Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/323830343a383530633a633030303a3a2f34302d3430203d3e20323732353534.roa
File:                     323830343a383530633a633030303a3a2f34302d3430203d3e20323732353534.roa (raw, json)
Hash identifier:          ZnCQ04NjYjZFP4EL93UTYbNmonVLejw8p3gJcJc7zQE=
Subject key identifier:   0B:D7:48:0A:CF:B1:F3:07:65:3C:57:2B:9D:93:61:1C:59:B2:28:08
Certificate issuer:       /CN=19C9E939FDE3ECCA217048709E87CDA9D76B36B8
Certificate serial:       10BD45CDD0A77E84A11E608DC1F63A02C84AEE8C
Authority key identifier: 19:C9:E9:39:FD:E3:EC:CA:21:70:48:70:9E:87:CD:A9:D7:6B:36:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/323830343a383530633a633030303a3a2f34302d3430203d3e20323732353534.roa
Signing time:             Thu 06 Mar 2025 05:29:28 +0000
ROA not before:           Thu 06 Mar 2025 05:24:28 +0000
ROA not after:            Thu 05 Mar 2026 05:29:28 +0000
asID:                     272554
IP address blocks:        2804:850c:c000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:bd:45:cd:d0:a7:7e:84:a1:1e:60:8d:c1:f6:3a:02:c8:4a:ee:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19C9E939FDE3ECCA217048709E87CDA9D76B36B8
        Validity
            Not Before: Mar  6 05:24:28 2025 GMT
            Not After : Mar  5 05:29:28 2026 GMT
        Subject: CN=0BD7480ACFB1F307653C572B9D93611C59B22808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1a:7e:65:fa:5a:8d:29:95:5c:d7:ce:d6:29:
                    05:af:03:80:0d:53:e0:78:b4:50:df:30:1e:2d:4f:
                    d2:22:33:e7:ce:8f:95:71:6e:43:96:b1:3a:fb:21:
                    af:a1:64:ae:76:21:30:6d:15:de:b2:7e:71:84:9e:
                    f1:29:a0:90:2c:a7:13:ae:03:ee:79:8e:15:c4:2a:
                    37:ff:79:e3:df:8a:df:6c:5b:70:e2:5d:ea:40:da:
                    43:aa:be:7d:63:73:ae:7c:60:70:73:68:69:45:e2:
                    50:b6:ab:1a:41:a9:ef:42:de:82:61:2e:dc:c0:16:
                    25:29:eb:f4:2a:02:ef:71:59:b2:64:29:04:cc:bc:
                    12:5a:3d:4c:48:24:67:9c:f4:dc:5f:e0:03:75:f6:
                    fc:50:d2:47:cb:d8:d4:bb:86:69:06:eb:dd:ab:00:
                    95:6e:95:da:3b:da:bf:e6:89:62:64:24:26:1c:5a:
                    c5:28:29:17:95:e9:68:db:f6:83:26:bf:f3:3a:4a:
                    ec:fa:f0:4a:93:6b:78:e4:7d:a6:6f:09:35:b9:19:
                    94:c1:11:b4:d3:46:8e:a7:a4:d9:a3:45:ab:13:2d:
                    64:ea:1d:75:2c:d1:c4:54:5f:d7:26:bf:44:e0:d5:
                    1f:8e:c4:1f:fb:7f:7c:96:84:27:02:b6:cb:70:56:
                    a9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D7:48:0A:CF:B1:F3:07:65:3C:57:2B:9D:93:61:1C:59:B2:28:08
            X509v3 Authority Key Identifier:
                keyid:19:C9:E9:39:FD:E3:EC:CA:21:70:48:70:9E:87:CD:A9:D7:6B:36:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/323830343a383530633a633030303a3a2f34302d3430203d3e20323732353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:850c:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         e3:a6:b6:bb:97:55:49:27:2f:03:41:b5:64:25:01:81:a4:ff:
         6f:89:c1:b8:93:78:a6:45:62:9a:3c:9c:ea:ee:96:66:75:61:
         38:79:51:89:cd:11:29:14:3d:8a:18:1b:99:d1:4c:8d:61:a8:
         27:83:13:1c:a5:e2:d8:23:a2:f0:ba:55:23:38:28:b8:0e:92:
         31:ee:d3:5f:f8:09:62:a9:c9:6b:53:48:1d:a1:63:12:30:35:
         98:1f:85:a1:9c:e1:d1:39:3b:61:a0:ad:7d:b8:10:fa:a5:95:
         a2:49:aa:2d:52:76:ce:ab:6b:f0:4d:c7:ac:36:83:fc:9c:06:
         56:c9:1a:84:9e:64:22:24:b1:21:be:39:42:0a:a2:3f:9e:48:
         f6:71:38:61:c2:65:7c:96:03:b6:f1:ae:31:6a:cd:49:5c:cb:
         45:d7:4c:db:b9:6e:7d:48:38:f1:62:22:5d:5a:36:4a:4f:0d:
         fa:4c:5b:b8:b2:2b:0c:11:39:a2:c4:30:28:8d:52:d6:eb:50:
         e8:b0:30:c6:8d:80:a0:77:90:82:ef:e2:80:b5:62:9f:d1:1d:
         75:ea:c3:af:15:de:fc:98:c3:cd:36:37:55:2d:d3:dc:ec:00:
         5e:9d:d2:34:63:90:de:62:c5:e2:ab:d4:a6:a7:df:48:e7:36:
         88:55:ba:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:20:09 2025 by rpki-client