Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CMoWs4kJS6LjhtGu8pXZxFL5BqmHRcefgrcPn2YjmCqN/0/323830343a316437633a3a2f33322d3332203d3e20323634333733.roa
File:                     323830343a316437633a3a2f33322d3332203d3e20323634333733.roa (raw, json)
Hash identifier:          l9qyuI2ScntByJU/ShfirbWk7N24uY1FX+YM/mgyfaM=
Subject key identifier:   27:B0:B9:FF:9E:E8:01:78:7D:C6:E2:B8:39:E2:24:D7:15:24:7D:BD
Certificate issuer:       /CN=C0103B8E7179240C3C384BF92594051EBD742508
Certificate serial:       6AB83D97B57A6420119A4C2227FD069EE97E5F85
Authority key identifier: C0:10:3B:8E:71:79:24:0C:3C:38:4B:F9:25:94:05:1E:BD:74:25:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0103B8E7179240C3C384BF92594051EBD742508.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CMoWs4kJS6LjhtGu8pXZxFL5BqmHRcefgrcPn2YjmCqN/0/323830343a316437633a3a2f33322d3332203d3e20323634333733.roa
Signing time:             Mon 16 Dec 2024 18:37:54 +0000
ROA not before:           Mon 16 Dec 2024 18:32:54 +0000
ROA not after:            Mon 15 Dec 2025 18:37:54 +0000
asID:                     264373
IP address blocks:        2804:1d7c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:b8:3d:97:b5:7a:64:20:11:9a:4c:22:27:fd:06:9e:e9:7e:5f:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0103B8E7179240C3C384BF92594051EBD742508
        Validity
            Not Before: Dec 16 18:32:54 2024 GMT
            Not After : Dec 15 18:37:54 2025 GMT
        Subject: CN=27B0B9FF9EE801787DC6E2B839E224D715247DBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3e:ba:01:0b:50:86:07:3e:60:6a:78:db:31:
                    ef:59:c6:c9:ac:0f:81:4d:a0:ee:cd:87:29:bb:0e:
                    2f:04:cc:29:0c:a3:67:e8:64:df:82:19:71:ee:90:
                    21:72:87:4d:8d:da:c1:69:b3:c2:1e:bc:9f:7e:10:
                    8f:a6:74:e0:e8:a9:80:56:a2:e7:55:5f:4f:0f:30:
                    ef:0a:28:47:c8:d3:99:20:02:72:b8:d1:72:86:7d:
                    7f:cc:4f:af:83:96:24:ca:b4:ae:82:88:ff:b8:c1:
                    ee:bf:85:8a:92:13:af:4a:a0:3b:e8:b4:27:57:ca:
                    78:95:ce:1c:c6:fb:5b:11:2d:b5:02:45:14:95:b0:
                    96:cf:7c:14:83:b8:66:95:c9:7a:e6:3c:98:8c:6a:
                    fa:ab:e2:55:5b:8e:e3:b0:2f:32:0e:16:a6:56:f3:
                    9b:78:91:55:88:be:01:c5:a9:6e:f3:36:09:07:13:
                    b3:40:53:b7:ce:ce:ba:ce:93:99:77:15:ae:a7:7b:
                    47:2f:ad:ee:e0:7a:de:05:d7:c8:29:14:45:fe:47:
                    a0:3e:0c:f2:e0:88:68:31:c7:d4:fe:48:e0:5a:c6:
                    76:8a:44:fb:17:49:55:9f:49:14:4d:e3:8d:26:56:
                    b2:6b:4a:09:17:a8:42:6e:45:ff:5e:98:8f:a6:25:
                    47:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B0:B9:FF:9E:E8:01:78:7D:C6:E2:B8:39:E2:24:D7:15:24:7D:BD
            X509v3 Authority Key Identifier:
                keyid:C0:10:3B:8E:71:79:24:0C:3C:38:4B:F9:25:94:05:1E:BD:74:25:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CMoWs4kJS6LjhtGu8pXZxFL5BqmHRcefgrcPn2YjmCqN/0/C0103B8E7179240C3C384BF92594051EBD742508.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0103B8E7179240C3C384BF92594051EBD742508.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMoWs4kJS6LjhtGu8pXZxFL5BqmHRcefgrcPn2YjmCqN/0/323830343a316437633a3a2f33322d3332203d3e20323634333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1d7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:c4:77:a0:63:fb:be:da:f0:ce:13:8c:b2:de:76:18:f9:f5:
         e4:af:cd:c0:b6:0f:45:58:b2:a4:f6:c2:71:49:a0:57:3c:fd:
         11:aa:b3:dc:af:ea:99:f1:46:b0:53:a6:47:80:b9:5a:17:87:
         49:2b:13:3c:ff:06:ec:cc:da:fa:fb:e8:87:4a:ac:6f:f3:a7:
         b9:4a:39:54:cd:41:3e:96:c8:d5:0f:c5:2f:b9:c3:55:96:25:
         95:da:cc:9d:13:aa:ac:53:a9:48:77:40:34:14:55:29:2d:d9:
         8c:f5:8a:16:f0:87:67:e9:f6:91:61:d1:3b:18:f5:af:82:c9:
         9a:99:2a:c8:46:98:d5:ba:df:3b:a5:71:23:c7:25:21:2d:7e:
         22:e5:40:1c:ee:e3:1b:37:59:c2:1c:4b:17:20:f7:77:cd:d0:
         3e:22:60:da:08:96:9d:fc:9b:bf:bb:a6:78:1f:e6:97:f5:5f:
         2c:6b:3e:01:15:38:ff:65:9e:90:ea:03:89:b6:7e:75:d3:a3:
         51:fa:1d:7a:7e:db:54:d3:c0:45:f8:28:9a:b0:8c:02:6c:13:
         d3:ae:43:cc:fe:7b:b6:bc:79:3a:4e:19:c5:47:9a:d8:df:de:
         bd:f0:15:81:0a:cb:a9:84:52:7a:cc:ef:49:40:ef:f1:13:6a:
         b5:0e:86:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:11:56 2025 by rpki-client