Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/0/323830343a313635383a313030653a3a2f34382d3438203d3e20323633323833.roa
File:                     323830343a313635383a313030653a3a2f34382d3438203d3e20323633323833.roa (raw, json)
Hash identifier:          cl9AVMv417qkiSm4gInuHAcycVULAn5KAlzynvR03OE=
Subject key identifier:   03:B1:A5:D1:85:70:36:9D:77:DE:D5:7F:52:13:CB:F3:41:04:50:8B
Certificate issuer:       /CN=E80901F1AE1AC03AEAAC22762D036F1E4C00904D
Certificate serial:       4515EC21E83E50D6B9AD3E5181F40012ADD4C3AC
Authority key identifier: E8:09:01:F1:AE:1A:C0:3A:EA:AC:22:76:2D:03:6F:1E:4C:00:90:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E80901F1AE1AC03AEAAC22762D036F1E4C00904D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/0/323830343a313635383a313030653a3a2f34382d3438203d3e20323633323833.roa
Signing time:             Fri 12 Jan 2024 01:53:18 +0000
ROA not before:           Fri 12 Jan 2024 01:48:18 +0000
ROA not after:            Fri 10 Jan 2025 01:53:18 +0000
asID:                     263283
IP address blocks:        2804:1658:100e::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:15:ec:21:e8:3e:50:d6:b9:ad:3e:51:81:f4:00:12:ad:d4:c3:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E80901F1AE1AC03AEAAC22762D036F1E4C00904D
        Validity
            Not Before: Jan 12 01:48:18 2024 GMT
            Not After : Jan 10 01:53:18 2025 GMT
        Subject: CN=03B1A5D18570369D77DED57F5213CBF34104508B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c6:fe:7a:cc:50:2a:94:0e:0b:2e:ac:c4:ed:
                    72:b2:ee:81:3d:02:ae:f1:d7:52:90:2e:c9:86:14:
                    3c:1b:a9:a4:c3:0f:90:54:58:5b:e0:03:7c:3a:7f:
                    66:a3:03:70:46:97:b6:a1:f0:e1:98:39:f6:76:5a:
                    0d:e7:6e:f8:cb:3f:59:67:2f:bf:2b:01:90:74:02:
                    6b:8a:aa:75:38:04:9c:1c:7c:2a:ff:e6:42:39:69:
                    25:49:07:e0:31:6f:6f:4f:ec:c8:2c:f0:3a:ea:ad:
                    f9:e5:a8:27:52:50:eb:92:96:39:27:c2:5c:2c:61:
                    27:53:9b:fb:62:b5:74:81:07:8a:96:a4:15:e8:94:
                    43:4d:29:ce:18:8d:ce:2d:36:e9:65:42:2e:e9:21:
                    f1:1f:32:ac:fa:b0:b0:30:84:74:b5:a4:fc:b1:d2:
                    57:77:d8:1c:36:66:f0:07:fa:53:f7:b7:bf:d9:98:
                    6b:d2:1a:b4:52:22:c9:11:dd:8f:ce:fb:f8:68:34:
                    c0:70:e1:1b:d8:fa:6b:0c:e7:75:01:9d:e9:2a:5b:
                    e9:35:49:20:2f:52:01:ae:e2:10:bb:73:4f:f7:ea:
                    fa:0f:91:83:af:ea:0e:71:ea:e4:e5:c1:9c:2e:06:
                    8f:57:15:8e:d6:82:92:d7:65:a5:e4:16:d2:eb:0f:
                    71:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B1:A5:D1:85:70:36:9D:77:DE:D5:7F:52:13:CB:F3:41:04:50:8B
            X509v3 Authority Key Identifier:
                keyid:E8:09:01:F1:AE:1A:C0:3A:EA:AC:22:76:2D:03:6F:1E:4C:00:90:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/0/E80901F1AE1AC03AEAAC22762D036F1E4C00904D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E80901F1AE1AC03AEAAC22762D036F1E4C00904D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/0/323830343a313635383a313030653a3a2f34382d3438203d3e20323633323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1658:100e::/48

    Signature Algorithm: sha256WithRSAEncryption
         ca:b0:48:11:fb:d0:95:6b:9e:b3:7c:16:80:97:0c:20:a3:a7:
         8a:4b:b4:39:11:ad:ea:f1:b5:de:2f:21:25:2c:7a:87:6c:01:
         75:7b:96:c8:47:6d:25:db:c1:d0:e8:ae:61:9d:17:6b:3d:59:
         b3:b0:7f:d6:0d:43:f4:cc:5a:17:fb:9e:f7:aa:92:15:41:3e:
         86:2e:8e:1c:1f:d7:cf:1a:2e:53:cc:24:01:d2:79:82:46:ca:
         a8:f5:9f:f8:aa:da:01:ec:f4:f6:cc:da:90:9e:3b:fa:8e:0d:
         5a:fa:7f:15:7b:f5:ce:71:e1:84:e5:79:6e:ed:50:34:d2:03:
         65:82:2a:41:7a:81:1b:cf:1e:14:57:10:68:e3:b5:ce:bb:a3:
         f7:22:04:2b:15:7c:f8:6f:b6:e3:2c:1e:0c:70:93:04:59:7e:
         a5:26:2c:40:4a:71:91:5d:7d:fa:89:d8:65:02:78:66:92:9e:
         4c:0c:f5:e2:bd:18:78:e9:00:38:8c:e8:65:72:b4:89:4f:d5:
         e6:1d:5d:f7:06:11:5b:8a:62:fd:c0:4d:17:4e:b5:c3:91:66:
         fc:51:aa:3e:7a:80:7a:d2:30:e5:6a:bf:92:d2:99:0a:e1:d3:
         ab:b4:bd:64:5b:71:48:8a:c2:b6:75:07:da:4f:b5:c3:f4:83:
         1a:df:c3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:52:19 2025 by rpki-client