Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/323830343a363632633a3a2f33322d3438203d3e20323639353339.roa
File:                     323830343a363632633a3a2f33322d3438203d3e20323639353339.roa (raw, json)
Hash identifier:          10a8WVdf67BYzHZ/4um5JDepM/wmflB+IV/zbr9uyJo=
Subject key identifier:   69:E4:9D:EC:CF:37:91:09:4E:01:99:E5:74:91:41:65:29:FE:62:C0
Certificate issuer:       /CN=0019A6E4DACEDAE707C023B07492D05EFA9DA232
Certificate serial:       5BE1F3B53F6DA29040BB979BF845D5CD91622775
Authority key identifier: 00:19:A6:E4:DA:CE:DA:E7:07:C0:23:B0:74:92:D0:5E:FA:9D:A2:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0019A6E4DACEDAE707C023B07492D05EFA9DA232.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/323830343a363632633a3a2f33322d3438203d3e20323639353339.roa
Signing time:             Fri 03 Jan 2025 14:22:49 +0000
ROA not before:           Fri 03 Jan 2025 14:17:49 +0000
ROA not after:            Fri 02 Jan 2026 14:22:49 +0000
asID:                     269539
IP address blocks:        2804:662c::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:e1:f3:b5:3f:6d:a2:90:40:bb:97:9b:f8:45:d5:cd:91:62:27:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0019A6E4DACEDAE707C023B07492D05EFA9DA232
        Validity
            Not Before: Jan  3 14:17:49 2025 GMT
            Not After : Jan  2 14:22:49 2026 GMT
        Subject: CN=69E49DECCF3791094E0199E57491416529FE62C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:14:2e:e4:ee:a6:f8:86:89:c9:70:ca:b0:a4:
                    5a:87:8d:35:f3:56:a1:5e:5f:37:38:40:7c:5c:f6:
                    51:9f:b4:2e:4b:6a:3b:8e:2a:fb:79:37:c5:9e:c1:
                    fe:60:81:b8:b0:3b:e6:54:ae:40:d8:78:4e:3e:8a:
                    fb:7e:35:83:a8:c9:f5:fc:86:0f:46:a8:81:72:bd:
                    f9:25:87:14:25:a3:f5:0b:43:dc:2c:39:dc:e3:f4:
                    2f:23:32:2c:80:39:e7:a0:b2:4d:7c:80:72:f5:67:
                    07:c5:06:71:52:c9:92:93:52:f4:59:18:0f:a8:62:
                    07:a0:90:39:89:3d:19:45:b4:b1:4c:54:30:c2:85:
                    64:cb:51:10:ef:04:ea:74:b6:99:99:45:d9:1f:67:
                    ff:0f:ff:ab:97:ec:5f:2b:59:d4:c6:30:be:2a:00:
                    ef:3d:e1:85:e1:5f:d2:1a:a9:fa:86:06:a9:63:60:
                    ca:3c:4e:92:8d:e2:bf:07:b4:e3:91:1a:2d:b4:4a:
                    b7:08:42:30:c7:72:5b:19:b0:bd:00:68:44:ef:0d:
                    fe:78:a9:43:91:eb:2a:4e:0a:ac:9d:38:fd:bb:af:
                    ad:4e:51:e6:41:f6:ff:6b:9d:16:f2:39:86:fa:a6:
                    2c:13:17:64:c9:d4:26:5f:0e:d6:89:20:0e:f0:8c:
                    76:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E4:9D:EC:CF:37:91:09:4E:01:99:E5:74:91:41:65:29:FE:62:C0
            X509v3 Authority Key Identifier:
                keyid:00:19:A6:E4:DA:CE:DA:E7:07:C0:23:B0:74:92:D0:5E:FA:9D:A2:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/0019A6E4DACEDAE707C023B07492D05EFA9DA232.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0019A6E4DACEDAE707C023B07492D05EFA9DA232.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/323830343a363632633a3a2f33322d3438203d3e20323639353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:662c::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:36:08:27:fb:2e:ba:98:63:f3:3e:18:73:09:00:f4:3c:a9:
         3e:7c:c4:17:b2:ca:aa:f0:2f:c1:47:c6:f5:9b:95:ac:66:79:
         7e:61:97:9f:91:fc:6a:86:4c:86:a2:43:d1:0d:9a:a3:bb:14:
         c6:08:cf:35:b6:88:00:26:09:1e:9d:12:40:cd:99:9d:9d:47:
         fe:6a:c1:f2:8c:b4:83:8e:4f:97:cb:82:7e:bf:ba:9b:3c:e0:
         04:f0:bb:9d:1b:3f:88:2e:39:f1:36:f6:c3:d1:18:70:05:c8:
         47:dc:f7:8e:3c:08:69:a0:e9:80:e5:67:b4:8f:c7:1d:47:8d:
         70:51:b8:cd:03:d4:3c:38:e5:fe:cd:7c:9a:f3:16:25:e2:32:
         1f:f6:88:5f:55:f1:b3:ac:54:c1:ed:d0:6c:ba:d6:55:df:a7:
         52:58:9b:00:bb:ae:c2:19:84:c2:e3:7d:19:32:5b:e3:50:c0:
         3e:bc:6b:63:d0:74:d4:ff:85:f2:48:2f:f0:80:d6:81:da:ac:
         45:bd:fe:34:1e:a8:19:a3:b9:33:33:04:34:e9:18:05:a0:ac:
         d6:86:13:9f:3c:3f:ee:6f:b6:29:9f:3f:34:05:76:99:fb:02:
         f3:76:83:bd:8f:d2:e9:2e:82:11:f6:e4:de:1d:80:0e:57:c5:
         c4:6e:2c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:21:36 2025 by rpki-client