Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/323830343a373634383a3a2f33322d3438203d3e20323731313031.roa
File:                     323830343a373634383a3a2f33322d3438203d3e20323731313031.roa (raw, json)
Hash identifier:          6V0YrvLeMIiLEZTlyxZrdu23I1DIkWgF0T9EpN6P57k=
Subject key identifier:   71:EA:C0:4D:CC:9B:53:B0:6E:7E:66:B4:3E:98:33:93:5E:03:66:4A
Certificate issuer:       /CN=CA5EB04FC8DA601024E12F23EF139B499E69972D
Certificate serial:       3645CE077A7B92BFFFF7E828E8B943C28C24D083
Authority key identifier: CA:5E:B0:4F:C8:DA:60:10:24:E1:2F:23:EF:13:9B:49:9E:69:97:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/323830343a373634383a3a2f33322d3438203d3e20323731313031.roa
Signing time:             Thu 06 Mar 2025 05:52:21 +0000
ROA not before:           Thu 06 Mar 2025 05:47:21 +0000
ROA not after:            Thu 05 Mar 2026 05:52:21 +0000
asID:                     271101
IP address blocks:        2804:7648::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:45:ce:07:7a:7b:92:bf:ff:f7:e8:28:e8:b9:43:c2:8c:24:d0:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA5EB04FC8DA601024E12F23EF139B499E69972D
        Validity
            Not Before: Mar  6 05:47:21 2025 GMT
            Not After : Mar  5 05:52:21 2026 GMT
        Subject: CN=71EAC04DCC9B53B06E7E66B43E9833935E03664A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:13:33:04:20:c0:46:b3:60:77:e7:d4:cc:ce:
                    ee:bc:05:b2:3d:02:26:8f:7e:44:0a:20:88:e5:ca:
                    e6:e9:19:13:1c:95:cb:46:5f:02:eb:ad:07:89:60:
                    36:f1:85:66:19:2a:67:ae:b5:af:24:75:59:83:a2:
                    ff:51:41:7c:8c:f8:29:3e:fd:ad:9b:d0:11:5b:91:
                    17:4b:aa:41:62:a5:4d:c5:ea:8b:31:ef:a7:54:7e:
                    31:ca:36:73:24:d6:ae:f4:3e:1e:08:e6:ae:ed:7d:
                    0c:29:c6:65:03:53:50:94:e5:c4:ee:c8:93:40:fa:
                    cf:bb:26:d3:4d:60:4e:17:40:1a:10:49:fb:c6:25:
                    09:d1:80:0b:d8:55:36:e5:84:87:99:34:e6:44:5d:
                    41:71:c9:7d:bd:4d:ba:be:0e:ba:f6:d3:80:61:1e:
                    e7:ff:55:cb:43:0a:83:7e:2f:17:a7:ad:3a:c8:da:
                    35:8a:c6:9e:cd:f1:96:42:72:62:bf:84:38:0e:5a:
                    95:c7:13:59:9b:24:c6:00:51:93:7e:43:ac:ad:95:
                    49:43:4a:c1:2a:55:a5:f2:7b:28:6d:04:4d:a1:f8:
                    dd:d8:ff:57:7b:b0:83:94:f5:03:90:67:c6:7a:87:
                    11:a2:f3:22:a0:0c:c0:5d:89:c2:53:3f:d7:ef:b5:
                    bd:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:EA:C0:4D:CC:9B:53:B0:6E:7E:66:B4:3E:98:33:93:5E:03:66:4A
            X509v3 Authority Key Identifier:
                keyid:CA:5E:B0:4F:C8:DA:60:10:24:E1:2F:23:EF:13:9B:49:9E:69:97:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/323830343a373634383a3a2f33322d3438203d3e20323731313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7648::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:e0:22:51:db:bb:9b:4a:1e:31:61:44:01:7e:ee:4d:d7:3f:
         9f:26:35:f2:86:4e:4b:87:25:e3:fe:d7:b6:79:7d:a2:33:83:
         7e:a3:b6:72:cc:71:d7:c7:1e:5e:88:8e:f9:ee:9c:31:12:06:
         40:26:52:5e:7c:1e:5f:9a:d4:03:59:8b:b4:c0:d7:10:fd:aa:
         89:46:06:28:56:de:f3:e7:41:cf:38:a1:97:b1:1e:65:39:1f:
         43:9b:7a:d1:fc:a2:b3:db:cf:a7:42:ae:3f:68:0d:e6:7a:43:
         f3:59:5c:88:87:40:65:e4:40:6b:92:fb:f0:d8:8a:ac:6b:75:
         bf:09:39:f8:df:65:42:18:f5:f4:ce:be:d0:b5:b9:3c:a5:ef:
         90:62:a5:9f:57:02:51:de:9b:22:a3:91:c8:95:a5:62:27:a5:
         03:e8:a3:b9:34:43:8b:d6:00:a1:63:3c:49:56:98:15:2b:24:
         81:74:e1:67:bd:63:bc:d9:fb:d8:f5:e0:3e:6f:41:97:95:63:
         0b:28:86:ac:7f:16:01:66:87:c2:41:1a:2a:44:46:0b:6c:eb:
         05:6e:e2:40:27:81:88:2f:65:07:7e:d5:4b:ed:3d:29:53:a1:
         98:47:29:3e:4e:45:d4:98:ea:57:e0:f1:98:72:99:7c:83:4a:
         fd:8f:3f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 06:59:52 2025 by rpki-client