Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GkQ1SGUVepxpKUkGXRuV9y6br8TD5nyXL9saXcmk6Pkc/0/323830343a353062633a343030303a3a2f33342d3334203d3e20323638343037.roa
File:                     323830343a353062633a343030303a3a2f33342d3334203d3e20323638343037.roa (raw, json)
Hash identifier:          PEsnUdAitnEjiPc0uZN0XFxn3RBW/XrojbVO6TC8Yew=
Subject key identifier:   F3:D7:AD:5F:8A:C4:24:B4:F2:7A:F6:5E:BA:82:32:28:60:29:12:17
Certificate issuer:       /CN=18380AF093DF48152B3963AA733B302A175459DB
Certificate serial:       5EF8E2E626E5EB9ECECA0933E4AD8651A1279777
Authority key identifier: 18:38:0A:F0:93:DF:48:15:2B:39:63:AA:73:3B:30:2A:17:54:59:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18380AF093DF48152B3963AA733B302A175459DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkQ1SGUVepxpKUkGXRuV9y6br8TD5nyXL9saXcmk6Pkc/0/323830343a353062633a343030303a3a2f33342d3334203d3e20323638343037.roa
Signing time:             Fri 14 Feb 2025 12:58:51 +0000
ROA not before:           Fri 14 Feb 2025 12:53:51 +0000
ROA not after:            Fri 13 Feb 2026 12:58:51 +0000
asID:                     268407
IP address blocks:        2804:50bc:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:f8:e2:e6:26:e5:eb:9e:ce:ca:09:33:e4:ad:86:51:a1:27:97:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18380AF093DF48152B3963AA733B302A175459DB
        Validity
            Not Before: Feb 14 12:53:51 2025 GMT
            Not After : Feb 13 12:58:51 2026 GMT
        Subject: CN=F3D7AD5F8AC424B4F27AF65EBA82322860291217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f2:8b:84:e6:48:d0:14:79:9d:da:3b:52:72:
                    ea:8c:0b:ae:92:d8:6a:d0:80:6b:dd:34:f1:24:d6:
                    83:68:16:57:73:b7:b6:71:2f:8e:f5:0c:cb:72:62:
                    16:a6:1a:07:cc:b7:37:b9:d5:2d:ae:2d:97:38:89:
                    ac:81:05:0e:46:f0:2e:c8:e7:7f:2e:95:f8:9b:24:
                    cd:c1:26:62:0f:a3:fe:00:18:ac:b8:44:93:d4:0f:
                    1b:e9:7d:3c:2b:64:b4:28:30:cf:31:f4:7c:d3:59:
                    e6:e6:fe:c5:d0:b6:83:c7:4e:9c:19:72:dd:5d:d4:
                    af:0c:8b:0a:c6:cc:8d:5f:ab:be:e8:d2:0c:79:8f:
                    f5:dd:62:12:5a:50:84:ac:e0:1a:14:d9:e9:a1:e6:
                    3f:fa:e4:c8:c5:68:9c:81:63:60:fe:26:d9:88:c1:
                    dc:b6:66:5c:6f:b2:cb:f5:c5:84:32:34:07:6e:de:
                    33:23:b1:93:18:69:7d:a9:c6:dc:2b:ae:49:c7:ff:
                    f2:99:a1:ad:25:6d:8e:bd:6f:5b:1b:4f:99:1b:bc:
                    1f:ea:6e:8a:63:8c:af:37:31:08:02:e7:64:d2:3d:
                    34:42:71:23:27:24:96:b8:e5:5d:82:25:85:a2:e0:
                    94:f7:9f:1f:37:39:7c:5e:b7:92:34:aa:8f:08:19:
                    ae:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:D7:AD:5F:8A:C4:24:B4:F2:7A:F6:5E:BA:82:32:28:60:29:12:17
            X509v3 Authority Key Identifier:
                keyid:18:38:0A:F0:93:DF:48:15:2B:39:63:AA:73:3B:30:2A:17:54:59:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkQ1SGUVepxpKUkGXRuV9y6br8TD5nyXL9saXcmk6Pkc/0/18380AF093DF48152B3963AA733B302A175459DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18380AF093DF48152B3963AA733B302A175459DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkQ1SGUVepxpKUkGXRuV9y6br8TD5nyXL9saXcmk6Pkc/0/323830343a353062633a343030303a3a2f33342d3334203d3e20323638343037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:50bc:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         54:ed:b6:60:e2:28:e4:57:36:0e:22:57:09:7c:e3:88:a8:c5:
         15:8c:98:9c:2f:d1:76:54:69:ca:b1:da:a9:7b:01:e8:c6:66:
         99:0c:7d:a1:f7:78:20:56:49:44:35:12:a2:b5:4a:85:2e:0f:
         39:5a:16:3a:50:c9:f3:3f:21:f5:c6:5e:ad:d5:21:3a:e8:1f:
         39:0c:ea:65:7c:df:dd:bb:e4:ab:b1:64:fc:e1:81:63:1c:ca:
         9b:4c:64:19:fe:43:8f:28:d1:f1:db:47:21:ef:7d:3c:99:fc:
         d5:36:f3:e2:51:45:dd:b9:64:6e:cc:f7:98:12:9c:6d:c2:44:
         e3:33:e7:5c:7a:68:49:79:18:ff:70:95:f5:32:54:cf:a2:f7:
         dc:ed:1f:34:11:58:a5:53:5f:ff:c2:9c:25:af:61:59:02:24:
         c7:98:c2:40:78:d9:0d:a2:97:e9:1b:26:44:14:d8:1b:4a:25:
         00:25:15:75:27:97:2c:8e:8a:de:a4:93:c6:a6:c3:7e:ce:e7:
         a5:2b:c9:14:29:91:fb:b3:c9:a2:b9:dd:e5:42:75:f5:52:0e:
         47:97:11:e8:05:83:c9:90:00:4a:fc:6a:57:b0:75:11:ec:3e:
         28:61:74:e2:5a:a9:35:09:6b:53:0f:20:ff:34:70:1a:3a:b0:
         cc:79:b3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:20:00 2025 by rpki-client