Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnwgmtgFXnyazSMVhX71Lz61u3xtQcR5GMu6icaLNNNK/0/323830343a333931343a3a2f33322d3438203d3e20323636353233.roa
File:                     323830343a333931343a3a2f33322d3438203d3e20323636353233.roa (raw, json)
Hash identifier:          G76+xoxujxGO2ten6RZHoWXQkZYLu7c8BzEwOtEAAFY=
Subject key identifier:   82:65:1E:E6:28:48:71:F4:BB:97:C2:A7:4E:DC:F2:9B:66:20:63:87
Certificate issuer:       /CN=E96F3808C3B7D43CED1324814F569B6C6E3E25FA
Certificate serial:       12DB713A98424CC4CC280B177C101F8F72D45A71
Authority key identifier: E9:6F:38:08:C3:B7:D4:3C:ED:13:24:81:4F:56:9B:6C:6E:3E:25:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E96F3808C3B7D43CED1324814F569B6C6E3E25FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnwgmtgFXnyazSMVhX71Lz61u3xtQcR5GMu6icaLNNNK/0/323830343a333931343a3a2f33322d3438203d3e20323636353233.roa
Signing time:             Mon 10 Mar 2025 23:50:37 +0000
ROA not before:           Mon 10 Mar 2025 23:45:37 +0000
ROA not after:            Mon 09 Mar 2026 23:50:37 +0000
asID:                     266523
IP address blocks:        2804:3914::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:db:71:3a:98:42:4c:c4:cc:28:0b:17:7c:10:1f:8f:72:d4:5a:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E96F3808C3B7D43CED1324814F569B6C6E3E25FA
        Validity
            Not Before: Mar 10 23:45:37 2025 GMT
            Not After : Mar  9 23:50:37 2026 GMT
        Subject: CN=82651EE6284871F4BB97C2A74EDCF29B66206387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b4:cb:8a:51:33:6c:66:d7:df:88:22:43:09:
                    e7:34:20:f9:51:5a:e1:6f:8c:7e:3d:2d:91:e8:b9:
                    ae:05:36:4d:b7:f3:9c:67:ee:8e:a0:c2:2e:dc:53:
                    83:fb:aa:f6:28:af:17:8f:9d:38:10:fd:f3:12:53:
                    3c:05:3a:96:0a:83:50:2c:53:28:f8:7d:c3:8a:1b:
                    25:08:5e:1d:d4:88:ea:f4:05:24:28:cc:b4:ba:94:
                    20:6c:b2:94:2d:3b:01:b1:bd:10:3d:6a:c3:9a:a4:
                    d2:60:4b:a6:a6:7c:1e:42:e7:d2:cc:57:b2:40:2d:
                    e3:19:89:c8:3a:c7:e1:ae:61:7b:ea:db:49:48:d1:
                    14:77:1e:8a:c6:b6:0f:7c:01:50:f0:b2:8f:93:c5:
                    70:3c:fe:c4:72:41:85:fe:ef:2d:9d:04:76:89:bf:
                    1e:a4:16:7c:33:64:7d:1d:c8:03:c3:18:65:03:69:
                    1e:8b:b6:43:b9:4c:84:b0:7a:04:43:15:cb:ad:8f:
                    38:ef:68:4c:84:c9:8d:3f:fa:eb:39:49:4e:e4:07:
                    d5:47:ef:7a:ca:c1:ce:0c:ce:b8:06:21:2d:18:78:
                    e5:15:e8:bf:bb:01:3a:69:99:80:21:37:96:12:a9:
                    c6:43:8a:41:e5:3a:2c:14:fc:31:50:c3:57:5b:60:
                    8d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:65:1E:E6:28:48:71:F4:BB:97:C2:A7:4E:DC:F2:9B:66:20:63:87
            X509v3 Authority Key Identifier:
                keyid:E9:6F:38:08:C3:B7:D4:3C:ED:13:24:81:4F:56:9B:6C:6E:3E:25:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnwgmtgFXnyazSMVhX71Lz61u3xtQcR5GMu6icaLNNNK/0/E96F3808C3B7D43CED1324814F569B6C6E3E25FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E96F3808C3B7D43CED1324814F569B6C6E3E25FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnwgmtgFXnyazSMVhX71Lz61u3xtQcR5GMu6icaLNNNK/0/323830343a333931343a3a2f33322d3438203d3e20323636353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3914::/32

    Signature Algorithm: sha256WithRSAEncryption
         af:67:cd:03:b3:85:37:d9:1e:18:39:c9:60:41:ee:97:17:f5:
         0e:70:00:8e:c5:8a:ec:22:48:a7:58:4d:73:4c:84:01:5e:6f:
         b2:07:47:23:2a:cb:e9:85:e2:ec:d8:f5:6f:aa:b6:be:a1:3c:
         85:65:33:e5:d2:a7:dc:c0:57:63:b1:d8:1b:94:3a:24:d2:15:
         21:ab:82:8a:ba:2d:11:44:82:41:1f:09:31:35:2d:1f:96:49:
         0f:78:25:0d:30:32:2c:73:c6:51:95:ab:02:f2:5a:89:aa:0c:
         2d:4b:2c:64:56:f1:bc:e3:04:e1:af:61:03:d9:da:86:d6:d1:
         3a:43:59:ef:7e:1b:b6:f7:ce:db:4d:15:0e:58:1b:4c:6d:c6:
         f6:3d:d3:c9:ee:34:ce:b2:fe:ea:0e:0c:8e:9e:80:7b:75:da:
         ec:b9:43:f0:a9:2f:87:6b:ff:2d:21:c4:06:e4:fc:9c:58:13:
         67:f5:ef:b0:f5:d7:d8:be:7e:1e:70:9e:0f:19:2a:e3:77:1b:
         d3:0c:ef:d1:dd:18:bb:ec:dd:7b:02:5f:95:75:37:04:14:e7:
         16:5b:5a:eb:ec:4a:6d:40:ee:9e:33:12:1b:8e:2f:f1:94:33:
         29:10:5e:e1:68:9f:70:ff:32:81:2c:8e:fe:43:0d:d1:96:f9:
         05:15:21:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 12:46:32 2025 by rpki-client