Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/323830343a313635383a313031303a3a2f34382d3438203d3e20323633323833.roa
File:                     323830343a313635383a313031303a3a2f34382d3438203d3e20323633323833.roa (raw, json)
Hash identifier:          VMWyDsTr/neAUTXIxknoJED/w/J+uk991zYj+6v+how=
Subject key identifier:   74:31:CC:E6:F3:50:6F:22:0F:2C:1E:CA:31:4D:0F:16:97:ED:C7:4A
Certificate issuer:       /CN=41B0D3EA994B3A684602641351C292C7808B50FC
Certificate serial:       51F089665FD365B35CC958DCF3F6DEE594C5AFB0
Authority key identifier: 41:B0:D3:EA:99:4B:3A:68:46:02:64:13:51:C2:92:C7:80:8B:50:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41B0D3EA994B3A684602641351C292C7808B50FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/323830343a313635383a313031303a3a2f34382d3438203d3e20323633323833.roa
Signing time:             Thu 23 Jan 2025 03:25:35 +0000
ROA not before:           Thu 23 Jan 2025 03:20:35 +0000
ROA not after:            Thu 22 Jan 2026 03:25:35 +0000
asID:                     263283
IP address blocks:        2804:1658:1010::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:f0:89:66:5f:d3:65:b3:5c:c9:58:dc:f3:f6:de:e5:94:c5:af:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41B0D3EA994B3A684602641351C292C7808B50FC
        Validity
            Not Before: Jan 23 03:20:35 2025 GMT
            Not After : Jan 22 03:25:35 2026 GMT
        Subject: CN=7431CCE6F3506F220F2C1ECA314D0F1697EDC74A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:26:b1:7c:39:eb:06:6b:18:c2:5d:18:de:5e:
                    24:6a:fb:3d:ac:41:4d:7f:f3:2d:09:88:d7:59:bf:
                    61:a3:6e:34:70:cc:96:21:3e:1c:9a:98:32:bf:ff:
                    4f:80:df:47:b5:33:e2:16:00:87:d0:0a:30:a9:37:
                    b7:64:6f:e7:f3:3e:58:5c:fd:43:ba:c0:9f:41:0a:
                    b2:8b:64:ae:aa:ba:3b:06:05:ad:7c:10:84:b7:62:
                    f3:71:fd:5f:67:cd:35:f6:5b:95:62:9d:da:4d:e9:
                    d7:b1:fc:d3:13:97:13:c5:be:51:bf:a6:3f:95:36:
                    06:79:38:bb:f3:8f:d3:9c:fb:f2:09:30:af:90:42:
                    95:44:a2:2b:b6:b4:9a:eb:4c:f0:b0:22:56:71:e1:
                    21:58:82:5b:f2:25:67:77:46:02:81:c8:60:f4:bf:
                    6b:66:47:ec:ed:47:18:6d:7a:8e:9d:79:00:1e:a3:
                    fb:2d:ef:db:80:a7:6e:8d:ba:7c:b1:a1:97:cf:42:
                    66:ca:43:e6:56:f7:38:4d:37:a0:8a:97:ec:5f:30:
                    28:6b:1a:44:01:df:04:22:8c:a8:25:97:34:63:58:
                    d0:69:d8:c3:e7:64:c5:45:67:49:ee:66:8b:94:c8:
                    58:14:28:e3:71:5a:30:ad:76:5b:7c:07:b9:98:d2:
                    e4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:31:CC:E6:F3:50:6F:22:0F:2C:1E:CA:31:4D:0F:16:97:ED:C7:4A
            X509v3 Authority Key Identifier:
                keyid:41:B0:D3:EA:99:4B:3A:68:46:02:64:13:51:C2:92:C7:80:8B:50:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/41B0D3EA994B3A684602641351C292C7808B50FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41B0D3EA994B3A684602641351C292C7808B50FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/323830343a313635383a313031303a3a2f34382d3438203d3e20323633323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1658:1010::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:4f:0b:a6:0d:17:d8:29:af:38:1d:8f:3a:fd:be:67:18:5a:
         6b:bf:4c:c2:0c:5f:11:3c:00:c6:b2:77:49:c2:ea:60:fb:a7:
         fd:72:9c:88:39:09:21:18:e7:cd:0e:01:1f:30:35:d2:71:cb:
         f6:2c:bc:43:47:f3:dd:ac:a4:90:63:e4:88:21:ae:20:2b:d7:
         e6:2a:53:ea:47:bb:19:73:9a:f5:e6:a1:60:63:26:d9:d7:30:
         cd:81:31:f8:1c:9e:e6:a7:9a:6a:25:50:01:b5:96:a7:96:ec:
         2c:ff:ca:9b:3c:06:d0:bc:45:2a:82:ef:84:dd:23:12:9e:d2:
         85:f7:86:cc:e6:7b:0d:de:ef:ba:ae:d6:71:ed:58:a7:0c:b9:
         82:7e:32:83:85:14:4a:98:6d:c6:b5:30:84:e4:8c:44:e5:92:
         b3:90:56:81:dc:95:a7:f0:32:46:b1:53:b9:07:cc:7c:90:ce:
         fd:15:53:fa:df:e6:1f:76:6e:ca:64:0a:03:42:07:3f:01:c5:
         a8:d8:ac:c1:10:72:4f:e5:3e:63:2b:cf:d8:4b:86:ca:32:ea:
         4e:66:0f:aa:15:bd:6d:6c:b6:28:43:67:cc:2a:f4:81:f2:fb:
         38:aa:50:32:35:57:9a:67:a5:57:5a:ac:90:d5:1c:ed:3f:7b:
         b0:40:38:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:27:13 2025 by rpki-client