Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2cb2EoyNrUB2CmFP5xzvrSw9W4ApGERRYbsuJz88Z8eW/1/323830343a313763383a3a2f33322d3335203d3e20323633323531.roa
File:                     323830343a313763383a3a2f33322d3335203d3e20323633323531.roa (raw, json)
Hash identifier:          dLtgWFo3Ut4Jpy9K/rkuZ219OW32xVuCAPOdnOBe8+M=
Subject key identifier:   27:02:93:C1:B8:5F:A6:02:1D:A9:A8:3B:2B:4F:E9:79:43:A8:A4:4A
Certificate issuer:       /CN=099DF7CCFC5474CEBED5335C709CBFAE484FBA37
Certificate serial:       0C2C41263A5E6F738A43ABA266FD835C63A6E811
Authority key identifier: 09:9D:F7:CC:FC:54:74:CE:BE:D5:33:5C:70:9C:BF:AE:48:4F:BA:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/099DF7CCFC5474CEBED5335C709CBFAE484FBA37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2cb2EoyNrUB2CmFP5xzvrSw9W4ApGERRYbsuJz88Z8eW/1/323830343a313763383a3a2f33322d3335203d3e20323633323531.roa
Signing time:             Wed 05 Mar 2025 19:00:03 +0000
ROA not before:           Wed 05 Mar 2025 18:55:03 +0000
ROA not after:            Wed 04 Mar 2026 19:00:03 +0000
asID:                     263251
IP address blocks:        2804:17c8::/32 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:2c:41:26:3a:5e:6f:73:8a:43:ab:a2:66:fd:83:5c:63:a6:e8:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=099DF7CCFC5474CEBED5335C709CBFAE484FBA37
        Validity
            Not Before: Mar  5 18:55:03 2025 GMT
            Not After : Mar  4 19:00:03 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9b:e7:dd:5b:a1:b4:95:dc:b4:12:d3:af:5c:
                    74:04:92:94:cc:a0:81:0f:13:c6:f0:7d:c2:b3:81:
                    ff:a5:8e:f2:1b:b1:39:14:00:94:a9:6f:b3:87:a7:
                    a7:c2:b7:eb:b0:e4:20:dd:96:c0:e7:3b:7b:ed:7e:
                    3f:ee:cc:29:da:1c:d2:92:05:ba:ca:a2:41:5a:ff:
                    84:4e:e9:f1:c2:2c:67:2d:ba:db:52:41:ff:2f:ce:
                    0a:32:1e:fd:d0:fc:62:53:93:74:cd:d7:ba:e6:ee:
                    e0:8d:f0:9d:a1:47:4c:0c:c4:11:05:41:76:6e:3a:
                    7d:e5:04:63:7a:fc:34:06:42:6b:6f:dc:49:77:81:
                    28:6e:ea:16:14:70:49:b6:04:28:c8:4a:ff:c5:47:
                    50:9d:d0:87:78:68:57:1d:8f:ad:23:a0:95:52:2f:
                    60:ab:7d:eb:6b:2a:d8:1f:6e:3e:f5:71:85:ac:bd:
                    29:7e:60:2a:4e:7d:48:d4:a2:f6:de:07:1a:51:bc:
                    5e:85:b0:0a:e7:dd:24:c4:1f:ab:f5:4b:ba:38:94:
                    47:b8:86:02:17:df:99:a5:d6:07:ff:58:f1:69:a3:
                    be:d6:00:9c:51:5d:9f:70:11:96:fa:ac:3d:4a:0c:
                    b2:49:d8:4b:17:95:34:5b:62:14:b7:54:18:49:55:
                    08:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:02:93:C1:B8:5F:A6:02:1D:A9:A8:3B:2B:4F:E9:79:43:A8:A4:4A
            X509v3 Authority Key Identifier:
                keyid:09:9D:F7:CC:FC:54:74:CE:BE:D5:33:5C:70:9C:BF:AE:48:4F:BA:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2cb2EoyNrUB2CmFP5xzvrSw9W4ApGERRYbsuJz88Z8eW/1/099DF7CCFC5474CEBED5335C709CBFAE484FBA37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/099DF7CCFC5474CEBED5335C709CBFAE484FBA37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cb2EoyNrUB2CmFP5xzvrSw9W4ApGERRYbsuJz88Z8eW/1/323830343a313763383a3a2f33322d3335203d3e20323633323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:17c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:75:15:04:7f:af:61:aa:5c:5a:42:52:7d:61:22:e1:c7:6c:
         c5:e5:10:04:ab:96:32:2e:69:ab:f6:94:4c:eb:e2:da:19:ad:
         36:fd:41:69:5b:04:f0:62:cf:7b:d2:25:fc:db:e5:33:92:af:
         3a:e7:da:6f:5d:b2:fa:70:66:ea:59:98:4d:4b:9f:70:13:20:
         37:64:79:3a:78:99:02:e4:dd:39:b4:58:5a:ed:3f:52:4e:e4:
         f7:04:2e:32:ce:ba:1e:f8:bf:2b:80:0d:5c:32:25:2e:76:19:
         12:59:04:82:fb:c3:30:66:51:7a:90:48:bf:1d:4a:be:01:d4:
         a8:3f:d9:79:3f:27:0e:07:91:e1:68:27:64:c9:99:24:1a:9f:
         ba:f7:99:d5:9d:41:92:a7:90:53:13:de:9b:0b:aa:0f:9e:6e:
         07:cd:5a:6c:f3:92:db:e5:9c:7d:3e:bf:52:4b:5c:62:de:0f:
         fc:80:e1:b7:99:eb:c4:66:f2:7a:54:39:4d:63:eb:39:79:ff:
         65:14:71:1e:8c:58:7b:b3:17:51:4f:84:b9:ff:e3:3d:a2:f3:
         6f:da:5f:0f:6b:c3:ca:f1:5a:46:cd:58:3b:a5:83:98:1a:74:
         96:c7:08:f3:8b:af:4f:a3:23:48:8a:e0:24:73:41:b4:d9:d6:
         4e:45:76:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:55:50 2025 by rpki-client