Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/323830343a383434633a633030303a3a2f33342d3334203d3e20323732323532.roa
File:                     323830343a383434633a633030303a3a2f33342d3334203d3e20323732323532.roa (raw, json)
Hash identifier:          e56QI9Ucf7i8qMdl/l37n3vcefDsWk00k2G1EZyW7Tc=
Subject key identifier:   3F:32:60:2E:FB:AF:9D:B5:27:EB:D5:97:59:CF:66:52:B0:83:00:66
Certificate issuer:       /CN=1D5955A8F874129F0C236C5E0F4A977609D094F7
Certificate serial:       7626FA74D966295BD25966E2710710F66554668C
Authority key identifier: 1D:59:55:A8:F8:74:12:9F:0C:23:6C:5E:0F:4A:97:76:09:D0:94:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D5955A8F874129F0C236C5E0F4A977609D094F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/323830343a383434633a633030303a3a2f33342d3334203d3e20323732323532.roa
Signing time:             Fri 31 Jan 2025 12:34:48 +0000
ROA not before:           Fri 31 Jan 2025 12:29:48 +0000
ROA not after:            Fri 30 Jan 2026 12:34:48 +0000
asID:                     272252
IP address blocks:        2804:844c:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:26:fa:74:d9:66:29:5b:d2:59:66:e2:71:07:10:f6:65:54:66:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D5955A8F874129F0C236C5E0F4A977609D094F7
        Validity
            Not Before: Jan 31 12:29:48 2025 GMT
            Not After : Jan 30 12:34:48 2026 GMT
        Subject: CN=3F32602EFBAF9DB527EBD59759CF6652B0830066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:76:12:49:fc:fe:e7:77:05:72:02:b9:29:51:
                    5b:04:80:08:48:0c:3f:7a:e1:19:69:32:42:e4:aa:
                    6b:a7:a0:1a:6f:4d:da:3a:be:d6:9c:37:75:a6:92:
                    db:d7:9c:5b:0f:99:1c:75:6d:26:49:b6:2e:10:a9:
                    76:c5:68:9a:17:5f:3a:90:a2:cf:94:29:88:48:d5:
                    e1:59:e6:4c:a0:68:62:d0:ca:87:22:70:6e:51:fb:
                    4a:78:ff:8b:c0:cd:c0:ca:79:86:e4:28:51:56:2e:
                    06:98:9d:1c:41:20:82:88:f2:a4:02:a1:b5:ef:9c:
                    e6:bb:3f:15:60:f6:b8:ef:7e:76:17:f4:fe:23:94:
                    b8:c6:23:27:dc:77:69:e3:94:ff:c2:94:4c:ae:5c:
                    d8:d1:c9:2a:21:1a:50:e5:9b:80:63:63:33:e5:5a:
                    3d:45:98:cc:49:98:b3:7f:58:80:e9:a6:1b:50:a9:
                    b7:c2:bf:9c:f6:c0:34:d1:b4:8d:12:ef:6d:4b:59:
                    85:59:5e:ae:d2:d5:19:e8:a8:5f:ac:32:36:e1:83:
                    2a:8b:9f:c8:d5:3c:70:3e:ae:86:d2:6c:10:3b:2e:
                    ce:8d:c2:ed:59:37:03:91:58:38:19:15:bd:46:99:
                    74:12:4c:11:7c:b7:fe:e9:68:60:68:63:b6:77:c2:
                    35:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:32:60:2E:FB:AF:9D:B5:27:EB:D5:97:59:CF:66:52:B0:83:00:66
            X509v3 Authority Key Identifier:
                keyid:1D:59:55:A8:F8:74:12:9F:0C:23:6C:5E:0F:4A:97:76:09:D0:94:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/1D5955A8F874129F0C236C5E0F4A977609D094F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D5955A8F874129F0C236C5E0F4A977609D094F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/323830343a383434633a633030303a3a2f33342d3334203d3e20323732323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:844c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         c0:50:25:e2:df:eb:b8:3e:5d:54:a9:ef:6a:a2:c2:de:b0:f7:
         e2:e0:eb:2e:3b:38:a2:3a:c7:55:7f:60:85:04:9e:79:f2:71:
         0c:5d:16:e9:e8:47:43:7d:bc:e5:ab:cc:fc:91:1a:0c:6c:9c:
         97:13:83:e6:a3:54:c1:a5:75:ca:49:93:35:ea:57:2f:82:f9:
         38:27:6d:78:b8:4c:41:0a:c3:31:a3:37:7c:a4:1b:e7:57:d8:
         97:c9:02:ef:ed:e4:49:73:71:58:39:1e:a2:a0:13:63:1e:2f:
         1d:2b:e3:e3:b6:cd:79:53:70:3f:96:7a:43:fd:13:14:eb:ed:
         05:2f:8c:57:1b:ca:4c:a9:e9:ed:3c:80:f2:72:bf:d6:fe:66:
         f0:a9:ba:f0:b1:9f:ee:0e:8d:cb:c4:58:38:31:8b:0f:0f:3a:
         87:d9:66:17:3a:ac:61:b9:45:70:85:09:3f:39:e4:51:b0:35:
         cb:77:cb:04:84:52:d1:6a:4e:77:b8:2b:57:c7:35:d0:4f:fa:
         80:08:40:72:54:6a:21:93:2d:4e:18:f7:9b:0c:cc:ab:e5:60:
         da:b1:7b:eb:fe:43:aa:06:02:87:32:22:1a:4c:54:0f:40:30:
         9c:b7:c1:63:63:99:9e:10:32:88:81:a8:be:6a:25:ae:b6:d8:
         f6:b2:c5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 23:25:32 2025 by rpki-client