Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/323830343a333961303a383030303a3a2f33352d3335203d3e20323636303430.roa
File:                     323830343a333961303a383030303a3a2f33352d3335203d3e20323636303430.roa (raw, json)
Hash identifier:          Hpqv2mrslwPjyQYx9oW0ecTH/qNZJVzbdCWDN+Mc/RA=
Subject key identifier:   4D:F5:BF:02:EB:4B:8F:4D:13:D9:4E:7D:21:CA:EE:8C:67:9E:55:D6
Certificate issuer:       /CN=186100CD22AE8C45D9A5ECA2F927E59970780DB1
Certificate serial:       1DCFF20A2F30F36C0D4CB372B5229A7A089A1CED
Authority key identifier: 18:61:00:CD:22:AE:8C:45:D9:A5:EC:A2:F9:27:E5:99:70:78:0D:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/186100CD22AE8C45D9A5ECA2F927E59970780DB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/323830343a333961303a383030303a3a2f33352d3335203d3e20323636303430.roa
Signing time:             Thu 07 Mar 2024 13:26:19 +0000
ROA not before:           Thu 07 Mar 2024 13:21:19 +0000
ROA not after:            Thu 06 Mar 2025 13:26:19 +0000
asID:                     266040
IP address blocks:        2804:39a0:8000::/35 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:cf:f2:0a:2f:30:f3:6c:0d:4c:b3:72:b5:22:9a:7a:08:9a:1c:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=186100CD22AE8C45D9A5ECA2F927E59970780DB1
        Validity
            Not Before: Mar  7 13:21:19 2024 GMT
            Not After : Mar  6 13:26:19 2025 GMT
        Subject: CN=4DF5BF02EB4B8F4D13D94E7D21CAEE8C679E55D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1c:2c:66:59:58:df:d2:22:33:d6:42:0a:cb:
                    51:18:e0:9c:b0:97:12:3e:97:33:3c:60:a6:11:d8:
                    94:94:b2:20:8d:74:66:e0:ce:e8:9a:68:f1:e3:59:
                    85:f6:d7:38:65:4d:1b:29:57:07:de:6d:19:95:f4:
                    8d:02:15:8b:12:a6:af:a3:e3:dc:63:72:b5:8e:04:
                    7b:fe:3a:ab:a8:f3:04:05:36:06:15:6d:be:61:47:
                    db:6a:4d:38:65:d7:fa:d5:09:39:41:68:83:23:47:
                    df:39:b3:66:f8:81:f8:24:a0:a6:98:32:f8:a2:e4:
                    ca:6b:0a:7a:64:41:c1:7f:2b:6e:e4:e0:59:14:2b:
                    94:f4:e2:78:70:11:f1:db:6b:89:e4:ba:12:52:54:
                    01:c4:34:e0:1e:71:a9:69:e7:d2:a2:78:92:72:89:
                    dc:23:b6:61:0e:3d:91:83:e3:af:22:21:91:a9:95:
                    c5:d2:55:46:ee:2c:c1:18:a1:72:3a:2f:27:3e:c7:
                    2d:4e:64:0f:b0:2d:7b:22:c8:af:71:b7:7c:ea:2a:
                    2e:2f:40:ed:f0:5f:2a:0e:8b:3b:27:57:4d:53:51:
                    25:62:ca:ba:09:2c:a2:0f:e8:95:58:ce:7a:79:7d:
                    c4:a0:d9:1a:a3:15:26:47:72:c6:e9:d7:b9:d2:e3:
                    ac:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F5:BF:02:EB:4B:8F:4D:13:D9:4E:7D:21:CA:EE:8C:67:9E:55:D6
            X509v3 Authority Key Identifier:
                keyid:18:61:00:CD:22:AE:8C:45:D9:A5:EC:A2:F9:27:E5:99:70:78:0D:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/186100CD22AE8C45D9A5ECA2F927E59970780DB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/186100CD22AE8C45D9A5ECA2F927E59970780DB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/323830343a333961303a383030303a3a2f33352d3335203d3e20323636303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:39a0:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         5d:78:56:c6:76:3b:95:15:51:b3:b9:d5:05:34:86:24:13:3f:
         b2:57:1e:94:35:25:15:be:7d:75:70:33:cd:b7:9a:d9:28:61:
         f4:71:85:dc:67:34:92:96:f5:fd:52:64:a8:9f:2f:ac:9a:88:
         97:8c:8d:60:2e:ab:96:b7:1e:8a:67:0f:1a:22:e9:3d:08:f3:
         cf:58:d1:f0:33:f5:7e:04:0e:90:27:52:1f:bf:99:ad:43:f3:
         fc:1f:82:62:f7:1b:b8:cf:40:ff:ad:34:99:dc:ff:f4:9c:93:
         34:c5:51:f3:56:bc:7c:14:a9:05:5e:bb:93:e9:39:d5:a0:d5:
         b6:79:5c:7f:2f:e1:7c:38:21:bb:90:52:3b:22:08:93:b5:17:
         95:22:15:c0:40:5a:bc:70:b7:52:fa:ef:08:18:74:13:0b:40:
         f9:f7:7c:17:6a:00:9d:4f:c1:48:6c:81:fb:91:c1:68:fd:a6:
         78:17:ba:02:88:ef:67:63:81:9c:e6:15:74:d2:f7:4e:a2:a4:
         c1:43:5a:b9:41:4c:5f:7a:bc:20:31:eb:a6:32:0a:aa:43:b5:
         ca:f1:50:fc:20:15:e0:ae:31:84:f8:b2:8d:bb:f4:31:8f:6e:
         11:a2:a1:6e:a2:f4:72:51:f7:ea:33:32:b8:b4:43:9b:bc:5d:
         58:c6:e9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:56 2025 by rpki-client