Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/323830343a356239633a663a3a2f34382d3438203d3e20323638383538.roa
File:                     323830343a356239633a663a3a2f34382d3438203d3e20323638383538.roa (raw, json)
Hash identifier:          Y4E1pLVW2o51wNY3mGGRwLn7KQ0cDabOvj9W0vF+i6M=
Subject key identifier:   84:61:79:66:6A:14:08:46:5C:6E:36:B8:9D:A0:70:9C:5D:F9:55:E7
Certificate issuer:       /CN=C514D08EB668AD6D569B52F363DFFB0D6D5BB212
Certificate serial:       3AE4D77E18DAED6A6C9063189DB5CD968A95A465
Authority key identifier: C5:14:D0:8E:B6:68:AD:6D:56:9B:52:F3:63:DF:FB:0D:6D:5B:B2:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C514D08EB668AD6D569B52F363DFFB0D6D5BB212.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/323830343a356239633a663a3a2f34382d3438203d3e20323638383538.roa
Signing time:             Tue 05 Mar 2024 20:10:28 +0000
ROA not before:           Tue 05 Mar 2024 20:05:28 +0000
ROA not after:            Tue 04 Mar 2025 20:10:28 +0000
asID:                     268858
IP address blocks:        2804:5b9c:f::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:e4:d7:7e:18:da:ed:6a:6c:90:63:18:9d:b5:cd:96:8a:95:a4:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C514D08EB668AD6D569B52F363DFFB0D6D5BB212
        Validity
            Not Before: Mar  5 20:05:28 2024 GMT
            Not After : Mar  4 20:10:28 2025 GMT
        Subject: CN=846179666A1408465C6E36B89DA0709C5DF955E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:63:78:36:23:cc:7a:75:af:56:81:3d:92:ee:
                    67:ba:8a:cc:9a:8f:6d:50:9a:82:24:56:61:bd:7a:
                    59:f8:37:85:a2:b2:49:2f:f6:e4:ad:e2:94:ac:87:
                    8d:7b:47:d0:c2:4f:eb:e9:b3:de:d9:3d:ff:ce:73:
                    85:c2:51:28:a6:b1:03:45:0c:92:44:d3:2d:99:46:
                    e3:41:72:9f:e2:b3:e8:5d:9d:a2:88:3e:37:4f:0c:
                    74:dc:28:55:58:92:65:00:1b:a6:95:54:02:a8:12:
                    59:38:76:ac:cf:88:29:9a:cd:81:53:ea:04:fc:12:
                    54:63:19:33:d0:a2:cd:ad:0c:08:38:e0:e7:3e:1a:
                    93:e4:d8:62:69:91:a7:6b:2e:69:7b:8c:e7:99:2c:
                    67:52:4d:9d:37:2c:b4:74:24:b9:d3:95:54:7c:bb:
                    e4:59:94:4f:a5:c9:50:be:74:98:93:dc:08:e2:c1:
                    fb:b1:05:93:1b:ab:d8:fd:45:af:34:7d:af:ad:b1:
                    97:90:f2:fb:29:57:63:05:51:6d:64:3c:71:2a:90:
                    2f:e9:ee:b4:7d:1c:27:33:da:fc:a5:1e:5b:db:32:
                    32:79:33:78:93:ba:cf:4b:8e:c1:c4:d1:e4:6d:e6:
                    6b:5e:67:f1:b7:42:8c:68:e6:8f:c3:c4:0d:01:14:
                    34:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:61:79:66:6A:14:08:46:5C:6E:36:B8:9D:A0:70:9C:5D:F9:55:E7
            X509v3 Authority Key Identifier:
                keyid:C5:14:D0:8E:B6:68:AD:6D:56:9B:52:F3:63:DF:FB:0D:6D:5B:B2:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/C514D08EB668AD6D569B52F363DFFB0D6D5BB212.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C514D08EB668AD6D569B52F363DFFB0D6D5BB212.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/323830343a356239633a663a3a2f34382d3438203d3e20323638383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b9c:f::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:4b:fe:38:b3:4a:62:2e:61:26:14:84:ad:81:80:b3:67:fc:
         3e:37:87:24:13:45:2e:3d:55:e3:a6:13:c7:d8:23:08:f0:44:
         19:50:b4:6c:e2:f4:05:1a:8e:7d:ae:71:f4:8e:88:4d:e0:55:
         89:e3:53:2d:3e:ca:25:c4:1c:b8:21:a4:4f:9b:37:f6:8d:95:
         e2:a5:0b:96:0d:48:eb:3c:cb:c3:b7:14:9f:40:e4:36:73:92:
         14:8d:d8:39:9b:44:7a:db:d9:76:6e:7c:3a:d3:6d:4b:9f:82:
         ad:ca:60:c6:e3:a3:db:21:8c:dd:68:28:ec:3f:33:1a:e0:84:
         01:81:3f:e1:88:91:01:13:c9:0b:d2:d2:3a:b3:c9:95:69:72:
         67:0d:08:d9:19:95:e4:77:fc:0f:e7:03:47:de:0b:96:7c:86:
         60:a7:f7:1b:5b:f0:d9:6a:63:23:0a:8f:da:84:b3:25:20:a5:
         b9:aa:75:57:08:22:16:53:7b:34:95:bf:f6:83:68:07:79:68:
         bd:0c:1b:0e:91:ab:a5:0c:6d:40:e1:6c:70:ae:01:cc:d2:a6:
         2e:82:2a:89:b3:07:92:0a:dd:0a:7a:68:e8:f8:bd:d6:70:43:
         3b:f0:84:76:1e:02:5d:1c:13:7d:55:b4:07:d3:26:d3:46:af:
         74:76:36:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:20:07 2025 by rpki-client