Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HirWxfy9dche4bZCpxKKbeQWEVZQWvHCtrCX1RRuC8eW/0/323830343a326234343a3a2f33322d3430203d3e20323635313434.roa
File:                     323830343a326234343a3a2f33322d3430203d3e20323635313434.roa (raw, json)
Hash identifier:          AnekpAc/Oc4lZ3snJPiUknpoxts/8Yuldk0ykd9vUII=
Subject key identifier:   02:3C:B4:C0:86:D3:59:2E:39:43:D9:BA:1C:61:95:98:42:D4:EA:C8
Certificate issuer:       /CN=251E346CD4BEE6D08C7C5EF00BB3C7C2676974E3
Certificate serial:       0F10F2260C2C5F2804BD18966B034165B5FAF712
Authority key identifier: 25:1E:34:6C:D4:BE:E6:D0:8C:7C:5E:F0:0B:B3:C7:C2:67:69:74:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/251E346CD4BEE6D08C7C5EF00BB3C7C2676974E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HirWxfy9dche4bZCpxKKbeQWEVZQWvHCtrCX1RRuC8eW/0/323830343a326234343a3a2f33322d3430203d3e20323635313434.roa
Signing time:             Tue 21 Nov 2023 13:41:02 +0000
ROA not before:           Tue 21 Nov 2023 13:36:02 +0000
ROA not after:            Tue 19 Nov 2024 13:41:02 +0000
asID:                     265144
IP address blocks:        2804:2b44::/32 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:10:f2:26:0c:2c:5f:28:04:bd:18:96:6b:03:41:65:b5:fa:f7:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=251E346CD4BEE6D08C7C5EF00BB3C7C2676974E3
        Validity
            Not Before: Nov 21 13:36:02 2023 GMT
            Not After : Nov 19 13:41:02 2024 GMT
        Subject: CN=023CB4C086D3592E3943D9BA1C61959842D4EAC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d2:6e:45:63:ac:4e:b8:d8:aa:a6:13:45:fa:
                    f5:44:c4:c6:44:b9:f7:2c:2d:60:42:16:97:52:d8:
                    96:83:0b:7a:e7:67:7c:b7:73:b9:4d:39:64:1f:f4:
                    12:a7:98:b1:e8:3c:16:82:f6:11:ec:21:97:5a:3d:
                    79:d8:53:1e:c7:5f:44:44:75:47:af:36:12:85:6d:
                    c4:37:b4:c3:19:2b:38:a2:e8:6a:25:73:a9:d2:97:
                    c7:ba:cb:c2:27:9a:0c:67:f0:34:23:08:cd:20:7b:
                    ee:47:09:23:80:c6:0d:22:f3:a9:ae:2e:28:aa:c7:
                    f3:2d:8a:d3:e4:7f:5e:f7:d6:8a:f3:69:9d:73:c7:
                    f3:da:50:31:10:f1:14:8b:d5:49:31:e1:3c:ad:56:
                    8f:20:e8:0d:9e:c7:ad:b3:c2:e5:56:9d:5b:ed:46:
                    38:5f:44:c2:62:b5:c0:59:e5:2f:cb:ca:9a:12:9b:
                    bb:be:fa:89:ed:6f:60:50:68:1b:6b:50:17:bf:3a:
                    e6:d0:85:28:92:0d:c3:f8:d6:11:64:0f:a6:3b:3f:
                    86:aa:4a:83:f0:cc:05:4a:02:c9:53:db:36:df:df:
                    35:93:1a:bb:49:59:70:3d:5d:77:86:70:0b:fc:da:
                    cf:77:42:30:49:82:47:a5:00:47:bc:74:32:5f:3a:
                    5c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:3C:B4:C0:86:D3:59:2E:39:43:D9:BA:1C:61:95:98:42:D4:EA:C8
            X509v3 Authority Key Identifier:
                keyid:25:1E:34:6C:D4:BE:E6:D0:8C:7C:5E:F0:0B:B3:C7:C2:67:69:74:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HirWxfy9dche4bZCpxKKbeQWEVZQWvHCtrCX1RRuC8eW/0/251E346CD4BEE6D08C7C5EF00BB3C7C2676974E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/251E346CD4BEE6D08C7C5EF00BB3C7C2676974E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HirWxfy9dche4bZCpxKKbeQWEVZQWvHCtrCX1RRuC8eW/0/323830343a326234343a3a2f33322d3430203d3e20323635313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b44::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:23:4d:00:54:f6:aa:b5:b1:b9:0c:5e:fb:aa:42:50:e6:35:
         92:99:0f:51:e2:0f:02:96:1d:01:f1:f4:97:d9:a5:3e:48:4f:
         48:2e:8c:7c:48:2f:a4:74:83:dd:cf:07:33:85:e4:1e:5f:fb:
         c2:44:b2:33:05:06:27:3d:d0:b8:3c:4e:4b:76:b3:01:33:4e:
         7e:23:2d:c0:f2:6a:f0:48:a0:d9:a4:f5:d1:f8:ad:f5:e5:a1:
         e6:2a:fb:c0:69:1e:20:e4:5a:c5:5f:6a:3f:55:83:81:40:a6:
         db:49:95:5c:e6:e0:a6:6c:65:f1:8e:a4:b6:41:3b:ec:e8:60:
         bb:53:d4:73:94:8a:ff:cc:e1:15:78:74:cb:9f:8d:b1:6c:0e:
         cd:2e:e2:a4:a2:49:bd:ec:62:3d:33:11:08:09:fb:15:65:a1:
         46:87:d1:c1:59:6c:3b:b9:14:e8:be:4d:2e:dc:e5:ff:60:5f:
         05:d4:3b:be:13:8a:b3:81:5f:e1:4f:48:55:f9:aa:87:fe:99:
         c8:71:1f:16:b0:3c:97:10:ed:25:5d:ad:e2:57:56:b5:60:97:
         59:a7:0b:3f:cd:57:33:c6:b8:8e:64:ab:f7:45:9d:36:ab:13:
         84:cd:f7:cb:c4:ce:c9:49:5c:44:1f:bb:5b:de:3d:f1:7c:8d:
         b1:ce:61:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:42:45 2025 by rpki-client