Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnSx9siF1X4RztCY1H5YjGHCYEm8AtiXM56u8itbab8J/1/323830343a366162343a3a2f33322d313238203d3e20323730333534.roa
File:                     323830343a366162343a3a2f33322d313238203d3e20323730333534.roa (raw, json)
Hash identifier:          +KRH34QiQGi1vlvMl5kh5CuW/10shvfZpb0NO4K0pps=
Subject key identifier:   BE:EB:BB:2B:3C:BC:13:16:70:56:50:14:12:C4:DD:52:FE:B4:5F:79
Certificate issuer:       /CN=736CC7BD00E444B3C507A4A165D0774513CFB15B
Certificate serial:       25332949BDC9E20AF02A0E04D23B441C1DBF5540
Authority key identifier: 73:6C:C7:BD:00:E4:44:B3:C5:07:A4:A1:65:D0:77:45:13:CF:B1:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/736CC7BD00E444B3C507A4A165D0774513CFB15B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnSx9siF1X4RztCY1H5YjGHCYEm8AtiXM56u8itbab8J/1/323830343a366162343a3a2f33322d313238203d3e20323730333534.roa
Signing time:             Thu 06 Mar 2025 00:00:11 +0000
ROA not before:           Wed 05 Mar 2025 23:55:11 +0000
ROA not after:            Thu 05 Mar 2026 00:00:11 +0000
asID:                     270354
IP address blocks:        2804:6ab4::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:33:29:49:bd:c9:e2:0a:f0:2a:0e:04:d2:3b:44:1c:1d:bf:55:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=736CC7BD00E444B3C507A4A165D0774513CFB15B
        Validity
            Not Before: Mar  5 23:55:11 2025 GMT
            Not After : Mar  5 00:00:11 2026 GMT
        Subject: CN=BEEBBB2B3CBC13167056501412C4DD52FEB45F79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:aa:4b:62:67:63:21:99:67:8e:c8:4e:35:c3:
                    fa:51:68:a7:27:f2:d5:8e:10:a0:82:aa:2b:2a:6b:
                    39:94:fd:94:43:9d:65:a1:89:37:c1:e2:a7:c3:c3:
                    cf:b6:c3:19:77:a0:2c:94:4f:52:79:5d:80:c8:d0:
                    06:b1:f4:bb:7d:03:83:39:ba:2f:55:d6:7f:77:35:
                    4e:18:44:c6:1f:ef:5a:d7:8b:77:2e:85:aa:17:4e:
                    02:c9:61:48:7e:39:39:bb:0b:67:8f:73:2e:37:2b:
                    7b:30:c9:11:80:a2:69:41:3a:ac:b9:c6:b4:07:54:
                    e5:26:12:5c:a9:14:fe:24:6f:98:40:a1:83:fe:20:
                    11:c3:80:38:96:8f:9a:e2:f3:cf:32:02:16:60:c6:
                    6d:29:ca:0e:cc:0b:73:63:3d:aa:a3:88:b2:3c:77:
                    a2:13:6a:1f:97:af:4d:6d:81:38:34:34:27:cb:ee:
                    af:bc:b9:ae:e2:cd:b4:bf:6c:f3:f5:b7:c6:e1:a9:
                    78:9c:3b:8b:07:3a:0c:f1:f4:00:53:1e:ea:79:95:
                    36:d7:8e:06:b9:5c:95:86:c3:a3:ed:45:c6:17:95:
                    82:ce:c5:7b:49:c1:c6:04:49:a1:80:1f:5e:f1:e2:
                    92:e3:d1:77:f2:e5:89:29:bc:be:b0:ca:02:78:65:
                    e6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:EB:BB:2B:3C:BC:13:16:70:56:50:14:12:C4:DD:52:FE:B4:5F:79
            X509v3 Authority Key Identifier:
                keyid:73:6C:C7:BD:00:E4:44:B3:C5:07:A4:A1:65:D0:77:45:13:CF:B1:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnSx9siF1X4RztCY1H5YjGHCYEm8AtiXM56u8itbab8J/1/736CC7BD00E444B3C507A4A165D0774513CFB15B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/736CC7BD00E444B3C507A4A165D0774513CFB15B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnSx9siF1X4RztCY1H5YjGHCYEm8AtiXM56u8itbab8J/1/323830343a366162343a3a2f33322d313238203d3e20323730333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ab4::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:c8:48:18:40:9c:21:d7:f4:af:59:a1:7b:0d:0b:e4:f7:db:
         93:fa:77:37:42:7a:3a:1d:0c:a7:51:3d:98:2b:31:98:bc:57:
         ba:69:bc:cc:08:96:b4:1a:29:eb:0f:ed:15:5a:96:72:4b:d0:
         78:5b:12:24:dd:19:85:f3:d0:b1:da:15:2e:7b:15:9f:f9:12:
         ec:78:52:b5:d3:f2:5e:6b:96:38:58:ef:f8:04:44:8e:b4:26:
         3e:a4:22:cc:a7:7c:90:02:3f:0b:e2:fe:ad:d5:82:0c:0b:e7:
         fe:c9:9b:a8:b1:d5:69:b7:a8:de:5f:6c:32:6c:2e:0b:4e:01:
         b1:29:22:a1:84:06:5b:fa:b4:71:79:3f:84:26:05:70:43:d5:
         d9:8f:de:38:42:16:3c:f3:32:df:86:a6:52:1e:cc:b5:8b:5b:
         d7:1d:5b:1d:3d:83:4e:9a:a5:cd:69:02:78:8c:7f:35:63:6a:
         a8:73:b4:4c:0c:3b:09:68:11:2b:e2:7f:fc:ae:57:53:23:c3:
         cb:4f:ba:b7:e2:70:0d:99:4c:b6:3f:78:74:25:32:74:0d:3e:
         40:8a:19:3e:d9:9b:de:75:44:10:4d:6f:63:fe:11:3d:88:99:
         fc:e4:eb:d9:f0:03:46:07:c1:98:ac:2e:b4:83:f5:fe:18:cf:
         9b:a2:db:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 04:02:32 2025 by rpki-client