Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4KPUCoxQgy7xk9PQ59vyzy4eJ5wGXibUeSEErkauq3Y1/1/323830313a38303a316266303a3a2f34382d3438203d3e203532363038.roa
File:                     323830313a38303a316266303a3a2f34382d3438203d3e203532363038.roa (raw, json)
Hash identifier:          tLpyIYhair/2kGsbwiXQ4+44Mw3Cp2QvCw+qdfv3Dds=
Subject key identifier:   27:54:2C:AA:56:94:F9:5F:76:59:83:B2:80:92:F8:17:E6:A5:9C:3C
Certificate issuer:       /CN=0C907E912B5EF3B83AEAE8546F7A1DDBDC5551A0
Certificate serial:       6810E08D350CCDAC8060F07AC39962A9BEB1B731
Authority key identifier: 0C:90:7E:91:2B:5E:F3:B8:3A:EA:E8:54:6F:7A:1D:DB:DC:55:51:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C907E912B5EF3B83AEAE8546F7A1DDBDC5551A0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4KPUCoxQgy7xk9PQ59vyzy4eJ5wGXibUeSEErkauq3Y1/1/323830313a38303a316266303a3a2f34382d3438203d3e203532363038.roa
Signing time:             Thu 06 Mar 2025 19:59:38 +0000
ROA not before:           Thu 06 Mar 2025 19:54:38 +0000
ROA not after:            Thu 05 Mar 2026 19:59:38 +0000
asID:                     52608
IP address blocks:        2801:80:1bf0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:10:e0:8d:35:0c:cd:ac:80:60:f0:7a:c3:99:62:a9:be:b1:b7:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C907E912B5EF3B83AEAE8546F7A1DDBDC5551A0
        Validity
            Not Before: Mar  6 19:54:38 2025 GMT
            Not After : Mar  5 19:59:38 2026 GMT
        Subject: CN=27542CAA5694F95F765983B28092F817E6A59C3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6b:e8:d8:eb:ce:ed:55:b3:2b:86:cc:a1:56:
                    dd:27:99:30:d8:34:fc:ca:a4:bb:a1:27:19:87:50:
                    ba:5e:d4:bd:d1:63:3a:37:ec:e9:35:62:a0:48:5c:
                    1b:bc:7c:a0:5b:e3:cf:dc:1e:23:5a:7e:24:53:20:
                    07:fe:66:2e:3e:05:f7:39:03:54:5a:9a:59:fa:de:
                    b2:b5:9a:84:ed:9c:27:31:4d:41:d2:4b:ef:cc:c9:
                    e3:b5:24:d2:1c:20:74:f5:c1:a3:f6:fd:e0:e1:05:
                    3f:48:0f:38:57:db:37:a8:cc:b4:71:40:c4:45:2a:
                    d8:2d:8a:98:a7:23:5d:73:ef:1d:91:ba:dc:df:ab:
                    9f:b1:e7:5b:a6:71:84:bd:4e:af:1e:92:3c:fe:ef:
                    d5:74:23:66:25:fa:10:5b:a4:0a:13:94:da:65:f9:
                    14:42:0c:d5:c8:2d:72:3b:7a:c6:25:51:00:d1:6c:
                    f0:64:55:35:21:b3:e5:84:91:3c:0f:97:b4:21:fc:
                    89:1b:c0:1f:cb:aa:26:57:91:59:cf:00:c2:98:e2:
                    e0:25:4e:93:0c:c0:b1:13:ec:fa:91:31:c2:40:8b:
                    39:a5:93:55:82:15:c9:0d:ea:ac:3d:b5:b8:38:9e:
                    b8:f2:e9:bd:b1:85:2b:76:b9:71:d7:ce:41:0b:e7:
                    d6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:54:2C:AA:56:94:F9:5F:76:59:83:B2:80:92:F8:17:E6:A5:9C:3C
            X509v3 Authority Key Identifier:
                keyid:0C:90:7E:91:2B:5E:F3:B8:3A:EA:E8:54:6F:7A:1D:DB:DC:55:51:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4KPUCoxQgy7xk9PQ59vyzy4eJ5wGXibUeSEErkauq3Y1/1/0C907E912B5EF3B83AEAE8546F7A1DDBDC5551A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C907E912B5EF3B83AEAE8546F7A1DDBDC5551A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KPUCoxQgy7xk9PQ59vyzy4eJ5wGXibUeSEErkauq3Y1/1/323830313a38303a316266303a3a2f34382d3438203d3e203532363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:1bf0::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:c8:6e:ee:e0:04:87:69:24:7f:b8:d0:8d:c3:b4:12:1a:17:
         14:68:3a:66:0e:18:ba:35:a3:fe:9f:23:3f:4d:80:a0:05:1f:
         d1:ae:8b:d3:9f:0d:55:39:f9:3a:a4:4b:69:09:88:52:60:c3:
         cd:1b:88:2e:f7:6c:04:ba:65:a5:40:2a:d5:2e:f2:87:74:45:
         f3:25:2c:d1:15:cf:f4:72:d7:96:7c:b0:26:00:fc:af:40:d1:
         53:72:28:32:ef:ca:f4:86:13:98:cd:da:6f:cd:c7:09:0f:ea:
         10:1e:c9:3d:fc:16:a5:7b:b0:24:f5:28:29:a2:00:1a:0c:64:
         e0:3b:78:c9:4a:2c:b5:e0:cc:59:a9:f7:a2:d7:90:87:50:b9:
         80:dd:43:bf:b8:d7:77:31:93:37:fb:2c:34:c1:32:22:25:6e:
         bb:81:18:78:52:94:51:09:04:5e:34:fd:e1:ca:95:3c:0d:b9:
         78:7b:5d:66:dc:67:83:a9:21:9c:e2:88:03:11:6a:29:8d:f2:
         21:35:6d:fc:7c:b2:ea:0f:10:81:57:d5:2e:05:59:f4:e9:fa:
         67:1e:b0:35:3c:55:80:54:e4:36:10:45:b3:46:c8:f5:2f:cb:
         af:01:ca:79:df:f8:3b:e7:e3:e9:08:9e:42:4f:4b:6b:58:e1:
         8a:a1:e1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:19:52 2025 by rpki-client