Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/323830343a346434343a31303a3a2f34382d3438203d3e20323632393738.roa
File:                     323830343a346434343a31303a3a2f34382d3438203d3e20323632393738.roa (raw, json)
Hash identifier:          qeJpzQeOLKkwOi3JlBWrssz8TP7xi7dkX2rBNdr0I2c=
Subject key identifier:   F7:0F:5F:16:2E:7A:CF:5E:4B:7C:94:A5:C4:EC:73:79:58:5C:FA:D0
Certificate issuer:       /CN=9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41
Certificate serial:       1F9E334955CEB703278E96405883AF0BB4781116
Authority key identifier: 9B:83:28:18:9A:0C:FF:53:E9:ED:3A:2F:20:7F:FB:B9:CA:E6:1A:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/323830343a346434343a31303a3a2f34382d3438203d3e20323632393738.roa
Signing time:             Thu 06 Mar 2025 06:09:48 +0000
ROA not before:           Thu 06 Mar 2025 06:04:48 +0000
ROA not after:            Thu 05 Mar 2026 06:09:48 +0000
asID:                     262978
IP address blocks:        2804:4d44:10::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:9e:33:49:55:ce:b7:03:27:8e:96:40:58:83:af:0b:b4:78:11:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41
        Validity
            Not Before: Mar  6 06:04:48 2025 GMT
            Not After : Mar  5 06:09:48 2026 GMT
        Subject: CN=F70F5F162E7ACF5E4B7C94A5C4EC7379585CFAD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3f:8d:2e:d5:61:c8:42:8d:cd:eb:d9:33:c2:
                    26:56:6a:e0:c2:c8:d5:74:86:fc:56:b2:36:a7:f5:
                    8e:54:b1:79:25:09:6d:62:84:07:5a:e7:48:24:91:
                    ad:de:5b:33:f4:42:3d:1f:f6:d0:67:cf:a1:77:77:
                    68:74:37:e4:79:2a:0b:03:42:18:dd:2d:65:a0:c1:
                    0b:f2:05:31:32:08:e7:e0:3f:2a:6b:e8:64:25:17:
                    18:2a:c6:fb:0d:72:47:5a:6f:56:3a:b4:21:c3:93:
                    23:65:c0:d5:c6:34:67:f9:b3:68:86:8c:26:ba:01:
                    da:7b:ce:87:01:2f:70:c8:0e:79:5d:6b:3c:a1:f0:
                    65:57:35:68:62:a4:3e:3c:be:71:98:f8:3e:86:59:
                    67:4d:ed:7a:eb:bc:b8:8d:11:4d:76:53:44:41:e2:
                    98:8d:4b:66:63:ca:e0:eb:24:bd:c2:60:d8:60:78:
                    69:4f:2f:0a:a3:6d:f1:8c:0f:51:5e:6a:89:ba:4b:
                    d9:03:9d:b8:19:05:98:96:65:f5:3e:ac:f5:b8:e0:
                    d6:8c:16:00:cf:7c:2c:31:23:ae:b6:bc:32:b4:cb:
                    0e:a3:3a:0e:02:57:e5:f9:92:12:45:23:80:b2:67:
                    0c:d6:ea:ef:10:8c:7a:dc:03:86:be:eb:13:00:a9:
                    bd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:0F:5F:16:2E:7A:CF:5E:4B:7C:94:A5:C4:EC:73:79:58:5C:FA:D0
            X509v3 Authority Key Identifier:
                keyid:9B:83:28:18:9A:0C:FF:53:E9:ED:3A:2F:20:7F:FB:B9:CA:E6:1A:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/323830343a346434343a31303a3a2f34382d3438203d3e20323632393738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d44:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:bb:4a:08:ed:ed:56:9b:e0:9e:f1:a0:29:28:1b:c9:c9:0d:
         56:eb:e4:01:80:43:6a:58:d6:33:5e:ad:0f:e5:a9:d6:22:41:
         28:ff:63:f4:10:d3:bd:52:3e:0c:25:34:34:fa:dc:48:a4:14:
         75:d9:31:a8:2e:59:d0:98:06:6c:59:61:c2:37:95:6e:28:72:
         d5:48:11:a0:1a:35:60:dc:d9:e9:61:fc:d7:84:6a:be:52:09:
         96:24:ae:93:6c:c1:6f:a5:7f:45:97:29:db:60:9e:19:08:7d:
         14:08:80:c7:cc:1f:17:72:57:b7:2b:c7:bb:b3:af:c2:b4:b3:
         6b:29:c3:a8:26:bc:d9:a2:2a:e0:ef:24:b0:f0:76:b5:cf:18:
         29:f2:ef:ac:dd:e4:59:d5:88:63:e5:f9:28:14:8e:67:01:e2:
         e9:35:b5:60:9c:18:70:34:d0:cd:96:68:1f:1d:7b:4d:bd:ae:
         58:b7:16:02:13:b6:10:c3:82:1f:48:0d:01:b0:4b:70:c5:45:
         6d:f9:96:99:13:ca:77:20:5c:b6:5d:2a:ab:91:bb:f7:08:3a:
         04:29:60:91:cd:b6:52:3e:02:17:d4:d8:6a:64:ec:10:da:3e:
         2d:76:14:73:a3:92:fc:90:e0:c5:43:75:a0:9b:a3:b6:4c:98:
         55:0b:ea:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:09:51 2025 by rpki-client