Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/0/323830343a366163383a636166653a3a2f34382d3438203d3e20323730333538.roa
File:                     323830343a366163383a636166653a3a2f34382d3438203d3e20323730333538.roa (raw, json)
Hash identifier:          ept7jipUVzWS8FPJ3k7HZxWwScfd4oFja4YkNGfr398=
Subject key identifier:   A2:BB:66:54:85:FC:D3:C3:38:75:DD:10:02:36:B4:BF:CB:33:33:E9
Certificate issuer:       /CN=61F4874E6474A8E5CE242BD1FB7854FA15297D85
Certificate serial:       3849A67CE2A3B655EEABABA0F7BC6946DA8EC5EF
Authority key identifier: 61:F4:87:4E:64:74:A8:E5:CE:24:2B:D1:FB:78:54:FA:15:29:7D:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61F4874E6474A8E5CE242BD1FB7854FA15297D85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/0/323830343a366163383a636166653a3a2f34382d3438203d3e20323730333538.roa
Signing time:             Fri 24 Mar 2023 01:47:12 +0000
ROA not before:           Fri 24 Mar 2023 01:42:12 +0000
ROA not after:            Fri 22 Mar 2024 01:47:12 +0000
asID:                     270358
IP address blocks:        2804:6ac8:cafe::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:49:a6:7c:e2:a3:b6:55:ee:ab:ab:a0:f7:bc:69:46:da:8e:c5:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61F4874E6474A8E5CE242BD1FB7854FA15297D85
        Validity
            Not Before: Mar 24 01:42:12 2023 GMT
            Not After : Mar 22 01:47:12 2024 GMT
        Subject: CN=A2BB665485FCD3C33875DD100236B4BFCB3333E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c8:df:b3:b7:65:9c:fe:aa:94:a5:6c:30:e4:
                    b8:0b:39:95:a4:0c:16:50:0c:b4:3b:fa:2a:48:bb:
                    ed:87:aa:8d:c4:96:c1:45:d8:2c:1f:87:88:1e:a2:
                    92:0f:48:2b:09:ab:c4:41:ee:9b:2f:22:08:e1:5e:
                    60:1a:89:ac:f0:dd:e6:e5:56:99:8b:63:bd:15:01:
                    b2:da:7b:f0:6c:fc:68:e3:eb:c0:41:43:0b:44:77:
                    b0:ea:9b:43:a1:ec:5d:ff:38:d3:12:55:aa:48:ff:
                    b0:97:5d:69:e9:88:15:23:6c:fd:52:af:39:12:8e:
                    df:89:42:64:ec:46:8a:0e:91:ea:3b:17:ed:ea:2e:
                    a4:12:26:7e:50:f3:bb:ca:53:cd:5a:18:e7:71:c9:
                    11:d1:14:cf:89:0c:27:0f:04:98:0a:b4:00:55:80:
                    a0:d7:4e:09:ba:c6:3b:e9:c6:23:25:e6:b6:80:1b:
                    02:d4:d3:a8:41:cf:c3:22:d5:d5:32:c4:f8:c0:0f:
                    e2:c3:2a:a2:1d:16:26:2a:41:be:e6:3a:73:d9:b7:
                    bb:21:3f:a1:f4:47:be:8f:26:54:7f:fd:fc:a6:9a:
                    97:dc:dd:6c:f8:46:8c:04:18:7f:cb:2b:52:c0:65:
                    40:12:cf:b5:fd:b1:29:c8:ab:f9:7e:27:12:6c:a9:
                    db:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:BB:66:54:85:FC:D3:C3:38:75:DD:10:02:36:B4:BF:CB:33:33:E9
            X509v3 Authority Key Identifier:
                keyid:61:F4:87:4E:64:74:A8:E5:CE:24:2B:D1:FB:78:54:FA:15:29:7D:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/0/61F4874E6474A8E5CE242BD1FB7854FA15297D85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61F4874E6474A8E5CE242BD1FB7854FA15297D85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/0/323830343a366163383a636166653a3a2f34382d3438203d3e20323730333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ac8:cafe::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:7f:38:47:89:9b:85:56:d0:43:b8:31:4f:ae:a4:a3:e4:c5:
         5e:d0:77:41:45:76:6e:fd:c5:57:a5:ab:ab:03:7c:fe:b8:48:
         99:c8:db:71:5f:7f:52:fa:27:ea:fe:72:64:21:a1:ff:b9:da:
         a1:54:62:c2:d0:36:c7:3e:87:9a:3b:2f:36:38:ff:c1:d6:5b:
         c9:ab:c5:25:d3:1d:b1:bc:47:5c:32:c5:e3:48:88:9b:13:fe:
         4d:4e:00:40:f7:1e:a9:83:59:a4:dc:8d:d6:8b:1d:fe:9c:30:
         6f:57:08:f7:45:32:e5:22:e2:e0:30:47:4e:1e:5f:76:36:28:
         de:8b:ec:1c:1e:9d:d5:02:2a:35:60:d9:4c:7e:25:2b:14:1e:
         f2:1b:da:75:b1:d9:75:17:37:9f:06:19:88:98:81:d8:40:63:
         ba:9d:1d:90:e8:85:8f:9c:5e:71:b3:cf:ee:6f:ed:ff:f0:bf:
         23:9f:b2:96:b6:ae:5c:73:3a:52:21:81:fc:60:8d:04:ef:2c:
         5e:4f:16:04:91:74:31:db:ee:74:af:ff:2c:85:fa:64:17:93:
         c3:a4:6e:e7:28:70:7e:36:01:ef:d1:5e:33:07:55:49:f5:b4:
         0f:55:0b:1b:67:da:c0:6f:09:b8:7f:30:15:ac:28:5e:4f:2b:
         f2:8d:54:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:31:04 2025 by rpki-client