Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/1/323830343a313364633a3a2f33322d3334203d3e20323632343238.roa
File:                     323830343a313364633a3a2f33322d3334203d3e20323632343238.roa (raw, json)
Hash identifier:          XXtE3ZKq8tsCg3Jl+GlR8/wpdm3hojklmT8O2l53ad4=
Subject key identifier:   4B:79:42:A9:F2:7D:96:AF:A2:A1:F9:B7:4B:EC:72:6F:DA:DB:5D:DF
Certificate issuer:       /CN=938F45B39DC45B48A1C4185FBA8AF194B821EFA1
Certificate serial:       72777D6910126FA8827CABF432C6792DE1F990BD
Authority key identifier: 93:8F:45:B3:9D:C4:5B:48:A1:C4:18:5F:BA:8A:F1:94:B8:21:EF:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/938F45B39DC45B48A1C4185FBA8AF194B821EFA1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/1/323830343a313364633a3a2f33322d3334203d3e20323632343238.roa
Signing time:             Wed 05 Mar 2025 21:02:18 +0000
ROA not before:           Wed 05 Mar 2025 20:57:18 +0000
ROA not after:            Wed 04 Mar 2026 21:02:18 +0000
asID:                     262428
IP address blocks:        2804:13dc::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:77:7d:69:10:12:6f:a8:82:7c:ab:f4:32:c6:79:2d:e1:f9:90:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=938F45B39DC45B48A1C4185FBA8AF194B821EFA1
        Validity
            Not Before: Mar  5 20:57:18 2025 GMT
            Not After : Mar  4 21:02:18 2026 GMT
        Subject: CN=4B7942A9F27D96AFA2A1F9B74BEC726FDADB5DDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:67:a2:39:ce:56:bf:75:b0:12:6e:41:11:c7:
                    7c:5a:7d:ef:e3:1c:9d:38:ba:18:14:e2:b4:e5:f5:
                    62:96:b1:39:9a:b0:42:a5:1f:3f:1e:02:79:64:34:
                    5b:f9:96:ab:47:4f:11:a8:dc:fb:e4:72:29:0b:c8:
                    83:88:72:a7:ae:95:53:60:cf:1e:81:83:41:5b:b7:
                    11:ee:1f:fc:fb:e8:bb:f8:73:cf:ce:07:bf:c8:3e:
                    73:b9:18:c9:4a:b4:9a:f7:2f:17:ee:53:3c:50:a8:
                    a0:ad:94:7a:9e:af:9e:f4:9b:b6:2b:88:e0:a9:d7:
                    b5:ed:12:ad:38:9f:6d:d2:9a:9c:5a:46:8f:ae:33:
                    4e:58:7d:33:5e:0c:49:5a:f8:74:59:5c:bb:52:ce:
                    dc:c6:84:ca:d3:36:2e:ed:f6:0b:6a:08:f0:53:70:
                    af:24:3f:4d:d0:46:05:89:6f:21:54:64:a4:1b:44:
                    51:dc:e4:d5:2e:9f:c9:18:99:62:b5:27:f6:fa:53:
                    37:5b:da:e3:ce:7d:2e:09:2c:eb:0f:e6:f0:be:af:
                    75:52:b8:3c:9b:2d:29:1e:d5:5a:d6:70:40:c1:10:
                    8f:7c:09:1f:84:4d:24:ea:4e:cd:9e:10:bd:8c:01:
                    a4:12:93:57:e6:51:2b:19:a4:bb:39:cc:dd:17:74:
                    f7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:79:42:A9:F2:7D:96:AF:A2:A1:F9:B7:4B:EC:72:6F:DA:DB:5D:DF
            X509v3 Authority Key Identifier:
                keyid:93:8F:45:B3:9D:C4:5B:48:A1:C4:18:5F:BA:8A:F1:94:B8:21:EF:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/1/938F45B39DC45B48A1C4185FBA8AF194B821EFA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/938F45B39DC45B48A1C4185FBA8AF194B821EFA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/1/323830343a313364633a3a2f33322d3334203d3e20323632343238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:13dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:3f:1d:7b:3a:81:9b:7d:67:92:0c:dc:bb:02:ae:32:d8:2b:
         cc:f5:b0:fe:5a:e4:8f:3c:88:fe:1f:0f:d2:5a:1c:49:89:6e:
         96:10:86:92:26:4a:66:c0:23:d7:d4:5c:87:06:3d:9d:ea:d4:
         ed:aa:c0:94:46:aa:e9:f2:b2:c6:55:dd:42:63:82:25:cd:13:
         c7:e9:14:85:c9:7b:fb:52:02:5e:06:1c:55:b4:69:6d:d4:09:
         29:08:f0:0e:a6:d2:8e:ca:bc:0f:34:24:55:34:48:49:f2:ba:
         7d:c0:45:ec:de:77:05:4a:8b:1f:22:2d:8f:6e:65:19:e1:7f:
         6a:c3:3c:61:33:9b:01:40:1e:5d:49:bf:7e:d7:f9:3c:34:ef:
         3c:6d:65:2c:1d:41:0d:7a:d8:6c:1e:fb:d5:d7:df:b3:d2:6e:
         b6:7d:d2:ff:e2:6f:4d:fd:33:0d:cf:42:e5:01:bc:97:ae:39:
         69:22:7b:5e:27:f8:10:b4:6d:c4:41:4c:32:a4:9f:34:b0:67:
         f9:e6:ed:60:3d:83:fa:00:2d:45:34:2f:a6:0e:cd:25:5d:5d:
         24:b1:62:c0:63:71:c0:a0:a2:f7:03:d4:cf:a1:2c:e7:e4:98:
         0d:e3:6e:46:88:fe:46:d5:a1:28:be:e6:bd:ef:a3:94:53:52:
         ce:07:22:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:25:43 2025 by rpki-client