Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/0/323830343a3966343a3a2f33322d3336203d3e20323632353330.roa
File:                     323830343a3966343a3a2f33322d3336203d3e20323632353330.roa (raw, json)
Hash identifier:          9Ubwv5tq6QTNXwGdsfh5T27/+aWE4XwNTu3uLJVQeuY=
Subject key identifier:   B2:78:D5:09:48:17:88:02:7A:45:65:F5:BA:3B:E2:73:8B:90:7B:B4
Certificate issuer:       /CN=B410AE9221B712152EE021F11F6C4A32F7D29278
Certificate serial:       1C4657AC8D25D8AF305BD3CB32439521A1144DD3
Authority key identifier: B4:10:AE:92:21:B7:12:15:2E:E0:21:F1:1F:6C:4A:32:F7:D2:92:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B410AE9221B712152EE021F11F6C4A32F7D29278.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/0/323830343a3966343a3a2f33322d3336203d3e20323632353330.roa
Signing time:             Thu 19 Dec 2024 18:17:34 +0000
ROA not before:           Thu 19 Dec 2024 18:12:34 +0000
ROA not after:            Thu 18 Dec 2025 18:17:34 +0000
asID:                     262530
IP address blocks:        2804:9f4::/32 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:46:57:ac:8d:25:d8:af:30:5b:d3:cb:32:43:95:21:a1:14:4d:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B410AE9221B712152EE021F11F6C4A32F7D29278
        Validity
            Not Before: Dec 19 18:12:34 2024 GMT
            Not After : Dec 18 18:17:34 2025 GMT
        Subject: CN=B278D509481788027A4565F5BA3BE2738B907BB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c6:71:e1:d5:74:35:ec:bc:41:36:15:bb:d7:
                    82:41:e2:44:9f:97:33:4b:dc:fd:62:7e:be:5c:aa:
                    69:43:be:a5:70:dd:c2:4c:b6:d1:9e:43:e4:56:4c:
                    f4:4f:29:91:60:1c:2c:d0:4d:c7:47:5c:89:56:6b:
                    38:db:53:cb:80:db:3e:0b:21:f6:e1:e3:ec:a3:d0:
                    6e:23:ef:0d:bc:58:d9:9a:48:31:2c:8f:3d:24:96:
                    8f:e3:0d:01:df:8e:ae:38:70:e2:df:34:4e:f1:68:
                    7e:de:8d:69:ec:a5:de:3d:33:9d:49:77:f1:3f:5f:
                    04:a6:a2:99:d3:59:15:43:63:2e:6f:2a:47:41:da:
                    de:34:74:56:94:d6:c7:8e:02:fb:8f:e6:7a:91:ab:
                    4b:b2:83:a1:c7:3d:c5:92:77:13:ce:8d:05:87:8b:
                    90:98:4c:3c:85:5a:d6:68:aa:5e:bd:d4:ad:61:ae:
                    d1:a3:77:fa:32:2b:57:81:05:b3:1b:35:69:c1:c5:
                    55:81:91:dd:a0:f2:e2:0d:29:30:41:da:e3:a8:5a:
                    37:33:7c:d3:bc:90:c0:cd:be:a2:2e:43:29:46:28:
                    9d:87:5e:d6:43:07:72:db:29:d1:a9:eb:14:5b:e4:
                    57:74:65:de:3a:a3:64:ec:7e:0e:0b:9f:06:92:f9:
                    ab:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:78:D5:09:48:17:88:02:7A:45:65:F5:BA:3B:E2:73:8B:90:7B:B4
            X509v3 Authority Key Identifier:
                keyid:B4:10:AE:92:21:B7:12:15:2E:E0:21:F1:1F:6C:4A:32:F7:D2:92:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/0/B410AE9221B712152EE021F11F6C4A32F7D29278.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B410AE9221B712152EE021F11F6C4A32F7D29278.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/0/323830343a3966343a3a2f33322d3336203d3e20323632353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:14:e8:a8:55:5b:27:c4:1b:01:66:29:09:a3:0d:55:f0:04:
         a3:b3:39:fe:f3:42:ab:69:88:15:df:92:fc:e6:9e:73:0a:0b:
         e1:3c:6d:d9:32:e3:84:3f:11:f8:61:1b:cf:3b:a7:60:a5:82:
         83:99:03:51:d2:5e:6d:8c:cd:c9:c7:66:d3:93:e9:9f:ee:07:
         06:87:2a:44:4f:08:50:f3:a9:54:8e:8f:fa:f4:c2:65:b2:46:
         71:6b:ac:50:ff:ce:94:37:49:8b:8e:b3:d4:5c:fd:1a:51:de:
         03:5f:89:bd:90:f8:aa:7f:b7:2b:8c:ba:66:d1:b1:cf:dd:b9:
         89:1d:49:b2:a0:4a:19:fd:d7:98:42:7b:d2:a7:62:c7:f1:de:
         e6:99:9b:1c:0c:56:1e:4c:8f:14:fd:d2:41:3a:cf:77:f8:5d:
         c6:07:60:bf:34:74:db:9b:8a:63:2a:dc:13:49:7b:5b:f5:b8:
         ca:e9:49:a0:60:ac:d7:b7:40:43:73:80:6e:1d:a9:07:71:7a:
         6f:ac:81:a3:20:83:dc:4d:36:02:68:f9:22:88:0b:9b:12:39:
         4d:bd:5e:ec:bd:0d:06:8b:1e:01:0d:5d:21:8f:8a:ca:36:3b:
         c8:83:e1:f6:e2:12:6a:11:1b:07:11:25:ce:ef:4b:54:9c:1c:
         a7:79:63:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:12:17 2025 by rpki-client