Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/323830343a333631633a3a2f33322d313238203d3e20323636333237.roa
File:                     323830343a333631633a3a2f33322d313238203d3e20323636333237.roa (raw, json)
Hash identifier:          Anu39deOjIg4PJyptlG+N7uST8BFQaFVIYM0TgPTI4k=
Subject key identifier:   CE:D1:90:75:4F:61:37:E1:21:B8:27:00:A5:46:DB:E6:BA:BC:63:8A
Certificate issuer:       /CN=52519D71351C02D14D4BE69A71D2C09F76A4F333
Certificate serial:       663D976E53E78D03F5D8D99168B41315825C4B62
Authority key identifier: 52:51:9D:71:35:1C:02:D1:4D:4B:E6:9A:71:D2:C0:9F:76:A4:F3:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52519D71351C02D14D4BE69A71D2C09F76A4F333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/323830343a333631633a3a2f33322d313238203d3e20323636333237.roa
Signing time:             Mon 27 Jan 2025 19:21:11 +0000
ROA not before:           Mon 27 Jan 2025 19:16:11 +0000
ROA not after:            Mon 26 Jan 2026 19:21:11 +0000
asID:                     266327
IP address blocks:        2804:361c::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:3d:97:6e:53:e7:8d:03:f5:d8:d9:91:68:b4:13:15:82:5c:4b:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52519D71351C02D14D4BE69A71D2C09F76A4F333
        Validity
            Not Before: Jan 27 19:16:11 2025 GMT
            Not After : Jan 26 19:21:11 2026 GMT
        Subject: CN=CED190754F6137E121B82700A546DBE6BABC638A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:54:fd:e6:ca:b1:2a:36:30:de:01:71:0d:84:
                    18:2b:20:fc:67:4e:92:8e:f1:6a:1a:24:7d:01:a6:
                    33:58:0b:14:61:44:04:e0:fc:da:74:94:93:c0:c1:
                    24:30:e2:68:57:31:f0:a9:6b:f5:ff:24:f3:10:3c:
                    f6:c0:4f:25:83:94:42:4a:b1:6a:ee:a8:d7:2f:ad:
                    7c:80:52:73:5a:41:fc:42:8e:a0:6f:d1:04:e0:5c:
                    e2:80:d8:c3:59:9c:e2:39:a0:80:f5:a8:80:f0:42:
                    14:ff:05:b2:34:df:d5:8b:83:98:74:d3:93:52:be:
                    cc:cb:60:a2:5d:47:0a:c6:91:e4:5f:cf:12:da:b6:
                    a2:1e:a1:7b:3c:0b:38:c2:16:fd:30:36:a7:69:81:
                    d8:f8:d9:ca:31:7b:1d:8a:98:4e:7e:d9:db:82:af:
                    78:4b:3e:dd:1d:d4:81:af:4b:79:da:7a:15:3a:91:
                    1f:8c:4d:3c:6d:2f:a4:37:b7:87:76:5c:89:4f:94:
                    84:c1:68:c1:94:fc:79:b0:71:65:41:40:69:b0:f5:
                    54:bd:e3:21:f2:ba:e3:9c:e3:b6:82:d5:10:1e:1f:
                    c1:61:46:1e:2f:e3:f3:2b:9c:d1:93:34:dd:2f:18:
                    ef:30:b5:f2:bf:f1:76:15:92:c3:b0:8e:ac:a5:25:
                    c8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D1:90:75:4F:61:37:E1:21:B8:27:00:A5:46:DB:E6:BA:BC:63:8A
            X509v3 Authority Key Identifier:
                keyid:52:51:9D:71:35:1C:02:D1:4D:4B:E6:9A:71:D2:C0:9F:76:A4:F3:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/52519D71351C02D14D4BE69A71D2C09F76A4F333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52519D71351C02D14D4BE69A71D2C09F76A4F333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/323830343a333631633a3a2f33322d313238203d3e20323636333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:361c::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:6d:38:9f:65:71:49:76:53:7c:f1:75:83:b1:5b:4c:82:6a:
         b9:9f:35:df:28:c5:4d:db:d4:60:cc:73:f7:d2:76:b3:3b:3d:
         68:c6:51:57:e2:02:76:01:40:74:27:74:fb:84:d1:b6:e9:51:
         21:54:b4:94:f2:5d:d1:b7:0c:30:26:63:94:85:f0:65:7c:6d:
         f5:8e:c8:f4:92:0e:11:90:2d:45:70:47:95:ba:3c:ed:d8:c4:
         cb:f4:06:2f:8a:3e:64:9b:7e:66:21:ef:67:b7:7f:f2:3f:59:
         af:61:44:7b:70:46:10:e3:ac:91:73:ed:03:45:ab:1e:54:8c:
         e5:5d:ff:b4:ad:eb:d6:2b:b0:46:9a:e7:c6:53:1e:51:de:cc:
         b3:cd:fb:9f:42:1f:b7:52:52:1b:70:77:75:e0:c8:a0:f0:79:
         4d:8b:17:db:37:d0:f7:99:30:41:5c:7c:e1:8a:6b:04:7f:a3:
         46:f8:9c:a2:7c:fe:4f:94:df:1d:29:18:51:f8:9d:c4:31:da:
         50:8e:01:12:34:b6:3a:6c:30:f2:52:5b:01:ee:50:3b:4a:34:
         c5:6d:0b:42:b6:3f:e3:4d:9e:09:8e:9e:2c:ea:62:73:29:50:
         fa:a2:75:4f:e1:d1:1b:13:60:de:1e:b4:7e:23:0f:23:86:68:
         e4:25:ca:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:38:17 2025 by rpki-client