Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/323830343a383530633a3a2f33322d3332203d3e20323732353534.roa
File:                     323830343a383530633a3a2f33322d3332203d3e20323732353534.roa (raw, json)
Hash identifier:          LhHrVO/GmkzKwkdmDA9p1zeyB5qwzdKsetRDyBK7GWE=
Subject key identifier:   F3:17:7A:2E:5E:6E:74:D0:BE:38:EA:EB:92:DC:49:54:AF:C7:68:0E
Certificate issuer:       /CN=19C9E939FDE3ECCA217048709E87CDA9D76B36B8
Certificate serial:       66B4E0CA1AAA661022C33F5FEB99D3F667E1CD60
Authority key identifier: 19:C9:E9:39:FD:E3:EC:CA:21:70:48:70:9E:87:CD:A9:D7:6B:36:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/323830343a383530633a3a2f33322d3332203d3e20323732353534.roa
Signing time:             Thu 06 Mar 2025 05:29:28 +0000
ROA not before:           Thu 06 Mar 2025 05:24:28 +0000
ROA not after:            Thu 05 Mar 2026 05:29:28 +0000
asID:                     272554
IP address blocks:        2804:850c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:b4:e0:ca:1a:aa:66:10:22:c3:3f:5f:eb:99:d3:f6:67:e1:cd:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19C9E939FDE3ECCA217048709E87CDA9D76B36B8
        Validity
            Not Before: Mar  6 05:24:28 2025 GMT
            Not After : Mar  5 05:29:28 2026 GMT
        Subject: CN=F3177A2E5E6E74D0BE38EAEB92DC4954AFC7680E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b8:d6:e8:ad:a5:67:ff:f9:76:49:92:14:57:
                    be:32:20:d8:11:a1:e6:d8:a7:0c:34:5f:fd:a5:69:
                    00:7c:27:39:3b:a9:62:8b:70:84:6e:17:ce:98:77:
                    ab:78:da:fc:02:88:9e:95:4e:82:f6:bf:c2:7a:da:
                    28:01:77:ca:4b:43:be:c3:af:75:5a:3b:a5:6f:fb:
                    33:b9:43:50:b4:8b:0e:de:4d:04:64:e9:ed:bf:03:
                    cf:48:32:f2:67:6d:78:36:f4:36:36:a1:c3:b5:de:
                    46:71:ca:5c:2e:42:d8:fb:d8:ef:cd:d2:4e:88:07:
                    f2:9b:27:f7:92:e3:5a:58:f5:47:af:3a:e3:72:c0:
                    7c:a5:8a:a7:71:72:9b:66:a4:e7:c7:45:5e:ba:d7:
                    28:bf:99:89:1f:45:a3:a5:51:d4:1d:e7:03:dc:98:
                    89:f8:b8:a4:c8:da:a0:a0:55:bd:4c:40:dd:2c:cc:
                    60:02:41:92:6d:7f:9e:68:8c:03:a9:0a:05:91:fb:
                    31:57:d1:e8:9b:b5:13:2b:a4:a5:b1:73:7c:3b:67:
                    62:01:4f:13:b9:c8:7e:a4:4a:35:9e:cf:8f:03:49:
                    2e:78:16:bd:84:59:85:52:7f:5d:0c:f3:4f:9a:31:
                    63:1e:3e:b5:e1:b0:74:7c:c8:c2:c5:0d:b5:1e:09:
                    4b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:17:7A:2E:5E:6E:74:D0:BE:38:EA:EB:92:DC:49:54:AF:C7:68:0E
            X509v3 Authority Key Identifier:
                keyid:19:C9:E9:39:FD:E3:EC:CA:21:70:48:70:9E:87:CD:A9:D7:6B:36:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/323830343a383530633a3a2f33322d3332203d3e20323732353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:850c::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:24:04:6f:5e:dc:04:b7:0b:f6:58:a6:60:d9:88:94:b8:2d:
         45:c6:46:da:dd:e3:b7:60:c5:d6:10:58:97:51:69:69:c1:fc:
         b2:bb:3d:21:71:01:a3:c9:71:79:9a:08:7f:67:bd:e8:8d:93:
         7f:39:67:5d:f1:3b:5d:58:8c:5f:45:65:a4:8b:85:fa:ce:bb:
         e7:d2:90:7e:52:b3:55:43:e0:89:d5:65:d6:10:8d:b3:90:46:
         e9:f2:f1:8d:49:5e:b5:2f:0c:a3:e4:26:e1:4a:65:9e:39:5f:
         dd:a6:35:cc:61:ea:39:ad:4b:80:f2:fd:7b:52:3b:bc:b6:e3:
         06:90:76:d8:70:53:ac:a6:f8:29:ee:a6:f9:a0:93:17:ce:f1:
         5e:ba:3c:08:60:e6:90:73:97:55:b1:d2:80:02:0a:03:f7:7b:
         0d:ef:ed:05:c0:23:34:20:a0:7d:5c:d7:93:f7:8b:72:a9:20:
         fa:e0:66:dd:62:7b:a5:89:b1:b2:22:3f:8c:ac:15:bc:7f:40:
         75:43:cc:3b:32:19:f3:ca:fe:b3:6b:6f:1c:6c:c1:d3:ac:cf:
         8b:22:2a:92:2d:4c:bd:dc:82:31:bd:14:78:55:ea:72:d5:66:
         c2:e8:32:d2:70:bf:aa:fb:21:4c:31:f2:7c:f8:3a:a7:a1:40:
         0b:1a:20:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:17:24 2025 by rpki-client