Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HQix4EfNgapnYkK3uvqYGDJPCvuVgzYhH6pxaWJPwW8U/0/323830343a316263383a3a2f33322d3438203d3e203631373530.roa
File:                     323830343a316263383a3a2f33322d3438203d3e203631373530.roa (raw, json)
Hash identifier:          qlNFc2tBNukX+9u/fPnfKRlTc2Ao4DGPeLy1N2cKjhU=
Subject key identifier:   5F:02:25:51:16:93:91:67:86:35:8A:E8:DB:99:FF:39:C7:D1:51:2B
Certificate issuer:       /CN=A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA
Certificate serial:       4A9030110168D3F10B70022AF2212900AB0A4D68
Authority key identifier: A0:18:B2:CA:A6:D0:D5:0A:96:B8:55:60:1A:C3:B9:9D:5B:B9:CF:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HQix4EfNgapnYkK3uvqYGDJPCvuVgzYhH6pxaWJPwW8U/0/323830343a316263383a3a2f33322d3438203d3e203631373530.roa
Signing time:             Wed 18 Dec 2024 12:40:57 +0000
ROA not before:           Wed 18 Dec 2024 12:35:57 +0000
ROA not after:            Wed 17 Dec 2025 12:40:57 +0000
asID:                     61750
IP address blocks:        2804:1bc8::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:90:30:11:01:68:d3:f1:0b:70:02:2a:f2:21:29:00:ab:0a:4d:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA
        Validity
            Not Before: Dec 18 12:35:57 2024 GMT
            Not After : Dec 17 12:40:57 2025 GMT
        Subject: CN=5F0225511693916786358AE8DB99FF39C7D1512B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0d:1c:b2:2a:f0:50:7f:52:6e:86:ff:68:6f:
                    7f:9b:be:f5:22:63:db:8c:93:71:4b:ee:c6:26:67:
                    b8:00:4a:4b:ed:66:a0:d4:61:7b:e1:2f:51:54:3a:
                    fa:3e:c9:26:86:e8:69:6d:a6:ef:9b:18:74:e5:3c:
                    14:4f:5e:9c:03:4f:18:d0:89:37:b9:f9:73:34:bd:
                    fc:04:f3:fe:d7:9a:3c:df:14:07:fe:3d:80:9c:d6:
                    ca:04:8f:a9:16:f5:ef:85:8c:c5:8e:23:c0:9c:a0:
                    19:33:ef:f9:3e:b4:59:ef:86:7a:18:22:b1:c2:39:
                    c7:cf:a0:79:0a:bf:9d:b0:70:8e:5d:18:4d:f1:be:
                    7b:2e:a2:41:da:c4:78:c3:6f:48:ef:28:f9:79:c1:
                    df:d0:f3:ca:d9:54:9a:1a:1b:e8:52:ed:d8:49:2f:
                    39:f3:4f:c8:d1:6d:16:0a:21:df:89:78:12:06:e1:
                    6a:2e:ae:77:95:69:a6:d9:be:dc:a8:64:1c:12:1a:
                    0b:f9:50:e4:18:97:bd:3e:fa:61:55:4f:2b:94:be:
                    30:c3:32:00:d7:41:a7:c4:17:a2:0d:9f:fc:cb:98:
                    43:05:8b:3e:7f:6b:fa:8b:6a:35:20:7d:1c:f1:ec:
                    bf:e2:aa:f5:33:b3:c4:5a:50:84:19:2c:57:f1:17:
                    8e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:02:25:51:16:93:91:67:86:35:8A:E8:DB:99:FF:39:C7:D1:51:2B
            X509v3 Authority Key Identifier:
                keyid:A0:18:B2:CA:A6:D0:D5:0A:96:B8:55:60:1A:C3:B9:9D:5B:B9:CF:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HQix4EfNgapnYkK3uvqYGDJPCvuVgzYhH6pxaWJPwW8U/0/A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HQix4EfNgapnYkK3uvqYGDJPCvuVgzYhH6pxaWJPwW8U/0/323830343a316263383a3a2f33322d3438203d3e203631373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1bc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:d4:77:78:22:ad:ae:f9:f3:0a:43:af:aa:70:ed:3f:17:37:
         8c:37:4e:1a:ee:6c:c6:11:e7:6b:b3:09:62:7d:03:96:62:2e:
         36:11:56:19:fb:b1:af:25:dc:43:21:d4:64:93:66:cc:57:9b:
         62:67:c9:8c:d7:7c:21:c8:9b:3b:70:db:3b:65:36:f7:84:ab:
         76:fd:a4:9b:9e:19:fb:21:e8:82:ed:7f:02:a3:16:d7:e0:fb:
         24:f8:7e:64:2d:16:87:52:ca:33:4c:3a:6c:8f:c2:30:c3:67:
         64:99:86:03:4b:b9:21:1a:25:61:31:bc:0f:ab:1a:ad:4f:af:
         53:7c:d4:1f:43:3c:5a:e1:ce:4c:a7:f9:36:89:02:20:14:1b:
         a8:82:1a:6c:09:a5:7d:cd:4f:10:8a:49:e1:2e:ff:81:f2:11:
         cf:e9:6a:bd:4b:a0:ca:b5:ca:2c:0c:12:9a:36:86:50:e7:a6:
         bf:55:75:eb:db:e6:79:3b:a4:77:21:be:c5:06:1f:28:bd:d3:
         b3:e3:cb:c7:3a:37:c8:2f:08:16:2b:87:0a:86:a0:71:a1:e6:
         d5:e4:2f:6c:34:4e:8b:22:c2:f1:97:8b:2e:a4:38:eb:75:41:
         d7:3b:3e:ff:0f:e7:99:c5:4a:d0:1a:ba:ed:4d:3c:b2:25:ff:
         dc:6c:3f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:22:23 2025 by rpki-client