Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/323830343a323161343a3a2f33322d3438203d3e203533313930.roa
File:                     323830343a323161343a3a2f33322d3438203d3e203533313930.roa (raw, json)
Hash identifier:          M0KJem+7CkAiQq2quLB4YUGLoXGDYta9PyFPV03r2OM=
Subject key identifier:   22:02:3A:0C:BD:B6:7F:1E:4A:DA:4F:59:55:D9:07:EA:9F:25:A8:0B
Certificate issuer:       /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial:       25E59FB91366245CA8B68A744A45F13373A03B09
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/323830343a323161343a3a2f33322d3438203d3e203533313930.roa
Signing time:             Fri 03 May 2024 21:36:38 +0000
ROA not before:           Fri 03 May 2024 21:31:38 +0000
ROA not after:            Fri 02 May 2025 21:36:38 +0000
asID:                     53190
IP address blocks:        2804:21a4::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:e5:9f:b9:13:66:24:5c:a8:b6:8a:74:4a:45:f1:33:73:a0:3b:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=416296490F899DB0183C491C69520DEECF540394
        Validity
            Not Before: May  3 21:31:38 2024 GMT
            Not After : May  2 21:36:38 2025 GMT
        Subject: CN=22023A0CBDB67F1E4ADA4F5955D907EA9F25A80B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e7:26:49:fd:f1:e4:32:1b:9b:dd:62:0d:d1:
                    6d:49:dc:9d:58:44:bb:42:93:01:ef:d8:b1:7a:a6:
                    87:54:27:18:f6:1c:00:68:a7:5e:33:1e:5a:b0:46:
                    75:ea:3c:79:df:fa:bd:cb:6d:0e:54:87:e0:d6:8a:
                    c1:07:b7:f9:ba:cc:7d:e3:ae:00:a5:4a:51:f2:b8:
                    df:5d:68:df:38:d4:23:73:cc:2f:53:ac:4e:c0:1f:
                    28:99:e9:33:9f:b3:b2:20:f0:77:e0:8c:a2:ee:44:
                    18:61:8a:8d:61:3c:70:a1:b9:ef:7c:74:1c:9c:c2:
                    4e:49:b9:55:3d:a5:b1:32:21:18:77:1d:50:82:5c:
                    d9:5e:b8:60:35:71:b2:5d:91:ee:3f:d3:2d:b5:38:
                    21:a5:88:be:75:98:29:52:af:63:4c:a5:73:9b:8f:
                    78:e2:ab:8d:dd:b8:f0:1b:ed:b9:9c:74:ba:87:23:
                    35:77:b4:80:77:d5:05:30:31:42:55:9a:cc:ee:48:
                    25:3d:f1:bb:88:3a:74:70:0f:1b:1a:79:4d:c9:53:
                    87:fe:7e:cb:76:3e:f8:5d:29:8d:10:1d:1d:6f:ee:
                    29:d1:d3:37:cc:83:e8:68:4d:4a:cb:b9:89:be:7b:
                    2f:a5:32:05:7d:68:fa:eb:01:3c:84:b4:50:36:b8:
                    86:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:02:3A:0C:BD:B6:7F:1E:4A:DA:4F:59:55:D9:07:EA:9F:25:A8:0B
            X509v3 Authority Key Identifier:
                keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/323830343a323161343a3a2f33322d3438203d3e203533313930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:21a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:da:77:31:a5:e0:c7:a7:ce:df:34:9c:99:64:02:bb:e1:7a:
         fd:6a:f1:b3:0c:46:b6:f0:92:ce:da:41:33:1b:8c:e2:62:dc:
         4a:77:c3:a2:dd:38:ff:2c:f5:52:35:78:2d:00:66:3f:ba:64:
         c0:34:76:c6:f9:78:c5:4a:1f:7c:bd:53:f8:62:92:68:97:e1:
         59:17:6c:40:7a:cc:c6:04:6d:c7:38:70:5c:7e:cf:03:f2:15:
         a2:88:cb:16:9b:6f:51:5a:46:2c:ae:db:1f:33:b2:c4:e6:e6:
         ba:8a:41:91:ad:be:ef:dc:61:47:00:fb:20:37:2a:44:8b:6d:
         88:f2:10:da:c7:8a:92:92:9c:46:f4:1a:74:14:18:97:6c:e2:
         bf:14:19:ec:d7:f6:be:ad:a6:9c:80:3d:e3:78:0e:89:d9:c2:
         da:d1:f3:8d:0b:dc:a9:27:a7:16:b5:7a:ac:16:de:1d:fe:dc:
         80:c8:b7:b0:b1:0b:22:6c:c3:fd:3f:59:ea:be:de:42:0c:4b:
         c0:9d:59:7b:38:45:99:ce:0e:0f:1f:88:b2:9d:6a:46:4c:8c:
         17:59:71:5c:ec:86:7a:ce:f0:ab:bd:a4:05:a6:1e:18:4f:4e:
         36:0e:70:e6:b0:04:1c:80:80:1b:64:48:6f:15:8c:89:5d:9d:
         96:31:6b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 03:32:16 2025 by rpki-client