Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/323830343a326236633a3a2f33322d3438203d3e20323632373934.roa
File:                     323830343a326236633a3a2f33322d3438203d3e20323632373934.roa (raw, json)
Hash identifier:          9u0LOpZL+VmJyW4qyz/4mPmqfEXEYvZTZ4t9h9GQxMM=
Subject key identifier:   19:FF:DC:54:08:26:69:64:24:80:2A:1E:00:85:E1:F4:9A:3E:30:83
Certificate issuer:       /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial:       721A008DBEBECECA76E8EAB2CF339F3EA0AA53D4
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/323830343a326236633a3a2f33322d3438203d3e20323632373934.roa
Signing time:             Fri 03 May 2024 21:47:34 +0000
ROA not before:           Fri 03 May 2024 21:42:34 +0000
ROA not after:            Fri 02 May 2025 21:47:34 +0000
asID:                     262794
IP address blocks:        2804:2b6c::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:1a:00:8d:be:be:ce:ca:76:e8:ea:b2:cf:33:9f:3e:a0:aa:53:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=416296490F899DB0183C491C69520DEECF540394
        Validity
            Not Before: May  3 21:42:34 2024 GMT
            Not After : May  2 21:47:34 2025 GMT
        Subject: CN=19FFDC540826696424802A1E0085E1F49A3E3083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6b:82:8e:9c:ef:47:c0:2f:bf:ea:04:77:08:
                    d7:40:aa:65:ac:a1:c2:27:bb:da:50:bd:c4:a4:66:
                    31:04:32:8d:e4:f8:8f:35:20:49:38:dc:24:62:0f:
                    fa:8c:d6:8c:d0:b9:e1:b0:3a:06:87:a4:18:04:6e:
                    00:bf:05:8f:fd:5b:5d:58:80:75:97:1a:9e:49:e4:
                    43:1e:5e:4a:f0:15:ea:49:79:e8:ae:95:df:95:de:
                    a4:11:e6:ed:d7:48:b9:ef:2c:c5:49:0d:a7:c3:61:
                    ca:94:c9:6e:f0:c4:67:67:1a:b1:e3:da:ac:f9:dc:
                    5d:d3:81:31:23:4a:94:84:75:41:ff:13:69:fd:67:
                    91:a0:9d:3c:31:d8:91:74:ae:53:41:d2:39:26:b3:
                    3b:75:da:2f:58:8d:48:b1:0c:a4:e5:a0:ce:21:01:
                    ec:73:7b:97:58:83:8d:9e:5d:b4:4f:39:2d:74:84:
                    91:7e:06:3a:75:01:53:c3:c2:4d:4a:7f:26:74:e6:
                    38:94:d4:45:5b:b9:4c:91:7b:e7:f2:7c:24:ee:3e:
                    0a:13:4a:4e:2d:23:43:20:8f:d8:79:7b:f4:02:23:
                    86:6a:3a:3b:52:4b:75:ad:79:b3:06:1a:d6:4f:18:
                    04:a9:91:e6:23:21:4f:c1:36:81:a4:da:7e:e2:9c:
                    81:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:FF:DC:54:08:26:69:64:24:80:2A:1E:00:85:E1:F4:9A:3E:30:83
            X509v3 Authority Key Identifier:
                keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/323830343a326236633a3a2f33322d3438203d3e20323632373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b6c::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:2e:79:87:d4:6a:b6:6e:4d:a1:46:4f:eb:ed:20:c1:0c:40:
         44:50:6e:cb:d5:25:45:21:34:a4:b0:e4:cc:9f:53:9f:e3:fb:
         45:6c:a8:1e:ac:59:23:9c:7c:17:94:ed:a6:15:0d:1a:1a:f9:
         41:24:88:cc:64:fc:f9:fc:e0:b5:35:2a:0b:55:a2:3e:0e:ad:
         ea:24:a1:f2:51:e7:65:42:8e:56:fa:17:1b:d8:2d:44:fb:95:
         64:56:33:2a:41:46:64:22:fe:21:ea:39:e2:25:ac:c5:b6:89:
         5d:75:0d:74:7f:ec:cb:9e:4c:83:05:58:65:74:93:96:10:99:
         b6:ab:c7:01:07:84:8a:57:00:4a:d9:98:57:bf:ec:a4:8e:d4:
         52:0a:c9:d4:f1:2f:ae:64:d2:6b:9f:b2:4f:4d:35:c0:cb:d6:
         a2:47:50:68:5f:8b:92:65:44:b0:d6:88:36:55:6a:37:bd:01:
         13:6f:82:a3:3c:63:20:d1:93:ab:a3:82:b8:c5:62:81:2c:e7:
         99:6f:01:e8:19:ce:46:6e:8f:42:20:1d:13:0a:2d:7b:61:aa:
         63:ed:d4:dc:31:c3:ca:ca:02:ca:bd:77:07:4e:16:ea:b7:6b:
         44:20:3a:f1:19:f9:78:86:cd:62:69:a1:94:08:94:c9:c1:d5:
         16:06:29:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 10:08:40 2025 by rpki-client