Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Vtbkx4KTL9qNX6oFjGE7Fx5XWpgwMbprPr58JBnHRGd/0/323830343a323134343a3a2f33322d3438203d3e203532373935.roa
File:                     323830343a323134343a3a2f33322d3438203d3e203532373935.roa (raw, json)
Hash identifier:          ChaNFzdneE66eRzT+k3Dy7oxDB++CDkWEn78OlEfIyI=
Subject key identifier:   12:8E:09:43:DA:07:DD:9B:9E:8B:88:EA:7B:57:63:05:EF:3F:88:F3
Certificate issuer:       /CN=9901424A1C0C11086F07F736ECE94A4814F0E7CC
Certificate serial:       4643E3F9DC41099B45A2CD4FFBA3D80E2EC3EECA
Authority key identifier: 99:01:42:4A:1C:0C:11:08:6F:07:F7:36:EC:E9:4A:48:14:F0:E7:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9901424A1C0C11086F07F736ECE94A4814F0E7CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Vtbkx4KTL9qNX6oFjGE7Fx5XWpgwMbprPr58JBnHRGd/0/323830343a323134343a3a2f33322d3438203d3e203532373935.roa
Signing time:             Tue 04 Feb 2025 19:49:57 +0000
ROA not before:           Tue 04 Feb 2025 19:44:57 +0000
ROA not after:            Tue 03 Feb 2026 19:49:57 +0000
asID:                     52795
IP address blocks:        2804:2144::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:43:e3:f9:dc:41:09:9b:45:a2:cd:4f:fb:a3:d8:0e:2e:c3:ee:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9901424A1C0C11086F07F736ECE94A4814F0E7CC
        Validity
            Not Before: Feb  4 19:44:57 2025 GMT
            Not After : Feb  3 19:49:57 2026 GMT
        Subject: CN=128E0943DA07DD9B9E8B88EA7B576305EF3F88F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:eb:f8:0c:83:e6:cc:af:64:11:a0:05:24:75:
                    a0:f5:e9:b8:a7:78:df:92:3a:54:04:dd:aa:09:37:
                    61:20:e3:9e:2c:ff:ff:7c:9e:8a:ad:41:05:b3:4f:
                    95:1f:a1:08:4e:b3:a4:fb:7e:4b:4c:a4:60:1b:eb:
                    50:b4:fc:69:f1:43:fb:e0:89:ae:aa:89:7b:e6:12:
                    b4:fe:38:2c:4e:a7:aa:35:30:cf:36:2e:40:94:47:
                    4c:d1:86:3a:e6:f8:50:e8:f9:b0:fb:1d:03:c8:c9:
                    21:aa:d0:81:db:06:bc:81:23:fa:25:f0:f3:2e:b6:
                    08:81:90:2c:12:b9:c2:33:94:07:cf:b8:b8:1f:22:
                    14:f1:6c:69:40:bb:98:b2:34:98:e0:70:7e:b0:cc:
                    b3:bd:82:2b:70:ee:65:84:52:65:47:90:c9:9d:97:
                    44:ee:de:0b:fb:73:b7:06:a5:4e:03:57:f7:f4:f4:
                    38:a8:8e:75:32:50:0b:93:3b:9a:4d:51:48:ec:17:
                    57:a5:b8:0a:25:bd:80:ce:fa:1a:84:80:3c:f4:7f:
                    4b:db:01:1e:1f:61:be:75:82:b1:76:91:47:29:71:
                    16:6f:6b:57:d7:c5:34:bc:de:39:d5:1d:1e:56:4f:
                    ee:1e:b5:8e:93:00:35:2e:5f:5a:8c:0d:0b:e0:af:
                    cf:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:8E:09:43:DA:07:DD:9B:9E:8B:88:EA:7B:57:63:05:EF:3F:88:F3
            X509v3 Authority Key Identifier:
                keyid:99:01:42:4A:1C:0C:11:08:6F:07:F7:36:EC:E9:4A:48:14:F0:E7:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Vtbkx4KTL9qNX6oFjGE7Fx5XWpgwMbprPr58JBnHRGd/0/9901424A1C0C11086F07F736ECE94A4814F0E7CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9901424A1C0C11086F07F736ECE94A4814F0E7CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Vtbkx4KTL9qNX6oFjGE7Fx5XWpgwMbprPr58JBnHRGd/0/323830343a323134343a3a2f33322d3438203d3e203532373935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2144::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:36:a4:df:0c:30:11:f2:30:8e:51:25:9f:89:16:76:3c:42:
         e0:4d:b5:6a:49:9c:ba:cf:61:95:1d:3f:f9:e3:10:ef:18:45:
         59:50:f2:9a:64:a0:24:1f:e2:e5:42:0d:eb:2c:cc:0d:d4:b2:
         07:8a:1d:2f:97:36:ba:12:51:ad:da:9d:65:d4:a0:f7:7a:cc:
         2a:a1:b4:a0:05:80:e2:59:6d:54:8f:a7:12:87:88:8f:80:66:
         fd:e2:8f:7c:c6:28:1d:1f:68:75:59:cd:d3:7d:26:b6:af:5b:
         28:82:ce:2a:f8:65:a1:cb:e1:b8:c6:35:60:dc:dc:39:63:ee:
         bb:a0:c4:4d:a9:35:df:57:97:1f:04:70:7f:9b:b2:2f:f3:e6:
         d1:81:9c:b0:b7:66:34:9d:98:2c:fb:24:23:c5:a3:30:5a:25:
         1c:ba:41:b5:c8:c6:34:96:04:b7:ee:f5:f2:e5:ec:b2:f7:01:
         2e:41:96:21:e3:1a:5d:2e:15:ac:e6:c9:08:83:21:19:7b:2b:
         79:31:34:00:26:61:a5:d5:b8:98:68:b2:39:3c:19:b8:f0:f2:
         15:fb:77:ef:dd:fe:39:a7:e9:b6:af:c6:92:7e:6f:c5:46:93:
         05:3b:c3:bc:5e:a2:33:3d:2b:61:36:a1:f8:50:39:54:22:26:
         49:41:f3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:08:37 2025 by rpki-client