Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/323830313a38303a313430303a3a2f34382d3438203d3e203131303937.roa
File:                     323830313a38303a313430303a3a2f34382d3438203d3e203131303937.roa (raw, json)
Hash identifier:          EH1sfEAZRN9fm6WRJECWgV5XxWGw16lC6YNprsFfCeQ=
Subject key identifier:   8B:B2:C8:DF:AC:5C:69:C0:D2:82:05:5A:0D:38:F1:67:86:BB:82:BF
Certificate issuer:       /CN=38EA6456C8B35EB75FBC6A42DA7F260358634F2F
Certificate serial:       3EEA82500E868AB3F4682BBC662AAD9A50CE3958
Authority key identifier: 38:EA:64:56:C8:B3:5E:B7:5F:BC:6A:42:DA:7F:26:03:58:63:4F:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38EA6456C8B35EB75FBC6A42DA7F260358634F2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/323830313a38303a313430303a3a2f34382d3438203d3e203131303937.roa
Signing time:             Thu 06 Mar 2025 17:42:30 +0000
ROA not before:           Thu 06 Mar 2025 17:37:30 +0000
ROA not after:            Thu 05 Mar 2026 17:42:30 +0000
asID:                     11097
IP address blocks:        2801:80:1400::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:ea:82:50:0e:86:8a:b3:f4:68:2b:bc:66:2a:ad:9a:50:ce:39:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38EA6456C8B35EB75FBC6A42DA7F260358634F2F
        Validity
            Not Before: Mar  6 17:37:30 2025 GMT
            Not After : Mar  5 17:42:30 2026 GMT
        Subject: CN=8BB2C8DFAC5C69C0D282055A0D38F16786BB82BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b1:18:74:e9:fa:bc:8c:0b:b7:78:b7:ba:23:
                    5f:db:69:b3:c4:45:be:05:80:51:dc:d8:83:8c:6e:
                    70:1f:f1:54:98:b6:43:18:46:a3:aa:0b:06:9e:ed:
                    40:80:64:2d:98:1f:13:4a:22:33:f0:50:d5:e1:15:
                    09:9b:ed:06:84:07:a7:4e:5d:86:59:0d:93:61:2d:
                    8b:0f:1e:38:59:85:57:5a:1d:ec:3a:94:fd:55:70:
                    c8:78:e6:35:99:ee:cf:76:4c:12:b5:e6:fc:eb:04:
                    35:a5:49:e1:5c:a4:ac:27:8f:e2:8d:bf:8f:c2:bd:
                    b7:99:d5:67:b3:c4:4a:ee:e8:5b:9b:93:07:82:6b:
                    f6:2e:97:c8:ab:d4:da:95:1b:f2:5c:d2:cb:12:51:
                    5e:ef:3c:81:bb:4a:d0:86:f2:3d:5e:b0:86:00:d7:
                    3c:6a:98:20:27:42:58:f7:2c:dd:ca:9c:98:1e:c7:
                    e9:b3:84:bc:4a:87:a2:51:68:c7:db:8a:8d:84:f3:
                    f2:b2:dd:6c:50:82:c5:1c:29:d9:c9:44:c6:e5:41:
                    ea:08:20:3a:1a:cc:8e:4b:ea:05:8b:77:be:c9:b4:
                    45:45:c1:96:52:e4:71:20:c2:87:24:be:c2:6b:66:
                    29:f2:e6:46:a3:b3:5c:d6:b4:d8:ee:8f:85:9c:9f:
                    55:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B2:C8:DF:AC:5C:69:C0:D2:82:05:5A:0D:38:F1:67:86:BB:82:BF
            X509v3 Authority Key Identifier:
                keyid:38:EA:64:56:C8:B3:5E:B7:5F:BC:6A:42:DA:7F:26:03:58:63:4F:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/38EA6456C8B35EB75FBC6A42DA7F260358634F2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38EA6456C8B35EB75FBC6A42DA7F260358634F2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/323830313a38303a313430303a3a2f34382d3438203d3e203131303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:1400::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:7d:f8:ba:98:f9:bc:a4:19:d4:a9:8b:2c:5a:6b:24:fc:8c:
         70:b0:88:40:a0:31:15:c4:73:23:1c:7e:4a:cd:4b:25:6f:c9:
         35:7f:57:22:76:05:6b:86:a3:13:b2:e5:ec:51:98:9f:d1:8b:
         f2:f2:79:8a:74:8d:9e:75:da:5a:4b:12:b9:80:64:a1:4d:03:
         58:97:6a:85:a7:37:2b:de:29:fd:5c:de:f3:ee:48:97:ea:76:
         2f:9c:90:19:f3:86:19:ae:07:77:25:47:49:a8:5a:46:c5:a9:
         12:df:41:4a:c5:62:0b:fe:f6:8c:06:db:d6:82:b6:4c:bb:ea:
         2a:7f:f6:e2:44:68:28:ff:d9:f3:1f:76:2f:c9:1a:dd:d5:c6:
         08:b8:ff:55:99:8b:35:57:98:a4:b5:c0:63:bf:dd:73:d4:99:
         03:fa:e5:48:51:34:98:1d:2f:3f:1c:85:46:05:b3:a4:f6:fd:
         c6:67:51:2e:64:19:cc:f3:92:fd:38:71:07:db:c9:d2:96:fc:
         63:52:cb:fd:42:3b:8a:e2:dd:fd:91:37:33:32:19:1d:c5:01:
         ae:dc:dc:48:cf:2e:d9:5a:5e:e6:b0:60:30:ca:86:f7:54:0b:
         29:ac:de:a1:25:b2:13:54:96:47:03:2b:75:e6:19:3f:e3:26:
         c4:d0:f5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 19:17:00 2025 by rpki-client