Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/323830343a3831343a3a2f33322d3438203d3e20323632373737.roa
File:                     323830343a3831343a3a2f33322d3438203d3e20323632373737.roa (raw, json)
Hash identifier:          AAHWOQ6XYnJopSAXeEiYIuu8bIhBB0kSAgwqq578meg=
Subject key identifier:   7F:42:E0:0D:01:C9:06:82:A6:DB:36:18:A8:5D:7F:71:94:B0:70:8E
Certificate issuer:       /CN=46347A4C2AE403C996A9371EF62F1CE19E33F606
Certificate serial:       1300D8A608F194AB30A8947E8004643BF8E5D0FE
Authority key identifier: 46:34:7A:4C:2A:E4:03:C9:96:A9:37:1E:F6:2F:1C:E1:9E:33:F6:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46347A4C2AE403C996A9371EF62F1CE19E33F606.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/323830343a3831343a3a2f33322d3438203d3e20323632373737.roa
Signing time:             Thu 12 Dec 2024 15:11:35 +0000
ROA not before:           Thu 12 Dec 2024 15:06:35 +0000
ROA not after:            Thu 11 Dec 2025 15:11:35 +0000
asID:                     262777
IP address blocks:        2804:814::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:00:d8:a6:08:f1:94:ab:30:a8:94:7e:80:04:64:3b:f8:e5:d0:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46347A4C2AE403C996A9371EF62F1CE19E33F606
        Validity
            Not Before: Dec 12 15:06:35 2024 GMT
            Not After : Dec 11 15:11:35 2025 GMT
        Subject: CN=7F42E00D01C90682A6DB3618A85D7F7194B0708E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c0:78:80:dc:c4:5b:9b:94:dd:87:4e:36:9d:
                    2f:e0:f8:4a:61:f1:65:b6:24:71:8a:28:50:2e:77:
                    e9:8e:d5:ca:6a:a3:d6:00:84:b9:af:ca:26:dd:6d:
                    80:4b:9a:d5:22:f0:aa:7f:9c:10:4d:23:a1:24:44:
                    84:5b:22:99:9b:da:2d:d6:df:85:a8:41:00:05:86:
                    f2:a2:7c:a7:3c:92:8f:16:89:5d:9a:e2:ac:6b:03:
                    36:9d:0c:6d:c2:12:5e:9c:ab:1e:24:73:70:e1:de:
                    67:b3:19:a7:40:d7:0d:65:af:6a:85:32:15:9e:44:
                    dc:76:44:98:fa:2f:c1:37:8e:9b:c1:4c:8a:11:41:
                    df:35:44:63:5b:eb:6f:0c:e3:4a:86:c3:fb:8a:39:
                    bc:7e:ad:84:38:e7:1e:be:d2:38:d7:fb:53:8d:3b:
                    bb:bb:c7:6b:9a:31:cf:99:34:b0:53:56:f7:6c:0d:
                    55:f7:64:2b:e9:15:b6:31:21:49:6c:19:d1:f5:53:
                    bd:fe:ae:22:eb:b9:63:d4:6f:61:d1:f9:46:40:5a:
                    8b:f5:c8:33:62:a5:c2:05:e2:65:3f:6e:c1:0c:6d:
                    a8:b0:01:e1:f8:20:18:19:1e:80:b8:a3:c9:b0:79:
                    01:11:29:ea:70:7c:d4:7e:33:75:b6:83:7c:ae:39:
                    c1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:42:E0:0D:01:C9:06:82:A6:DB:36:18:A8:5D:7F:71:94:B0:70:8E
            X509v3 Authority Key Identifier:
                keyid:46:34:7A:4C:2A:E4:03:C9:96:A9:37:1E:F6:2F:1C:E1:9E:33:F6:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/46347A4C2AE403C996A9371EF62F1CE19E33F606.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46347A4C2AE403C996A9371EF62F1CE19E33F606.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/323830343a3831343a3a2f33322d3438203d3e20323632373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:814::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:89:22:f5:ad:83:ff:8e:e8:b9:6a:c1:e8:46:1f:f8:76:8e:
         50:4d:7d:41:9c:87:17:87:bd:86:54:95:f4:57:73:f1:bc:18:
         90:2b:7a:e7:2e:36:c5:68:cd:89:81:a0:1c:2a:75:4b:cd:9e:
         fc:96:cc:99:a4:40:48:ac:19:0d:cf:ca:38:05:0e:b3:0d:d9:
         08:40:25:56:14:93:bd:f1:51:8d:04:0e:29:81:a6:8c:d7:6e:
         6d:2f:5b:1f:70:8f:28:1b:92:b1:f0:de:63:55:f8:4e:de:94:
         47:7e:51:85:53:1b:d5:cf:42:ae:19:35:b9:fe:b9:0a:44:d8:
         ff:45:12:62:af:8c:ed:e9:00:b4:09:4e:17:1b:2e:9e:19:77:
         a6:bb:ac:7c:99:ab:ea:49:b9:2a:89:b1:36:71:cb:7c:89:e7:
         4f:b8:5d:5c:44:d4:9c:74:4b:2f:19:02:a1:08:a5:1c:af:22:
         56:ba:ad:bf:b7:4a:e2:44:bd:9a:22:ce:80:11:55:0f:ab:9f:
         68:32:40:74:03:8c:03:33:16:b9:d2:04:56:21:91:3e:dc:2e:
         6e:cf:3b:94:81:28:f5:70:0c:ad:60:94:44:0d:60:5c:3f:12:
         27:a2:89:db:61:a0:4f:7b:bd:81:58:d4:33:f6:04:b4:1e:3e:
         88:a1:b3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:14:53 2025 by rpki-client