Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/MYsWh1JBtSpAcrURcKsAu1Rk8ho3RMdaHGJrPUg4V1Q/1/323830343a343436303a343030303a3a2f33362d3336203d3e20323637363239.roa
File:                     323830343a343436303a343030303a3a2f33362d3336203d3e20323637363239.roa (raw, json)
Hash identifier:          cTLGybw3VbiDZ1LvrIPgL0MEMt/3EwejFJig67HrcUc=
Subject key identifier:   E3:0E:BB:BA:67:BC:E5:84:27:E9:16:A4:DD:D1:12:97:5B:78:0E:E4
Certificate issuer:       /CN=A5AD03985B5804EFACADF9D490164F54BBE0D71C
Certificate serial:       42CE2A123525AD94FB76BC47EB4CC254EB9792F0
Authority key identifier: A5:AD:03:98:5B:58:04:EF:AC:AD:F9:D4:90:16:4F:54:BB:E0:D7:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5AD03985B5804EFACADF9D490164F54BBE0D71C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/MYsWh1JBtSpAcrURcKsAu1Rk8ho3RMdaHGJrPUg4V1Q/1/323830343a343436303a343030303a3a2f33362d3336203d3e20323637363239.roa
Signing time:             Thu 04 Apr 2024 03:16:02 +0000
ROA not before:           Thu 04 Apr 2024 03:11:02 +0000
ROA not after:            Thu 03 Apr 2025 03:16:02 +0000
asID:                     267629
IP address blocks:        2804:4460:4000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:ce:2a:12:35:25:ad:94:fb:76:bc:47:eb:4c:c2:54:eb:97:92:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5AD03985B5804EFACADF9D490164F54BBE0D71C
        Validity
            Not Before: Apr  4 03:11:02 2024 GMT
            Not After : Apr  3 03:16:02 2025 GMT
        Subject: CN=E30EBBBA67BCE58427E916A4DDD112975B780EE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:63:cd:d9:0a:1e:6c:91:98:2f:f8:5b:c6:77:
                    d9:27:79:df:93:45:23:bc:f2:7c:66:4a:a1:44:f6:
                    83:2b:86:cb:f6:0c:35:b9:1c:36:ba:5b:14:40:ab:
                    d9:d4:f1:cc:b0:04:a5:98:96:b3:9a:f5:f0:44:4b:
                    79:9f:47:5f:6a:72:f6:6e:86:20:57:6d:f7:37:ef:
                    06:ae:e0:43:56:73:42:81:90:44:ab:f8:4c:8e:0d:
                    dc:4d:bc:1d:6c:35:fd:5c:9b:af:34:0d:0e:ab:f0:
                    12:86:e3:e6:98:6a:69:bf:5a:31:a7:44:0d:d8:4f:
                    75:78:66:40:8b:ae:c4:18:15:0d:fa:45:9b:ca:78:
                    ce:fa:08:7c:ec:a8:ca:04:39:7c:de:6a:7e:11:9d:
                    8e:a6:75:27:e2:86:0d:28:df:46:24:3b:1a:c6:40:
                    27:e0:03:90:6e:ae:33:aa:21:b4:bf:2c:62:18:10:
                    83:3b:9f:a1:82:cb:6f:f6:ce:1a:d6:1e:1c:45:de:
                    4a:f0:60:c3:95:8c:6a:2d:14:fb:35:2d:79:b4:4f:
                    3b:68:b8:03:d1:9b:0e:f1:fe:45:33:d7:2f:81:78:
                    3d:e7:4d:aa:d2:84:e5:dc:85:da:e6:7f:80:2b:b9:
                    ad:8f:1f:1a:73:7a:2f:52:4e:84:e3:cc:63:e8:a3:
                    ff:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:0E:BB:BA:67:BC:E5:84:27:E9:16:A4:DD:D1:12:97:5B:78:0E:E4
            X509v3 Authority Key Identifier:
                keyid:A5:AD:03:98:5B:58:04:EF:AC:AD:F9:D4:90:16:4F:54:BB:E0:D7:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/MYsWh1JBtSpAcrURcKsAu1Rk8ho3RMdaHGJrPUg4V1Q/1/A5AD03985B5804EFACADF9D490164F54BBE0D71C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5AD03985B5804EFACADF9D490164F54BBE0D71C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/MYsWh1JBtSpAcrURcKsAu1Rk8ho3RMdaHGJrPUg4V1Q/1/323830343a343436303a343030303a3a2f33362d3336203d3e20323637363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4460:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         89:44:21:7f:6a:ec:a2:3b:02:b9:37:fb:7d:75:49:59:df:91:
         f7:fc:cb:9b:e8:9b:1f:1e:17:33:6c:77:cd:bf:11:3a:7c:55:
         fb:46:83:97:4e:08:7d:49:3b:ec:af:19:71:2c:88:8e:d5:30:
         30:64:44:06:10:94:a4:49:3c:78:45:fe:b7:5a:db:11:02:1a:
         0c:2f:0f:0d:76:d8:f4:d6:eb:e5:38:f6:23:99:2b:ad:e7:ca:
         e1:48:ba:21:f5:e6:0d:b8:c6:30:45:d4:0e:ff:7c:53:0c:91:
         b3:3c:f8:b1:33:c9:e9:d8:95:d2:52:40:cc:aa:4d:ea:95:42:
         ea:05:2b:56:c6:46:9a:01:97:04:8a:6c:cc:f2:16:bb:2b:fe:
         84:a9:4a:bf:dd:6e:24:6c:98:a9:8a:8a:2b:9e:91:72:5d:a9:
         af:a0:e8:16:fe:ca:25:00:b8:ef:8d:00:24:93:f3:ac:9e:6f:
         2f:ee:0b:b1:a7:d9:9c:b3:a1:dc:15:6a:02:c2:38:7b:66:14:
         d4:b6:a6:f1:50:d1:64:aa:ed:6e:a9:b7:d7:8e:b2:4a:db:e0:
         c5:0d:76:e0:f9:05:13:57:78:38:c4:8f:5c:23:96:7c:30:49:
         ba:5a:23:45:21:99:f6:19:a6:7c:a0:25:73:db:c4:10:88:50:
         d9:d0:59:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:24 2025 by rpki-client