Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bzrov4tx5WjiAB6qFykPZTFjoZ9Uzxv6rUiiUhJUWTbE/0/323830343a336338343a3a2f33322d313238203d3e20323636323137.roa
File:                     323830343a336338343a3a2f33322d313238203d3e20323636323137.roa (raw, json)
Hash identifier:          0bHxyspMkp9+LEh9Ypcr7rDxH6fh82x6ZMDJXQFzhm4=
Subject key identifier:   46:82:48:7E:E2:1D:FE:50:47:23:E6:8F:40:6A:29:53:E8:CB:84:77
Certificate issuer:       /CN=5744E945CF5532C0BDD7C4EC46A744AA22A13C70
Certificate serial:       12E94746CB441B61BFFE1779070CAF15D7E40D53
Authority key identifier: 57:44:E9:45:CF:55:32:C0:BD:D7:C4:EC:46:A7:44:AA:22:A1:3C:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5744E945CF5532C0BDD7C4EC46A744AA22A13C70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bzrov4tx5WjiAB6qFykPZTFjoZ9Uzxv6rUiiUhJUWTbE/0/323830343a336338343a3a2f33322d313238203d3e20323636323137.roa
Signing time:             Fri 17 Jan 2025 19:52:43 +0000
ROA not before:           Fri 17 Jan 2025 19:47:43 +0000
ROA not after:            Fri 16 Jan 2026 19:52:43 +0000
asID:                     266217
IP address blocks:        2804:3c84::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:e9:47:46:cb:44:1b:61:bf:fe:17:79:07:0c:af:15:d7:e4:0d:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5744E945CF5532C0BDD7C4EC46A744AA22A13C70
        Validity
            Not Before: Jan 17 19:47:43 2025 GMT
            Not After : Jan 16 19:52:43 2026 GMT
        Subject: CN=4682487EE21DFE504723E68F406A2953E8CB8477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a3:41:4f:75:49:ef:3b:a4:4f:31:97:34:93:
                    91:34:07:d9:3c:90:5c:87:25:18:4c:af:de:d1:f5:
                    1c:e7:71:a3:0f:35:e1:4c:6a:0c:bb:9b:41:51:29:
                    94:90:73:4c:ad:fc:53:46:2d:ff:c3:4a:e4:87:2e:
                    1c:83:ca:bf:e9:89:44:c6:47:d7:da:a9:8e:30:be:
                    39:9e:dd:ee:1f:f4:f1:6d:50:0d:7e:63:b3:26:84:
                    33:3d:b0:a7:16:59:3c:33:53:d1:3f:ec:0d:a2:f0:
                    fc:ce:92:d2:ca:48:cc:63:2d:24:b2:29:61:41:0d:
                    b4:37:f9:17:d3:f5:01:ee:b9:65:e4:2c:4b:68:21:
                    4b:9c:43:f6:85:97:f0:1d:05:a4:a4:fa:45:ac:e1:
                    d6:a0:54:58:f3:03:25:fc:cc:fa:de:3d:36:50:58:
                    46:33:d7:bf:3e:3b:2a:3e:eb:75:31:14:dd:5e:c1:
                    db:42:f2:bc:09:a7:b5:eb:b3:e1:50:c0:29:fd:7d:
                    74:f3:80:32:a2:8a:b6:13:73:56:c6:ae:ef:8e:86:
                    05:58:9f:c5:74:28:98:be:14:17:a7:71:63:ac:45:
                    8a:c8:19:c1:5f:42:0a:58:f0:b3:46:92:9b:b8:b4:
                    1b:43:1f:e2:4f:50:c1:d2:01:1d:b5:a7:90:7f:d8:
                    5c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:82:48:7E:E2:1D:FE:50:47:23:E6:8F:40:6A:29:53:E8:CB:84:77
            X509v3 Authority Key Identifier:
                keyid:57:44:E9:45:CF:55:32:C0:BD:D7:C4:EC:46:A7:44:AA:22:A1:3C:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bzrov4tx5WjiAB6qFykPZTFjoZ9Uzxv6rUiiUhJUWTbE/0/5744E945CF5532C0BDD7C4EC46A744AA22A13C70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5744E945CF5532C0BDD7C4EC46A744AA22A13C70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzrov4tx5WjiAB6qFykPZTFjoZ9Uzxv6rUiiUhJUWTbE/0/323830343a336338343a3a2f33322d313238203d3e20323636323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c84::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:ef:5b:d2:7e:a9:83:c7:17:f5:a6:cb:01:9f:8a:0d:a7:e0:
         37:6f:e8:9b:3e:05:2c:1b:06:7d:ef:4e:28:44:0f:aa:88:74:
         b8:f5:07:78:12:0d:b2:e2:99:a2:cc:b0:cd:a9:73:f1:9f:f7:
         e0:71:77:1e:52:26:69:70:eb:6e:f7:8d:4d:b6:ff:8c:ef:ba:
         05:41:b1:21:17:7d:f8:d2:c5:c1:0c:47:01:27:8f:03:1c:7e:
         5b:45:7f:43:4b:ce:d9:63:44:b4:40:2f:a2:99:85:41:08:e6:
         08:08:82:0b:6a:96:a3:5b:ed:06:92:c7:4e:fb:2f:29:f0:fa:
         d8:64:39:11:de:fa:5e:8c:23:0a:f8:21:e8:8c:b6:b9:4a:b7:
         0b:e6:ec:17:de:8e:38:aa:7d:18:c7:b1:be:76:e1:0a:0b:69:
         93:06:db:30:31:28:28:65:96:60:ea:2f:b0:10:33:f4:ee:c7:
         88:3f:82:a0:28:01:c1:1f:01:31:91:5e:d3:79:f4:6e:84:73:
         14:95:57:73:f4:24:7c:5b:be:56:bf:5f:df:88:1e:c1:b4:48:
         ce:0c:66:a2:3e:b8:f9:94:ad:3c:20:6a:96:c9:4a:9c:7a:59:
         e8:71:83:75:68:d6:f8:76:67:b4:b6:91:df:86:08:93:1b:57:
         56:57:ab:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:48:05 2025 by rpki-client