82:b7:e5:
                    d6:10:b8:10:e5:29:5f:03:c6:21:57:ad:17:79:4b:
                    6a:15:6b:73:b1:51:87:48:33:51:1f:95:f6:8e:d6:
                    4f:ab:75:11:59:67:4c:3f:67:e8:f2:3f:f1:f5:1d:
                    72:20:77:16:9d:58:c0:c3:34:bf:db:be:bf:73:f9:
                    6d:3f:83:d1:43:f9:89:a3:11:09:45:cd:8b:a6:cd:
                    0c:e7:42:86:64:06:38:03:29:0f:cc:36:a0:ff:64:
                    5b:db:61:62:44:4f:a0:42:dc:9a:52:81:92:4e:6f:
                    d6:17:ed:18:ec:ff:e4:07:7a:1c:a7:a8:cc:82:38:
                    0b:f4:eb:2c:db:d6:1f:ee:42:99:60:73:8d:3a:54:
                    9d:0e:8b:0b:d6:3f:ed:5a:57:7b:2f:19:4a:7c:a3:
                    83:50:d1:47:70:b7:e3:43:e7:52:d1:e3:7c:23:13:
                    8f:93:9e:0b:6c:c8:f6:96:89:3a:83:3f:be:72:4b:
                    bf:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:DC:36:C3:22:2F:ED:3F:CE:98:0B:34:86:82:11:9F:FB:0D:E9:97
            X509v3 Authority Key Identifier:
                keyid:93:09:21:83:4A:46:BE:8F:E0:60:F8:D1:AD:B5:C2:4E:F2:00:1E:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/930921834A46BE8FE060F8D1ADB5C24EF2001ED3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/930921834A46BE8FE060F8D1ADB5C24EF2001ED3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/323830343a363437383a3a2f33322d3336203d3e203533313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6478::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:a5:dd:92:71:4e:ce:8a:3d:14:54:e4:d6:c0:e6:82:ef:88:
         a8:de:64:39:48:c7:f8:9f:41:c2:9d:90:46:5f:18:39:90:d4:
         5d:ce:20:15:67:f7:80:4a:df:66:40:e7:15:f7:bf:ec:ef:5d:
         c6:5d:0d:57:28:e5:af:a4:81:3a:63:1b:a7:b2:b3:b4:64:09:
         be:02:38:20:f8:7d:1c:b3:82:5b:11:0d:0a:59:8e:54:3e:72:
         f1:60:a9:f6:f3:3d:3c:1a:c7:9d:52:04:98:29:18:a0:7c:bc:
         35:0b:52:6b:35:7f:0b:44:10:26:cb:a1:b1:8b:14:b2:92:e1:
         a4:66:84:d3:03:d1:04:cb:0c:ab:a4:25:1c:ff:2a:dd:c3:f9:
         a9:df:a3:b0:d9:c8:8c:cf:4c:29:5c:41:6e:5f:51:23:4f:7e:
         66:c7:53:f9:a6:0a:67:06:4a:38:6e:0b:b7:96:7d:ed:82:fe:
         37:74:a9:df:0e:98:b9:06:28:79:d4:60:ea:83:e0:80:09:64:
         37:59:99:25:48:75:69:cf:36:6c:f4:38:a9:51:3f:3a:4b:07:
         84:2c:4d:50:ef:40:48:66:40:99:58:41:0a:6b:6d:42:0a:a5:
         d6:db:a2:d1:23:dd:61:f5:42:c1:b9:c6:50:cb:84:35:ff:11:
         b7:e0:28:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:59:29 2025 by rpki-client