Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/323830343a343138633a3a2f33322d3332203d3e20323637343430.roa
File:                     323830343a343138633a3a2f33322d3332203d3e20323637343430.roa (raw, json)
Hash identifier:          m37/XdCebkrzQgtG9m7+Xp1xCi6//MpdFHqVtBVUQfc=
Subject key identifier:   5E:6E:8F:2C:41:9A:46:01:72:E8:D2:E3:06:AB:DB:29:F5:64:ED:20
Certificate issuer:       /CN=683528643A65F1188AB7E1EF5CB5E716A5A13959
Certificate serial:       57D38B76B385C3CB796797F1A87842BC66C226AF
Authority key identifier: 68:35:28:64:3A:65:F1:18:8A:B7:E1:EF:5C:B5:E7:16:A5:A1:39:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/683528643A65F1188AB7E1EF5CB5E716A5A13959.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/323830343a343138633a3a2f33322d3332203d3e20323637343430.roa
Signing time:             Mon 20 Jan 2025 14:46:21 +0000
ROA not before:           Mon 20 Jan 2025 14:41:21 +0000
ROA not after:            Mon 19 Jan 2026 14:46:21 +0000
asID:                     267440
IP address blocks:        2804:418c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:d3:8b:76:b3:85:c3:cb:79:67:97:f1:a8:78:42:bc:66:c2:26:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=683528643A65F1188AB7E1EF5CB5E716A5A13959
        Validity
            Not Before: Jan 20 14:41:21 2025 GMT
            Not After : Jan 19 14:46:21 2026 GMT
        Subject: CN=5E6E8F2C419A460172E8D2E306ABDB29F564ED20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:31:f1:f9:90:eb:3e:9a:42:d7:34:25:56:33:
                    04:e2:8d:d7:81:27:05:bc:24:0a:f7:46:df:b2:fd:
                    a8:93:31:de:6b:53:e1:3f:f7:3c:54:2d:6e:d5:ee:
                    61:fc:8b:c7:55:33:f3:6d:22:79:45:3e:3b:1d:7d:
                    b0:13:68:34:e1:a2:4f:05:55:3c:d8:69:71:85:ed:
                    1e:6d:d7:78:19:87:ef:3d:26:e9:20:05:b2:e9:54:
                    b5:1c:88:7b:41:28:14:25:a4:42:bd:56:95:1b:ee:
                    cc:7f:34:48:27:3e:d8:1b:b8:b8:f8:00:f6:45:c6:
                    68:26:b5:af:f9:31:64:40:7c:eb:76:04:dd:42:5d:
                    01:19:29:a9:ef:14:f6:38:66:63:21:ee:fd:7f:84:
                    2c:29:b7:20:be:20:8c:1e:d0:50:c4:28:8d:e4:25:
                    3f:5c:9d:f9:3a:9f:1d:c6:29:26:66:b9:36:12:5a:
                    ff:50:de:27:85:f0:b1:38:52:a5:ac:52:32:04:a9:
                    c8:5e:a0:42:ee:22:4d:58:57:c2:f8:df:9d:31:bb:
                    95:ff:9d:e4:d2:21:d7:0c:62:08:85:ed:e1:53:3c:
                    62:41:52:23:57:9a:f1:c6:d4:b1:8b:76:9d:4f:ab:
                    af:fd:63:fc:de:11:83:9a:6a:05:54:d4:4e:82:33:
                    fc:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:6E:8F:2C:41:9A:46:01:72:E8:D2:E3:06:AB:DB:29:F5:64:ED:20
            X509v3 Authority Key Identifier:
                keyid:68:35:28:64:3A:65:F1:18:8A:B7:E1:EF:5C:B5:E7:16:A5:A1:39:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/683528643A65F1188AB7E1EF5CB5E716A5A13959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/683528643A65F1188AB7E1EF5CB5E716A5A13959.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/323830343a343138633a3a2f33322d3332203d3e20323637343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:418c::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:c2:a3:1d:e9:ea:50:9f:f4:1b:7c:66:e3:82:f2:ec:57:0b:
         06:b2:1d:e7:fd:7d:11:bd:86:d3:de:e6:d2:0f:52:ca:bd:2b:
         3c:43:4a:21:11:71:c2:a8:9b:ed:14:32:a3:89:c2:dd:89:51:
         88:a5:76:dc:66:0d:36:5c:6f:22:20:42:f3:b9:f7:64:af:fa:
         4f:41:16:be:db:9f:90:93:8c:fc:93:6b:ae:79:ce:15:e7:95:
         d2:22:ed:8e:49:bf:ff:64:b4:1f:f8:f1:f6:4c:cc:8a:ca:26:
         c8:2d:44:28:e1:a3:62:5e:95:f2:05:be:da:4a:40:db:8b:76:
         f5:d8:ce:37:b9:88:10:e9:f5:60:7e:93:82:77:ce:e5:7b:a5:
         2c:37:39:15:53:72:b5:95:f7:44:20:9b:40:4e:21:cc:ad:e5:
         46:8c:0e:99:d1:c6:5d:99:36:d9:29:da:f1:5e:d4:b4:9a:3f:
         e0:82:7e:15:89:d3:41:1d:86:62:c1:b0:05:42:68:9c:02:eb:
         39:d2:28:0a:67:af:a2:1f:42:80:bc:a4:e2:ff:35:7b:09:1f:
         17:8f:2f:e9:d4:61:1a:f5:cb:73:5c:49:e4:40:cb:df:30:16:
         b1:bf:81:51:cb:a4:e5:06:5a:25:ef:eb:7d:a0:3f:15:11:0a:
         04:fe:b8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:51:48 2025 by rpki-client