Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/323830343a343431383a3a2f33322d3334203d3e20323637363032.roa
File:                     323830343a343431383a3a2f33322d3334203d3e20323637363032.roa (raw, json)
Hash identifier:          SVa3n9CXuCMyjnUcZIuGz915kRDbHwqunvwZpWNFCqE=
Subject key identifier:   38:74:0A:EC:9E:43:E2:12:15:3E:11:8D:A5:F8:32:16:E4:77:B6:F6
Certificate issuer:       /CN=2CA2E9742BAFB03FFF8B4807AB9075FFCC310370
Certificate serial:       7E770B4C79D686ED92624D4CB8C1EFB35EB3A15E
Authority key identifier: 2C:A2:E9:74:2B:AF:B0:3F:FF:8B:48:07:AB:90:75:FF:CC:31:03:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/323830343a343431383a3a2f33322d3334203d3e20323637363032.roa
Signing time:             Thu 06 Mar 2025 08:07:40 +0000
ROA not before:           Thu 06 Mar 2025 08:02:40 +0000
ROA not after:            Thu 05 Mar 2026 08:07:40 +0000
asID:                     267602
IP address blocks:        2804:4418::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:77:0b:4c:79:d6:86:ed:92:62:4d:4c:b8:c1:ef:b3:5e:b3:a1:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CA2E9742BAFB03FFF8B4807AB9075FFCC310370
        Validity
            Not Before: Mar  6 08:02:40 2025 GMT
            Not After : Mar  5 08:07:40 2026 GMT
        Subject: CN=38740AEC9E43E212153E118DA5F83216E477B6F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:91:e0:3e:7c:6d:9e:d1:7c:de:af:be:24:b3:
                    b4:73:22:0d:9a:1f:17:29:cc:48:d9:4c:0b:ec:0b:
                    21:9e:f7:3b:33:56:f0:af:cc:76:16:df:7d:08:95:
                    43:7b:d7:4c:67:2f:5c:b5:ee:55:0d:c0:c2:ef:fc:
                    2a:7d:a1:82:e5:0b:91:9a:c4:72:36:ba:b4:2a:6a:
                    9d:65:49:9d:0b:4b:0c:a0:7a:32:99:39:6d:aa:f1:
                    83:29:b1:de:46:9b:8c:3e:7e:1d:a3:06:ab:7b:5a:
                    b8:e7:7e:88:d6:d2:94:96:8f:81:09:e2:83:ec:6e:
                    ac:d2:2d:62:aa:ca:6a:62:db:e8:c1:c9:7c:e0:ba:
                    75:09:36:f2:3e:7f:db:e2:38:96:a7:2c:96:93:da:
                    33:d7:6b:2f:76:cb:66:0d:55:13:44:90:ba:f6:65:
                    e6:23:e4:fa:09:a5:4b:0c:31:2e:f1:8d:16:07:db:
                    6c:ba:f9:d6:4d:24:5c:2a:3b:72:f4:b9:2f:2c:52:
                    be:61:b0:b0:9c:91:03:b2:89:4f:46:c8:34:f5:94:
                    af:4f:d9:b1:07:d8:06:94:b2:80:d1:d1:48:8d:c3:
                    9c:d2:12:35:54:30:9c:bf:0f:62:80:e3:c0:2b:86:
                    4f:45:20:81:42:58:18:c0:81:e2:56:85:cd:ff:6c:
                    1d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:74:0A:EC:9E:43:E2:12:15:3E:11:8D:A5:F8:32:16:E4:77:B6:F6
            X509v3 Authority Key Identifier:
                keyid:2C:A2:E9:74:2B:AF:B0:3F:FF:8B:48:07:AB:90:75:FF:CC:31:03:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/323830343a343431383a3a2f33322d3334203d3e20323637363032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4418::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:1b:2e:11:b8:2c:bd:b3:19:c5:0d:bb:88:4a:3a:69:31:59:
         7a:66:a0:04:86:d2:15:c7:a6:d2:59:c2:f7:a5:50:b6:31:b4:
         2d:33:92:06:68:6d:c3:aa:13:26:62:80:ed:90:79:f4:20:16:
         01:35:fa:85:4b:14:f3:cc:45:bc:9f:12:33:dc:ab:be:3e:7f:
         41:e4:35:65:3a:d0:c9:d6:79:d2:8e:cb:83:39:5e:a7:f3:c2:
         59:35:37:a9:09:57:33:cf:10:8f:50:53:f1:42:ed:39:99:56:
         d0:36:e3:61:48:98:59:fb:e8:7b:e1:d0:db:9f:2c:47:b5:ee:
         ca:d7:67:30:f7:98:a2:9d:bb:69:52:c3:ee:35:1d:8a:e9:c4:
         fd:93:45:a7:0a:3d:ba:5b:38:10:18:5f:10:2c:a1:ec:e0:79:
         61:da:92:7b:20:09:d1:28:70:3a:fb:34:b1:55:05:00:d5:4f:
         66:50:c0:e7:1b:96:e5:8a:e9:10:f3:7b:ba:9b:f5:bf:a0:58:
         9f:1f:94:37:5f:54:de:d3:fa:8b:c9:34:e6:b7:20:f3:33:20:
         a2:e2:10:42:b8:94:2d:a9:2b:8d:02:16:ef:95:bd:9a:8a:5d:
         f5:4c:8b:85:fb:b9:be:e6:10:6b:04:b0:06:8f:a6:c2:82:8b:
         54:fa:6f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:34:43 2025 by rpki-client