Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/323830343a3837633a313a3a2f34382d3438203d3e203238323032.roa
File:                     323830343a3837633a313a3a2f34382d3438203d3e203238323032.roa (raw, json)
Hash identifier:          ZQJAWNALk3pQg5s719daz2p+tOy1YnZg3oxKNSQmJq4=
Subject key identifier:   14:FD:47:91:F4:02:1C:40:99:40:02:BC:20:7B:D2:1B:C9:9C:1B:2F
Certificate issuer:       /CN=85FE199EB26E8B5E82D6033E5D496B0510EBD27C
Certificate serial:       783E4FC72AF6EEABFC27601828C5480E47CC2DBD
Authority key identifier: 85:FE:19:9E:B2:6E:8B:5E:82:D6:03:3E:5D:49:6B:05:10:EB:D2:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85FE199EB26E8B5E82D6033E5D496B0510EBD27C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/323830343a3837633a313a3a2f34382d3438203d3e203238323032.roa
Signing time:             Fri 10 Jan 2025 17:23:01 +0000
ROA not before:           Fri 10 Jan 2025 17:18:01 +0000
ROA not after:            Fri 09 Jan 2026 17:23:01 +0000
asID:                     28202
IP address blocks:        2804:87c:1::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:3e:4f:c7:2a:f6:ee:ab:fc:27:60:18:28:c5:48:0e:47:cc:2d:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85FE199EB26E8B5E82D6033E5D496B0510EBD27C
        Validity
            Not Before: Jan 10 17:18:01 2025 GMT
            Not After : Jan  9 17:23:01 2026 GMT
        Subject: CN=14FD4791F4021C40994002BC207BD21BC99C1B2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:dc:d2:3d:35:f5:54:95:6a:0d:08:e4:bb:16:
                    21:12:e2:f2:82:1a:3d:20:48:45:1d:13:82:e1:e7:
                    ce:ba:1f:03:a7:03:ca:b4:0e:ae:c6:11:ac:63:9c:
                    24:3e:93:73:d3:fd:c6:5d:0f:65:3f:de:8d:0c:70:
                    09:38:2c:90:65:67:33:44:20:a2:ae:66:cf:49:db:
                    7c:a2:5e:c3:ca:02:82:4a:1c:ec:ba:b3:f5:1a:25:
                    9e:f7:96:25:e7:ea:a5:ad:99:a2:25:cc:e5:7a:4f:
                    b2:dd:b8:ff:96:b3:e5:9d:dc:7f:39:0c:e0:ad:19:
                    04:29:2c:1b:97:a7:1c:fd:78:58:21:17:93:dc:eb:
                    0e:48:2f:10:29:ae:ec:19:39:05:eb:d5:18:f7:f4:
                    83:e8:bc:e9:d4:b5:58:d5:db:8b:44:2c:f5:89:d9:
                    84:53:80:5b:61:2d:7e:73:d1:9d:6c:c6:ea:1b:78:
                    90:83:49:2d:88:1a:bc:00:64:67:f6:b0:9f:f4:ca:
                    2f:66:50:72:e9:e9:67:aa:99:74:df:13:b6:7e:b4:
                    8c:ce:2f:37:aa:28:d1:9d:ea:30:93:03:09:14:9d:
                    d3:08:7e:a3:be:03:d2:ed:ba:44:f5:48:ee:d2:a8:
                    cd:83:a8:70:22:04:b4:20:55:8e:14:36:c8:6d:2f:
                    7a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:FD:47:91:F4:02:1C:40:99:40:02:BC:20:7B:D2:1B:C9:9C:1B:2F
            X509v3 Authority Key Identifier:
                keyid:85:FE:19:9E:B2:6E:8B:5E:82:D6:03:3E:5D:49:6B:05:10:EB:D2:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/85FE199EB26E8B5E82D6033E5D496B0510EBD27C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85FE199EB26E8B5E82D6033E5D496B0510EBD27C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/323830343a3837633a313a3a2f34382d3438203d3e203238323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:87c:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:cb:76:41:24:e1:44:2d:57:95:fc:26:fa:ef:8e:20:16:8a:
         84:d8:24:6f:a7:a8:ed:0b:64:bb:ee:65:da:3a:11:bb:fe:db:
         a1:bc:04:6f:ca:9f:65:42:ec:90:8d:ec:fb:01:97:8d:89:88:
         ce:a7:21:ff:07:51:4a:5d:62:84:80:c2:f2:bb:c2:29:c6:89:
         0b:34:4e:a6:6e:3e:a2:e6:76:33:3c:91:30:ef:24:29:8a:d6:
         73:2b:00:09:01:c2:80:d0:5e:86:85:92:29:73:ed:b9:d9:31:
         9a:88:7e:29:c5:3d:56:55:8f:2c:15:0d:35:22:db:1e:ab:cb:
         d7:3f:bb:21:ca:26:d5:6e:4d:07:c9:e0:08:b6:e7:83:95:07:
         1b:cb:1c:84:35:89:d3:11:9a:59:94:94:09:43:6b:df:9a:d8:
         0b:75:39:13:6e:83:44:5e:24:c6:db:99:06:5f:af:f9:2d:a9:
         fd:53:dd:ed:97:9f:26:30:16:bd:99:02:50:6c:df:f5:50:51:
         60:6e:87:d8:c0:e8:d0:5a:c5:79:95:8d:4e:39:1e:59:6d:ac:
         1e:b8:c6:65:bd:26:7f:5f:8e:c7:f0:cf:9f:19:69:ac:d4:37:
         49:0d:3b:bc:95:05:ea:5b:27:1d:69:8a:e6:aa:3d:a4:41:2c:
         ee:92:fe:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:01:30 2025 by rpki-client