Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/323830343a3963343a3a2f33322d3332203d3e203533303535.roa
File:                     323830343a3963343a3a2f33322d3332203d3e203533303535.roa (raw, json)
Hash identifier:          84vFwXlHs1NWlKsXFWHAR6x59tC7eecmK8bk/bw09wI=
Subject key identifier:   20:72:AE:D7:16:35:D0:12:15:5E:75:3F:C4:D8:B3:9F:E2:16:E4:E9
Certificate issuer:       /CN=A7ACFB4517623B0EA29CFE21AED99E020EC43239
Certificate serial:       492176185216EA95754D559BC9CB1048E5905E01
Authority key identifier: A7:AC:FB:45:17:62:3B:0E:A2:9C:FE:21:AE:D9:9E:02:0E:C4:32:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/323830343a3963343a3a2f33322d3332203d3e203533303535.roa
Signing time:             Wed 05 Mar 2025 21:00:00 +0000
ROA not before:           Wed 05 Mar 2025 20:55:00 +0000
ROA not after:            Wed 04 Mar 2026 21:00:00 +0000
asID:                     53055
IP address blocks:        2804:9c4::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:21:76:18:52:16:ea:95:75:4d:55:9b:c9:cb:10:48:e5:90:5e:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7ACFB4517623B0EA29CFE21AED99E020EC43239
        Validity
            Not Before: Mar  5 20:55:00 2025 GMT
            Not After : Mar  4 21:00:00 2026 GMT
        Subject: CN=2072AED71635D012155E753FC4D8B39FE216E4E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e0:fe:71:6b:62:02:85:a6:5a:4b:da:27:f4:
                    af:4d:1e:6a:0e:fd:be:78:a0:65:b1:42:17:a2:5b:
                    c7:8a:8e:c1:e4:cb:71:d6:e7:e5:43:97:5a:34:e5:
                    df:12:9b:05:2b:cf:9c:ab:d1:08:68:1e:00:e2:14:
                    15:2f:1a:a6:83:c0:2f:dd:c7:a5:11:76:67:33:f8:
                    c8:a6:c3:be:79:4c:92:57:53:18:8b:02:fa:3a:70:
                    3b:bf:38:d6:91:44:fc:b7:0b:29:2d:ba:c6:b5:c2:
                    8a:98:6f:cf:bd:b7:91:3f:c9:57:15:58:54:91:89:
                    20:1f:79:b5:53:51:3a:32:ba:8c:8d:26:97:cd:40:
                    ae:11:06:7d:f5:7d:ea:f8:bf:5f:79:4f:5f:16:2e:
                    cb:4f:66:f4:83:34:24:91:cc:7a:ad:bd:db:b6:cc:
                    3c:94:1a:39:d2:72:90:47:9d:80:5e:52:b9:cb:6d:
                    7c:44:d8:8b:dc:04:93:fc:49:97:a0:2e:94:13:e0:
                    0d:3a:a7:fe:2a:bb:a8:7a:8e:c0:60:7a:2e:89:7b:
                    b0:0f:0d:80:3f:30:8c:6f:7f:4c:df:bd:d2:f2:96:
                    d3:c4:d6:9e:b9:9e:d5:36:4e:b3:49:93:3e:d3:93:
                    7e:fa:61:e6:44:fe:8e:db:09:32:84:a8:19:a9:48:
                    0a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:72:AE:D7:16:35:D0:12:15:5E:75:3F:C4:D8:B3:9F:E2:16:E4:E9
            X509v3 Authority Key Identifier:
                keyid:A7:AC:FB:45:17:62:3B:0E:A2:9C:FE:21:AE:D9:9E:02:0E:C4:32:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/323830343a3963343a3a2f33322d3332203d3e203533303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:46:98:aa:76:db:e9:88:cb:82:cc:44:e2:7b:08:6f:0e:77:
         f4:3c:17:d0:9c:55:0c:80:bc:44:5e:66:86:d2:df:ea:53:9d:
         1a:5e:4a:90:97:f4:cb:54:ea:e3:58:bf:c5:cd:63:55:20:fc:
         17:ee:f0:54:c2:95:68:ab:a8:ed:89:d9:cc:00:ae:db:53:26:
         cf:f5:e8:01:b1:93:11:a7:ed:a9:20:94:83:f7:a5:d8:d4:b9:
         a2:35:56:35:9e:15:4b:1a:9f:01:a0:75:e1:98:4b:90:f7:27:
         7a:f8:43:d7:71:68:e0:a4:85:96:02:71:91:c2:52:b4:17:2b:
         0c:f4:94:ed:fe:47:3d:ae:be:61:7d:ee:46:ca:2c:32:8f:e8:
         4d:2d:00:a3:0c:09:db:57:27:e9:33:5f:a6:84:d1:c2:9e:f7:
         18:f9:1c:34:d4:41:d5:8b:32:39:15:b9:7a:1b:ce:69:13:5e:
         a5:75:9d:11:62:50:c1:ed:4e:37:4a:bd:37:ab:24:4a:1b:be:
         6f:12:11:4d:7b:c5:29:40:c0:e7:2a:f8:1b:71:d1:77:8f:61:
         bc:c4:f4:35:c0:90:40:ad:84:55:f3:bd:95:d7:9f:9e:73:c8:
         fd:6a:65:a1:32:08:5b:18:56:02:04:40:91:18:6c:bb:08:08:
         3a:52:d5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:40:37 2025 by rpki-client