Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/323830343a3935303a3a2f33322d3438203d3e20323633303732.roa
File:                     323830343a3935303a3a2f33322d3438203d3e20323633303732.roa (raw, json)
Hash identifier:          0TqM/1KAVvR2yNkcWumZxLGU6OBSp0KQfRo0gDc93EA=
Subject key identifier:   21:79:05:7B:D4:49:FF:EF:7B:A2:D0:81:DC:BB:35:FE:F8:71:66:39
Certificate issuer:       /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial:       21A1FB3B3EC81F9B557F97C5A713638529170CBC
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/323830343a3935303a3a2f33322d3438203d3e20323633303732.roa
Signing time:             Fri 03 May 2024 21:49:06 +0000
ROA not before:           Fri 03 May 2024 21:44:06 +0000
ROA not after:            Fri 02 May 2025 21:49:06 +0000
asID:                     263072
IP address blocks:        2804:950::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:a1:fb:3b:3e:c8:1f:9b:55:7f:97:c5:a7:13:63:85:29:17:0c:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=416296490F899DB0183C491C69520DEECF540394
        Validity
            Not Before: May  3 21:44:06 2024 GMT
            Not After : May  2 21:49:06 2025 GMT
        Subject: CN=2179057BD449FFEF7BA2D081DCBB35FEF8716639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:07:6f:af:14:fa:aa:56:e9:cf:34:13:4d:2a:
                    d4:cd:a1:28:86:96:a5:9b:2e:54:c1:2e:83:39:01:
                    0d:d3:2d:d9:66:47:e3:a6:6c:aa:a7:20:42:51:62:
                    6a:fb:30:a8:83:1c:9b:8d:5e:3f:0e:24:3f:a3:ea:
                    51:84:bc:ef:68:57:92:eb:cd:0d:b0:64:56:e9:86:
                    f0:f5:fb:9b:11:23:bb:2a:9c:c0:34:5a:cb:ca:97:
                    06:70:58:b7:40:7c:3f:aa:b3:83:b3:4f:39:59:78:
                    c6:36:c3:c9:af:94:c6:9d:29:aa:9b:59:6c:99:fc:
                    1e:35:0c:2e:93:a0:4a:a7:54:44:c4:75:19:9c:93:
                    ef:9b:ad:06:5b:c6:d0:6d:d4:47:c3:7a:1d:74:ee:
                    3d:8b:65:d4:a4:9f:3f:76:61:62:c3:64:a1:95:6d:
                    f7:90:02:fa:33:60:70:78:53:53:2a:8f:45:6a:91:
                    c6:db:ac:cc:77:40:9d:78:dc:e2:1b:85:9f:de:42:
                    6f:c5:18:17:69:72:31:ef:7b:4a:bb:40:7a:81:be:
                    36:13:dc:fd:68:6a:ba:61:88:3c:df:15:13:a5:9d:
                    c8:52:98:6e:92:d6:ee:18:79:92:be:22:df:7d:a1:
                    4c:1b:b5:f6:cf:bb:f5:39:5d:a0:4a:73:75:a1:12:
                    d2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:79:05:7B:D4:49:FF:EF:7B:A2:D0:81:DC:BB:35:FE:F8:71:66:39
            X509v3 Authority Key Identifier:
                keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/323830343a3935303a3a2f33322d3438203d3e20323633303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:950::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:02:51:c1:5d:2e:b9:2b:7d:52:19:e9:d2:d5:7d:a9:3d:e2:
         70:7e:9f:aa:8a:de:a7:ee:0a:84:88:84:e6:83:9f:63:d1:fb:
         3e:87:c0:73:4e:21:0d:83:f5:0c:d5:4f:cb:b4:0a:28:a0:7a:
         df:a3:b4:87:41:05:17:ad:22:30:99:e6:94:c7:93:f9:f9:79:
         fa:74:5e:44:dd:27:a1:30:9b:3f:1f:48:35:2f:5e:ae:a1:23:
         d3:2e:12:37:2b:1d:01:b5:84:6e:9d:0c:9b:76:74:dd:b5:73:
         b9:2a:1e:ab:2b:05:e3:cc:54:90:3e:4c:91:91:78:86:cd:19:
         55:25:cd:67:31:1e:3d:44:4e:75:e8:4b:93:7a:4f:72:95:a2:
         4d:9c:1f:a2:0b:3a:71:64:df:74:fd:c6:58:66:94:ef:75:62:
         a8:c0:c4:38:6b:63:67:45:42:2c:cb:56:3d:4e:f6:91:2b:15:
         3d:1f:d3:1b:13:ca:0b:31:89:80:fb:0b:ea:3c:5c:96:3a:b2:
         da:22:7f:31:19:7e:f2:34:e2:53:7d:79:33:30:a7:5a:f9:af:
         52:85:1e:e7:93:a1:81:af:92:b0:d4:e2:06:ec:88:cc:c8:b6:
         48:4f:3c:6a:ad:65:f9:96:b2:37:f2:94:15:14:de:24:e2:14:
         74:93:95:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 03:30:17 2025 by rpki-client