Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/323830343a346231303a6330303a3a2f33382d3338203d3e20323637323831.roa
File:                     323830343a346231303a6330303a3a2f33382d3338203d3e20323637323831.roa (raw, json)
Hash identifier:          5D7LANvrCp18YxIh10PdWe3Jga5yEXahIvWaSAVnQOI=
Subject key identifier:   52:F1:11:66:E7:66:B9:91:BD:7C:6F:33:B7:E5:AC:ED:CF:F3:CB:DD
Certificate issuer:       /CN=9C5BC63BC06A6453BAF64823FA913BF1C397832C
Certificate serial:       1358AFC390681103CDE70AE5117C5C78F278A66E
Authority key identifier: 9C:5B:C6:3B:C0:6A:64:53:BA:F6:48:23:FA:91:3B:F1:C3:97:83:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C5BC63BC06A6453BAF64823FA913BF1C397832C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/323830343a346231303a6330303a3a2f33382d3338203d3e20323637323831.roa
Signing time:             Wed 09 Jul 2025 16:37:52 +0000
ROA not before:           Wed 09 Jul 2025 16:32:52 +0000
ROA not after:            Wed 08 Jul 2026 16:37:52 +0000
asID:                     267281
IP address blocks:        2804:4b10:c00::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:58:af:c3:90:68:11:03:cd:e7:0a:e5:11:7c:5c:78:f2:78:a6:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C5BC63BC06A6453BAF64823FA913BF1C397832C
        Validity
            Not Before: Jul  9 16:32:52 2025 GMT
            Not After : Jul  8 16:37:52 2026 GMT
        Subject: CN=52F11166E766B991BD7C6F33B7E5ACEDCFF3CBDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cc:cb:84:7d:f0:f6:6e:a6:9b:a0:c0:4f:83:
                    9e:d5:cc:39:a6:9d:22:8d:d1:80:ba:d3:70:cf:a9:
                    a3:ae:08:6d:77:22:1e:19:61:cc:0c:8d:0c:1b:7d:
                    22:f3:69:79:d6:12:26:e4:9d:73:82:1a:24:fe:9d:
                    59:23:5d:04:9d:c9:6f:c6:01:de:2c:51:f2:e3:fa:
                    4d:28:fb:5a:bc:b5:93:45:73:05:c4:ab:b9:c6:5f:
                    90:ad:80:07:31:2e:dd:1b:bd:1d:3b:13:5a:4c:4f:
                    a1:72:cf:e3:91:90:da:9a:1d:d5:7e:c2:f9:9c:e8:
                    da:49:3f:ad:b5:c8:99:3d:43:48:5b:d8:18:33:25:
                    6e:39:6e:be:6c:05:8f:07:14:95:29:ed:fa:88:17:
                    f1:08:63:f7:24:24:46:85:64:cf:7b:7e:a0:b7:0a:
                    ee:d9:73:bb:52:be:7b:ed:bd:8a:e9:b0:c4:55:09:
                    b8:c0:77:d9:a8:82:bd:17:a5:5b:53:e8:57:53:f8:
                    43:a1:f2:ab:ce:6f:00:5e:7e:a3:8b:6d:f3:ad:b9:
                    02:57:71:a0:b6:ea:e1:44:49:17:c7:3c:85:d4:52:
                    6b:83:f0:2d:e9:9c:c1:e2:25:62:95:c2:2f:87:5a:
                    1b:11:a2:d2:62:e9:76:18:61:fb:b7:6d:7f:ec:5a:
                    f4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F1:11:66:E7:66:B9:91:BD:7C:6F:33:B7:E5:AC:ED:CF:F3:CB:DD
            X509v3 Authority Key Identifier:
                keyid:9C:5B:C6:3B:C0:6A:64:53:BA:F6:48:23:FA:91:3B:F1:C3:97:83:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/9C5BC63BC06A6453BAF64823FA913BF1C397832C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C5BC63BC06A6453BAF64823FA913BF1C397832C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/323830343a346231303a6330303a3a2f33382d3338203d3e20323637323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b10:c00::/38

    Signature Algorithm: sha256WithRSAEncryption
         87:af:09:02:7a:db:fb:32:2d:e2:ee:09:12:a1:fe:bb:bb:55:
         3c:32:29:50:03:7e:d5:b7:73:c6:5c:8a:99:57:9c:6c:07:b4:
         9f:6e:cd:77:f9:37:3e:d6:34:65:2d:98:34:73:57:c5:e1:5a:
         36:34:c0:8c:a2:1d:47:10:63:7d:9f:5d:59:29:47:74:36:a0:
         f3:44:8e:1e:bc:65:00:80:b6:1b:83:57:94:95:60:1f:75:00:
         48:6f:d8:e2:2c:2e:a1:a2:03:cc:21:e3:3c:dc:70:0d:23:32:
         7e:5f:fb:2f:34:01:77:00:9e:92:6f:b9:75:e9:30:68:0f:e9:
         1f:08:e7:0a:bf:98:b8:29:a0:b2:92:6d:ec:77:8f:86:78:ea:
         7e:0b:af:6d:1c:aa:28:0a:c7:4d:94:ac:cc:2c:c9:22:8c:98:
         8d:f2:85:40:27:bf:d3:12:de:af:86:b1:5c:32:24:90:4f:29:
         b8:9e:23:d0:23:ce:d7:ee:bc:67:61:36:c2:d4:6a:9a:a9:6e:
         04:58:db:15:53:4f:d3:b2:8c:40:1b:01:17:f5:e4:94:7a:8a:
         51:c8:49:c9:f1:7a:02:82:11:21:54:55:76:24:66:c0:8d:7d:
         94:1d:9b:ca:b5:90:7d:00:71:56:97:1e:01:0c:2b:48:b1:76:
         d2:1d:21:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:52:51 2025 by rpki-client