Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a633830303a3a2f33372d3337203d3e20323730343430.roa
File:                     323830343a366330343a633830303a3a2f33372d3337203d3e20323730343430.roa (raw, json)
Hash identifier:          LCr/rtixlYJtg2z9E2mtbuG2kJSQa2llUa+T3vKiCFQ=
Subject key identifier:   AC:14:8D:5D:79:96:7D:AD:EE:43:3C:C7:4B:91:C7:00:E5:95:2F:EF
Certificate issuer:       /CN=972E69522EA7E06655376241FB13ED39AF30B19D
Certificate serial:       6CD502B624985354702C00DBFFE7607B2DCF822C
Authority key identifier: 97:2E:69:52:2E:A7:E0:66:55:37:62:41:FB:13:ED:39:AF:30:B1:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/972E69522EA7E06655376241FB13ED39AF30B19D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a633830303a3a2f33372d3337203d3e20323730343430.roa
Signing time:             Tue 28 Jan 2025 18:18:56 +0000
ROA not before:           Tue 28 Jan 2025 18:13:56 +0000
ROA not after:            Tue 27 Jan 2026 18:18:56 +0000
asID:                     270440
IP address blocks:        2804:6c04:c800::/37 maxlen: 37
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:d5:02:b6:24:98:53:54:70:2c:00:db:ff:e7:60:7b:2d:cf:82:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=972E69522EA7E06655376241FB13ED39AF30B19D
        Validity
            Not Before: Jan 28 18:13:56 2025 GMT
            Not After : Jan 27 18:18:56 2026 GMT
        Subject: CN=AC148D5D79967DADEE433CC74B91C700E5952FEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a8:39:31:8b:5b:b7:0b:f9:c3:d4:8c:98:34:
                    f6:d8:70:b2:fd:37:7f:aa:67:70:b2:c7:44:f0:f7:
                    57:6e:3c:2a:56:24:1f:fd:09:18:e4:57:a4:79:4b:
                    34:27:43:01:af:44:24:38:eb:e4:7c:3b:df:1e:35:
                    cb:f6:a1:98:d2:ec:3a:1a:38:fc:8c:4e:67:03:b6:
                    00:21:b4:47:81:ac:36:69:d4:32:80:c3:f5:82:e3:
                    46:06:93:3c:3d:7b:11:b3:a3:08:ea:f9:cb:58:39:
                    10:3e:04:12:11:b8:ca:a0:2d:97:0c:b5:a2:1e:53:
                    05:68:50:25:f4:9e:35:68:f3:42:35:21:e1:ef:51:
                    10:08:e8:bc:ee:9d:79:87:00:3e:3e:a5:60:84:88:
                    dd:6b:28:e9:01:d8:67:0d:f0:1b:18:53:a0:77:d0:
                    23:a5:8c:8d:1f:4a:2e:c8:09:53:34:a1:3d:81:7d:
                    36:01:3c:ae:11:99:f7:be:78:fd:ab:b6:d4:b8:59:
                    26:67:91:7f:b0:3b:d8:52:a6:f8:69:28:04:ec:c6:
                    24:50:4b:e7:39:b2:64:0e:08:33:92:cc:74:33:54:
                    31:7d:d1:e7:a1:f1:76:27:61:52:7c:e0:3d:97:0c:
                    1e:7e:ca:6d:11:9c:b7:a4:da:b6:19:b0:2e:62:f8:
                    e8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:14:8D:5D:79:96:7D:AD:EE:43:3C:C7:4B:91:C7:00:E5:95:2F:EF
            X509v3 Authority Key Identifier:
                keyid:97:2E:69:52:2E:A7:E0:66:55:37:62:41:FB:13:ED:39:AF:30:B1:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/972E69522EA7E06655376241FB13ED39AF30B19D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/972E69522EA7E06655376241FB13ED39AF30B19D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a633830303a3a2f33372d3337203d3e20323730343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c04:c800::/37

    Signature Algorithm: sha256WithRSAEncryption
         8e:f3:a5:84:10:e6:e7:14:ed:19:61:8a:ce:11:4b:96:b7:9e:
         60:75:7a:f7:4d:4f:ea:3b:bb:34:b8:71:ac:7c:c9:2c:a4:50:
         59:7c:ba:48:be:cc:33:30:16:81:c3:0b:42:ab:fa:33:11:7c:
         b2:9e:42:b6:51:54:19:7c:4c:c7:2f:6e:21:23:f3:cb:f0:36:
         98:b7:e2:e7:47:9d:8b:cf:15:44:b5:a2:b4:78:01:5c:0c:27:
         c5:91:05:d6:7e:fa:8c:17:25:bd:7e:d9:b3:93:ca:19:14:2e:
         b6:94:db:1b:dd:a2:fe:a9:7e:f3:88:9d:47:95:20:b1:b0:3d:
         2d:a2:9d:5c:2e:f6:37:aa:83:7a:45:fd:f0:d8:4e:41:2c:73:
         24:57:23:6c:4c:d6:92:80:75:ad:91:a4:db:a0:70:69:c0:9b:
         c0:42:a6:a3:df:5a:08:59:26:ab:33:1c:d9:40:13:46:d6:74:
         c4:40:62:35:40:32:a4:8d:f7:9e:05:dc:3e:35:44:b8:91:f5:
         8e:22:98:cb:7a:25:ad:0a:5a:49:c4:7b:5c:69:50:ad:29:26:
         58:ca:f0:46:46:28:e2:03:73:b2:28:f9:86:09:72:04:d3:0a:
         1b:9c:0e:3d:0f:42:75:bf:2d:71:eb:24:2a:de:b8:62:60:ef:
         82:5d:ad:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:52:30 2025 by rpki-client