Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MiTSyS2dWcUZonFui1ZsgbSTJqTrE4bcAY6pRkhuRCd/0/323830343a373131383a3a2f33322d3438203d3e20323730373636.roa
File:                     323830343a373131383a3a2f33322d3438203d3e20323730373636.roa (raw, json)
Hash identifier:          xjKR1yw37Ib4ZydzJ9UEfGKKXZryCmlIOmt7xvRK2OM=
Subject key identifier:   0D:41:24:93:49:6F:9F:34:0D:DE:30:B0:DB:E0:52:00:B7:B3:85:42
Certificate issuer:       /CN=F7181E90C19D9180E438899EF8D4E3E5A2BF2CD0
Certificate serial:       312253B505F8C12A21BCE177D8CAA1EFE07D3AA3
Authority key identifier: F7:18:1E:90:C1:9D:91:80:E4:38:89:9E:F8:D4:E3:E5:A2:BF:2C:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7181E90C19D9180E438899EF8D4E3E5A2BF2CD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MiTSyS2dWcUZonFui1ZsgbSTJqTrE4bcAY6pRkhuRCd/0/323830343a373131383a3a2f33322d3438203d3e20323730373636.roa
Signing time:             Sat 14 Dec 2024 23:04:03 +0000
ROA not before:           Sat 14 Dec 2024 22:59:03 +0000
ROA not after:            Sat 13 Dec 2025 23:04:03 +0000
asID:                     270766
IP address blocks:        2804:7118::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:22:53:b5:05:f8:c1:2a:21:bc:e1:77:d8:ca:a1:ef:e0:7d:3a:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7181E90C19D9180E438899EF8D4E3E5A2BF2CD0
        Validity
            Not Before: Dec 14 22:59:03 2024 GMT
            Not After : Dec 13 23:04:03 2025 GMT
        Subject: CN=0D412493496F9F340DDE30B0DBE05200B7B38542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:43:9d:f6:26:ef:25:90:d4:a6:38:89:03:a5:
                    70:33:fe:76:58:24:18:8b:4f:ce:de:d8:83:4d:18:
                    8f:2a:3a:fb:ec:55:32:0c:c8:e1:59:d4:17:8a:1a:
                    29:2c:5e:40:c1:66:e5:e7:55:cf:18:2f:01:b0:71:
                    4e:26:bb:8a:e1:f0:b2:a0:2f:b5:00:b9:e3:2b:ba:
                    13:0c:25:6d:94:91:40:18:9b:a2:e9:d9:34:86:44:
                    6d:29:1c:58:fd:35:f2:2c:57:1a:28:e2:df:a9:ca:
                    f1:0b:94:a0:91:2e:c2:63:3b:4b:79:73:79:d0:7a:
                    b2:66:66:20:1c:c8:f8:e8:ad:79:7c:5b:04:73:7a:
                    47:8b:04:ab:a1:78:79:82:45:57:7b:20:2c:e2:f2:
                    aa:5c:59:7a:f1:ef:f0:c9:58:e9:a5:fc:7f:32:85:
                    5b:2b:e3:ad:73:c6:8c:b7:58:97:0c:10:7b:48:df:
                    5e:5d:e9:6e:de:1a:ab:74:31:19:36:90:2d:ae:06:
                    5a:31:f0:74:c1:cb:a5:66:ab:52:14:7b:83:75:c6:
                    1b:83:29:8b:8e:e9:0f:f3:ee:7e:a3:2a:10:0d:f7:
                    ff:75:c1:0e:31:7d:37:fe:85:7e:e2:1f:09:a1:4d:
                    b9:4f:e1:cc:74:22:c5:11:8b:c2:48:d1:ee:b8:1e:
                    51:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:41:24:93:49:6F:9F:34:0D:DE:30:B0:DB:E0:52:00:B7:B3:85:42
            X509v3 Authority Key Identifier:
                keyid:F7:18:1E:90:C1:9D:91:80:E4:38:89:9E:F8:D4:E3:E5:A2:BF:2C:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MiTSyS2dWcUZonFui1ZsgbSTJqTrE4bcAY6pRkhuRCd/0/F7181E90C19D9180E438899EF8D4E3E5A2BF2CD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7181E90C19D9180E438899EF8D4E3E5A2BF2CD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MiTSyS2dWcUZonFui1ZsgbSTJqTrE4bcAY6pRkhuRCd/0/323830343a373131383a3a2f33322d3438203d3e20323730373636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7118::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:99:d5:e0:ac:e8:09:9d:e8:4e:65:43:4d:31:d1:24:bd:33:
         15:99:5d:ba:54:95:b0:70:e3:98:1e:47:29:b7:fd:b8:8a:71:
         a5:db:41:01:c9:a4:a8:93:e6:9d:1f:58:18:06:db:77:e1:79:
         cf:8c:11:d9:56:bb:9f:fe:3c:1b:47:82:f3:b8:d4:71:95:39:
         42:a9:b6:54:8d:f9:eb:60:7a:53:12:d2:df:1c:b2:26:a8:86:
         b1:a8:4b:90:29:6e:36:34:56:04:be:d6:ba:fb:0a:2c:48:d4:
         7b:e5:fe:97:5f:ae:54:c6:3f:cf:68:3a:2f:4a:48:80:80:0e:
         ca:af:4b:8f:da:d0:25:b1:af:ad:9e:52:35:aa:88:5a:23:80:
         c2:9d:4d:e5:e6:e7:2e:54:fd:52:38:59:92:27:4f:a7:6e:19:
         d4:b6:b7:14:4e:16:45:0c:ac:9d:0c:96:5f:e5:f9:9f:0b:7e:
         6f:f3:77:1f:92:e0:8e:f2:9f:df:a6:8d:0b:a3:06:7e:c8:e8:
         0f:d4:0a:f2:64:33:75:63:16:3d:49:32:6e:54:34:c9:8b:4e:
         42:0c:ae:41:29:58:d7:bf:45:61:c0:85:ce:0a:d2:28:19:c2:
         d8:fd:33:84:81:67:35:93:a9:a5:5e:5e:d2:76:1f:19:81:17:
         7d:4b:7c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:15:27 2025 by rpki-client