Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/323830343a323139303a3a2f33322d3634203d3e20323634353632.roa
File:                     323830343a323139303a3a2f33322d3634203d3e20323634353632.roa (raw, json)
Hash identifier:          jYqZ76I964kaOaMmsQpy6u6eL4PFlKvQfLtN2IpqrVY=
Subject key identifier:   38:07:4E:A8:11:C8:CE:B3:D0:36:BC:7A:A9:E4:8A:E3:86:05:49:55
Certificate issuer:       /CN=0BDA5776E6D96F40CC3E4E7ACB15D5801444FF25
Certificate serial:       783BD6485684A1868AC889B00C36B6272C873781
Authority key identifier: 0B:DA:57:76:E6:D9:6F:40:CC:3E:4E:7A:CB:15:D5:80:14:44:FF:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BDA5776E6D96F40CC3E4E7ACB15D5801444FF25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/323830343a323139303a3a2f33322d3634203d3e20323634353632.roa
Signing time:             Wed 22 Jan 2025 20:00:21 +0000
ROA not before:           Wed 22 Jan 2025 19:55:21 +0000
ROA not after:            Wed 21 Jan 2026 20:00:21 +0000
asID:                     264562
IP address blocks:        2804:2190::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:3b:d6:48:56:84:a1:86:8a:c8:89:b0:0c:36:b6:27:2c:87:37:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BDA5776E6D96F40CC3E4E7ACB15D5801444FF25
        Validity
            Not Before: Jan 22 19:55:21 2025 GMT
            Not After : Jan 21 20:00:21 2026 GMT
        Subject: CN=38074EA811C8CEB3D036BC7AA9E48AE386054955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:37:65:48:3f:a0:be:4f:02:48:61:28:4e:b6:
                    ad:2a:a6:d6:e3:78:1c:21:97:58:6b:03:bb:e8:f9:
                    6c:3b:67:5d:fa:38:92:4c:ac:4d:56:c2:b0:a4:59:
                    8f:91:b7:72:b2:91:a4:b4:cc:d3:89:0d:42:d0:5a:
                    5a:72:25:9f:fb:ae:32:28:2b:dc:ea:4c:10:32:1c:
                    db:f1:d7:cd:8c:49:94:88:a4:24:f8:60:fc:f9:9c:
                    54:7f:d8:01:84:6c:e6:2b:6c:db:ba:6f:b2:62:51:
                    b9:e8:9e:b4:e3:20:c4:44:c4:ac:4d:dd:c6:50:d5:
                    b1:ef:d5:18:3d:e6:42:60:e5:9c:8c:15:09:81:96:
                    60:36:67:52:64:ad:0c:63:93:60:4b:e9:25:0b:9e:
                    15:c8:9d:99:4c:84:9b:f4:24:2f:e9:bc:7f:00:66:
                    ea:75:63:89:ba:0a:80:a9:81:67:02:3b:53:ca:76:
                    ef:c8:69:71:df:4f:33:93:c2:0f:be:a5:0f:a4:99:
                    0f:30:bd:ea:54:5e:65:c7:25:fb:e7:e3:9d:38:7a:
                    6d:31:b1:37:e0:a3:11:df:f1:12:4a:36:d5:02:54:
                    2d:29:15:01:55:27:73:5a:75:98:2e:9b:69:0b:4a:
                    22:34:6f:51:85:b6:57:95:3f:dc:4a:c0:aa:cd:3b:
                    fc:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:07:4E:A8:11:C8:CE:B3:D0:36:BC:7A:A9:E4:8A:E3:86:05:49:55
            X509v3 Authority Key Identifier:
                keyid:0B:DA:57:76:E6:D9:6F:40:CC:3E:4E:7A:CB:15:D5:80:14:44:FF:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/0BDA5776E6D96F40CC3E4E7ACB15D5801444FF25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BDA5776E6D96F40CC3E4E7ACB15D5801444FF25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/323830343a323139303a3a2f33322d3634203d3e20323634353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2190::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:98:e9:ca:0c:e5:d3:6f:7e:95:5f:f8:cf:5a:e8:9a:e8:0f:
         94:90:5a:39:a6:21:d3:db:34:98:ea:b7:9f:e8:61:70:ab:b2:
         01:e8:4c:88:2a:6d:03:d9:e0:d3:63:b0:2e:3f:25:18:51:a0:
         e6:31:e1:2b:1d:97:d5:b4:4b:49:e4:62:23:c8:01:b2:31:f5:
         16:e5:02:85:6f:b0:9c:97:1d:da:76:cf:cf:bd:f3:70:f8:37:
         07:ae:8a:d9:b5:a4:80:a9:8b:ef:de:e3:76:29:f2:2b:54:98:
         f7:e9:96:0a:98:37:4c:b9:37:1a:c6:e6:7b:54:1e:9b:74:91:
         fd:62:e6:53:c9:b9:15:aa:11:a8:30:91:a8:72:38:0b:92:15:
         e2:82:72:df:9a:bb:17:5f:0f:8b:13:6e:e6:23:b3:ed:47:2a:
         9a:73:bd:d4:42:d7:ce:40:bf:3e:12:bf:09:2f:48:95:8e:7e:
         0a:e8:1e:71:fd:b5:d4:6e:5e:5e:b2:87:74:1f:ff:e6:53:e3:
         0a:45:ab:2d:09:09:e9:a2:e3:cf:b4:40:f6:47:3a:98:0b:33:
         42:c1:4e:84:b9:85:0c:f5:f6:d5:2d:5a:14:8a:b8:9a:cb:8a:
         1d:7b:72:f8:b4:64:11:ee:7f:b9:75:1b:b3:b5:ff:36:20:82:
         2a:fb:3a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 08:01:08 2025 by rpki-client