Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a643830303a3a2f33372d3337203d3e20323730343430.roa
File:                     323830343a366330343a643830303a3a2f33372d3337203d3e20323730343430.roa (raw, json)
Hash identifier:          wQjBKP0wKHa22yu7o02d1XKBqcYyeTmzdx+EtgccCy0=
Subject key identifier:   4A:27:E8:A1:CC:EA:08:F3:FD:5E:4B:8E:D1:70:E3:0D:A9:D6:38:E1
Certificate issuer:       /CN=972E69522EA7E06655376241FB13ED39AF30B19D
Certificate serial:       4096FC009C192E766D8AF81278A7E25CD144B248
Authority key identifier: 97:2E:69:52:2E:A7:E0:66:55:37:62:41:FB:13:ED:39:AF:30:B1:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/972E69522EA7E06655376241FB13ED39AF30B19D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a643830303a3a2f33372d3337203d3e20323730343430.roa
Signing time:             Tue 28 Jan 2025 18:18:55 +0000
ROA not before:           Tue 28 Jan 2025 18:13:55 +0000
ROA not after:            Tue 27 Jan 2026 18:18:55 +0000
asID:                     270440
IP address blocks:        2804:6c04:d800::/37 maxlen: 37
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:96:fc:00:9c:19:2e:76:6d:8a:f8:12:78:a7:e2:5c:d1:44:b2:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=972E69522EA7E06655376241FB13ED39AF30B19D
        Validity
            Not Before: Jan 28 18:13:55 2025 GMT
            Not After : Jan 27 18:18:55 2026 GMT
        Subject: CN=4A27E8A1CCEA08F3FD5E4B8ED170E30DA9D638E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:45:bb:30:ed:e5:cd:e0:37:05:10:36:09:d6:
                    a0:22:1a:d5:ea:24:37:bf:5b:9c:6c:97:90:f1:49:
                    cf:18:df:b5:b1:88:28:65:6b:c4:95:57:95:d0:b5:
                    a5:31:1b:9f:00:56:d2:cc:9c:b5:98:b2:4d:25:a0:
                    5d:54:39:7d:1e:48:83:ed:c6:26:83:c3:a5:7e:d0:
                    e8:14:5e:a1:1a:77:e9:c3:5a:7a:c4:92:09:c7:82:
                    e4:b3:d6:23:bc:e7:48:0d:3e:e7:80:b3:7f:da:f6:
                    fd:91:56:d0:54:e9:a0:8b:43:ec:38:9e:1f:62:5b:
                    5b:f4:77:e9:a1:1f:8f:40:97:9a:b6:73:a6:da:21:
                    16:b0:8d:89:df:d8:3a:00:9d:5c:ad:a5:48:56:5e:
                    28:9a:c2:fe:20:ff:87:ff:ba:15:4d:91:cf:7a:5c:
                    59:2c:fc:71:6c:63:bc:e3:3e:6b:a6:5b:a3:f3:b6:
                    44:6c:49:dc:ac:aa:4f:90:0e:c2:6f:8a:c1:99:d5:
                    9d:65:4f:4c:b9:e1:3e:15:32:2f:17:dc:b4:1d:cc:
                    b5:10:98:d1:b8:d3:72:c9:e9:0a:b2:91:ae:a3:dd:
                    a8:04:40:92:55:49:f1:41:9d:d2:ac:0a:df:99:4b:
                    70:0a:bd:17:13:1a:dc:1e:37:5c:56:54:d5:67:d0:
                    d4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:27:E8:A1:CC:EA:08:F3:FD:5E:4B:8E:D1:70:E3:0D:A9:D6:38:E1
            X509v3 Authority Key Identifier:
                keyid:97:2E:69:52:2E:A7:E0:66:55:37:62:41:FB:13:ED:39:AF:30:B1:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/972E69522EA7E06655376241FB13ED39AF30B19D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/972E69522EA7E06655376241FB13ED39AF30B19D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a643830303a3a2f33372d3337203d3e20323730343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c04:d800::/37

    Signature Algorithm: sha256WithRSAEncryption
         9c:1a:ea:03:7c:86:5c:ff:b1:98:dc:ca:11:83:24:d4:79:55:
         64:11:34:02:20:9d:78:c8:fe:a3:19:3d:4f:4f:a8:3e:56:78:
         ea:35:f3:b9:41:7a:30:75:e2:47:ca:a2:41:13:f6:da:f9:b3:
         a1:57:75:c4:81:a3:94:da:f7:9c:0f:00:f1:48:e3:91:e7:4a:
         e6:a1:7f:04:da:b8:a7:a9:52:ca:3b:9e:a3:ca:fe:db:b8:8d:
         78:7f:63:56:bb:f3:2e:e3:55:1e:fa:03:ae:56:81:d2:40:fa:
         01:54:b4:e6:cd:d7:48:bf:73:e1:c0:7a:1a:7c:08:31:30:dd:
         d9:9e:02:b8:0a:a0:99:53:35:10:87:96:97:ca:17:62:b5:72:
         fe:9c:23:ef:03:53:a1:15:c4:7d:49:38:d8:e0:05:72:e5:94:
         d3:30:de:d5:2d:c4:38:31:24:3d:b4:76:99:ac:28:15:c8:c5:
         e5:ce:37:23:97:1d:33:f0:99:d3:4e:59:ae:9d:e6:8e:a6:9f:
         ff:78:5f:32:32:11:9e:e0:b8:6f:91:ed:7f:6f:c5:99:22:2b:
         01:77:e0:da:aa:1f:9d:19:29:3b:e1:c6:2e:c6:84:b1:9c:f3:
         2f:93:2a:e5:ee:ad:10:f8:9e:6f:e4:a3:9d:4c:cd:55:0a:a4:
         64:c7:48:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:09:09 2025 by rpki-client