Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/323830343a333934303a383030303a3a2f33332d3333203d3e20323636303231.roa
File:                     323830343a333934303a383030303a3a2f33332d3333203d3e20323636303231.roa (raw, json)
Hash identifier:          lsMudTf2DoKp2hHS6jlbQWNkAVyCQQ6bRQukcqUKC0c=
Subject key identifier:   51:41:D8:8B:4E:B9:72:9A:F9:AD:7E:B5:56:BE:08:1B:D1:54:E3:BC
Certificate issuer:       /CN=4D50CC6156147AA39474DCFF014FE478639F7DD3
Certificate serial:       7AF4BF672245604A78D89F3EAD2AEDAF8FD6260A
Authority key identifier: 4D:50:CC:61:56:14:7A:A3:94:74:DC:FF:01:4F:E4:78:63:9F:7D:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D50CC6156147AA39474DCFF014FE478639F7DD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/323830343a333934303a383030303a3a2f33332d3333203d3e20323636303231.roa
Signing time:             Tue 08 Jul 2025 13:48:11 +0000
ROA not before:           Tue 08 Jul 2025 13:43:11 +0000
ROA not after:            Tue 07 Jul 2026 13:48:11 +0000
asID:                     266021
IP address blocks:        2804:3940:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:f4:bf:67:22:45:60:4a:78:d8:9f:3e:ad:2a:ed:af:8f:d6:26:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D50CC6156147AA39474DCFF014FE478639F7DD3
        Validity
            Not Before: Jul  8 13:43:11 2025 GMT
            Not After : Jul  7 13:48:11 2026 GMT
        Subject: CN=5141D88B4EB9729AF9AD7EB556BE081BD154E3BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b3:ee:91:48:32:ff:45:74:04:79:85:f3:f2:
                    b7:4a:4e:1e:05:db:32:72:20:26:a3:94:53:a2:2b:
                    b0:5a:46:86:b1:0e:44:d3:01:db:1f:0c:98:d1:4a:
                    a5:0d:af:67:5e:f6:bd:48:87:ef:df:87:b4:f1:49:
                    6f:ad:6f:f0:38:bc:8e:5f:7e:82:6d:07:da:aa:97:
                    b6:ef:55:6c:13:e0:b0:52:d8:3b:d1:f8:84:06:50:
                    18:b5:76:ba:0e:2e:d7:de:8c:ad:88:cf:57:2d:ce:
                    ad:26:95:96:5e:48:b6:8b:1a:ff:6b:9b:7c:d4:a3:
                    a9:28:8b:45:f0:e0:65:3c:a2:86:e6:be:94:e6:d2:
                    57:b2:ff:d7:2f:4b:8b:6a:c8:92:54:64:77:aa:68:
                    21:08:8f:1f:e8:1a:09:ce:c3:1d:19:4a:1e:73:5c:
                    3d:17:3f:d5:9a:96:6f:f4:d4:03:cf:6c:43:41:a8:
                    a1:51:ae:71:82:95:a3:79:c0:db:a7:f3:38:7e:87:
                    b3:88:a6:df:73:16:44:6c:58:17:ed:3e:e8:48:7a:
                    ec:34:73:c8:42:65:ea:79:fc:50:ee:e6:2e:49:ce:
                    70:8a:19:47:4b:d4:cf:6b:2a:ee:0d:38:a1:38:82:
                    5c:5a:cf:31:d4:c3:39:c5:bb:10:76:c7:ba:5b:00:
                    82:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:41:D8:8B:4E:B9:72:9A:F9:AD:7E:B5:56:BE:08:1B:D1:54:E3:BC
            X509v3 Authority Key Identifier:
                keyid:4D:50:CC:61:56:14:7A:A3:94:74:DC:FF:01:4F:E4:78:63:9F:7D:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/4D50CC6156147AA39474DCFF014FE478639F7DD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D50CC6156147AA39474DCFF014FE478639F7DD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/323830343a333934303a383030303a3a2f33332d3333203d3e20323636303231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3940:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         a1:ba:de:be:42:2c:8e:cf:50:27:5e:0d:4d:af:c1:f5:b4:33:
         9a:43:2f:d4:4b:65:13:b9:2c:0d:a6:7a:0f:e3:ba:81:ec:90:
         91:ce:e4:47:48:1c:7e:08:1d:15:25:08:a8:20:dc:2e:f1:86:
         dc:1c:b2:30:0c:af:4f:94:8a:43:95:71:58:c8:63:23:50:df:
         4c:b7:4b:b5:a2:ef:e8:db:19:2a:e5:87:c9:14:3b:c1:e2:be:
         e9:10:4e:a5:0a:b5:01:18:be:4c:42:c5:a2:29:a4:a0:4d:fa:
         55:b1:4c:62:e3:19:ee:14:52:44:e3:35:c8:30:e5:83:27:d6:
         d6:8f:17:7a:9f:c6:62:d9:d3:6b:a8:86:a5:e1:9a:fc:6b:1f:
         79:b1:6d:0d:ef:22:e2:46:ec:27:f3:6b:00:44:ea:d5:b7:dc:
         65:db:03:d1:11:ce:ff:ac:f2:1b:48:a8:9a:bc:74:b1:02:e6:
         75:90:41:9f:fe:98:00:6b:c0:00:65:2c:0b:b1:0b:a7:37:3b:
         5c:73:a2:e8:d6:dd:17:ca:a5:de:b9:57:d3:98:77:ee:3d:d8:
         cc:de:e8:bd:1d:54:4e:7e:a0:b6:3a:23:b2:6f:b6:6b:ba:23:
         f8:7c:15:fc:c3:9b:b3:24:1f:9b:76:55:92:97:c6:23:26:d5:
         72:c3:2b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 13:08:52 2025 by rpki-client