Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/323830343a3838303a3a2f33322d3332203d3e203238323730.roa
File:                     323830343a3838303a3a2f33322d3332203d3e203238323730.roa (raw, json)
Hash identifier:          PGUelQlK5pSMRINBcIcZMfXYD18TOO0XRgjCQtUwyrc=
Subject key identifier:   56:DF:0E:34:76:12:28:5E:04:EC:0F:69:92:C0:C3:7C:C0:35:2D:0F
Certificate issuer:       /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial:       765F85EE7B9335F81085B16A37D68C2C64044926
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/323830343a3838303a3a2f33322d3332203d3e203238323730.roa
Signing time:             Mon 14 Oct 2024 01:49:50 +0000
ROA not before:           Mon 14 Oct 2024 01:44:50 +0000
ROA not after:            Mon 13 Oct 2025 01:49:50 +0000
asID:                     28270
IP address blocks:        2804:880::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:5f:85:ee:7b:93:35:f8:10:85:b1:6a:37:d6:8c:2c:64:04:49:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
        Validity
            Not Before: Oct 14 01:44:50 2024 GMT
            Not After : Oct 13 01:49:50 2025 GMT
        Subject: CN=56DF0E347612285E04EC0F6992C0C37CC0352D0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:9b:1b:fb:13:a4:c4:0e:74:b6:cd:03:99:92:
                    4b:f1:b5:2d:f9:0d:2f:d1:1e:81:2d:92:93:2f:f4:
                    50:09:15:3a:ff:18:11:af:91:52:f9:89:29:04:25:
                    11:bc:e4:50:94:ae:da:b3:fd:00:b3:32:63:26:b7:
                    48:a7:cb:81:ac:ee:63:2a:05:f2:23:35:9d:ef:09:
                    01:34:3d:11:ae:90:40:32:fb:bc:38:ec:6b:6c:07:
                    79:08:b2:85:50:cc:1e:2d:16:31:35:b5:e0:33:f5:
                    74:2a:7a:fc:c0:8e:48:2e:22:b5:0d:48:99:c1:d2:
                    f0:c8:44:32:61:2d:c6:28:39:61:03:f8:59:cd:8b:
                    c8:59:c6:70:f5:eb:de:7f:f9:90:8c:48:e2:39:a4:
                    6f:e7:3c:ce:eb:0e:ef:f2:2c:d2:5a:24:61:31:52:
                    d0:03:88:32:04:4c:4b:4d:4e:71:ba:04:6e:ec:34:
                    15:36:52:fa:60:c2:c7:3d:dd:dc:79:7c:26:18:73:
                    3b:41:46:c7:10:e4:09:76:b8:be:d9:e8:1f:d6:b8:
                    c6:9a:6c:f7:e3:11:a4:fb:47:eb:38:11:c6:34:53:
                    0f:bd:93:e9:dd:73:45:94:3f:b9:ee:d5:90:94:e8:
                    6d:44:09:25:7a:4d:2b:aa:c4:06:d3:27:7b:5e:33:
                    09:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:DF:0E:34:76:12:28:5E:04:EC:0F:69:92:C0:C3:7C:C0:35:2D:0F
            X509v3 Authority Key Identifier:
                keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/323830343a3838303a3a2f33322d3332203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:880::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:b6:9a:4e:02:8d:19:18:a7:3a:6c:a0:cb:61:68:08:7d:e0:
         33:7e:86:2f:14:c4:a0:6b:50:53:c2:87:1a:d6:60:8d:46:e7:
         cf:50:15:02:64:bb:e6:dd:2a:b5:a0:ac:39:2d:34:fd:2e:01:
         a9:87:a0:71:84:29:9a:63:25:6a:4f:67:cd:76:ea:0c:13:7a:
         60:4a:00:13:8a:da:5d:78:3b:34:2b:c0:f1:b3:85:b4:56:da:
         ba:bc:d5:0d:9d:20:65:17:f7:5e:68:11:88:db:cf:81:8d:5a:
         8b:ca:ee:09:02:8a:81:e5:33:9d:2a:dd:68:9e:f7:43:f6:6d:
         9a:6a:8a:36:8b:b7:97:06:a0:93:58:fe:e9:bc:ab:49:73:50:
         15:4e:a2:14:f3:c3:3f:18:6d:da:00:15:85:1a:53:7b:38:33:
         00:ec:5c:ad:05:91:48:20:c1:1c:6d:83:68:66:21:fd:de:89:
         4f:ee:22:9b:0d:35:79:4f:6c:d2:16:8b:0b:38:b0:ad:11:04:
         bd:28:c1:d3:dd:55:63:45:ad:64:83:c5:4c:6f:86:15:4b:10:
         f5:a2:a6:56:7b:b3:94:5f:68:4d:f1:12:93:a5:a6:53:15:89:
         d6:25:af:53:c5:57:6a:bb:69:54:02:a5:30:05:44:1d:97:9b:
         5a:11:07:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:06:25 2025 by rpki-client