Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/323830343a326664383a383038303a3a2f34382d3438203d3e20323634393135.roa
File:                     323830343a326664383a383038303a3a2f34382d3438203d3e20323634393135.roa (raw, json)
Hash identifier:          VdvVvbve/BNviPa9xkwurUxk62WP4fMbVzGpbo2ikIo=
Subject key identifier:   48:0A:C1:A2:03:6C:F1:98:FE:6D:5A:5C:27:EF:64:57:2E:F7:6F:F4
Certificate issuer:       /CN=DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D
Certificate serial:       16B806184088AD10AA5B3D8B2703F2D88F43AACC
Authority key identifier: DC:28:C5:A2:EA:1E:56:49:5A:A9:66:FB:19:84:C7:F3:06:4F:DA:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/323830343a326664383a383038303a3a2f34382d3438203d3e20323634393135.roa
Signing time:             Thu 13 Mar 2025 18:14:19 +0000
ROA not before:           Thu 13 Mar 2025 18:09:19 +0000
ROA not after:            Thu 12 Mar 2026 18:14:19 +0000
asID:                     264915
IP address blocks:        2804:2fd8:8080::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b8:06:18:40:88:ad:10:aa:5b:3d:8b:27:03:f2:d8:8f:43:aa:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D
        Validity
            Not Before: Mar 13 18:09:19 2025 GMT
            Not After : Mar 12 18:14:19 2026 GMT
        Subject: CN=480AC1A2036CF198FE6D5A5C27EF64572EF76FF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bc:5d:4b:cd:43:5b:96:ee:25:79:40:48:fc:
                    6d:20:54:73:fe:16:41:57:78:41:b3:59:3b:a0:01:
                    a4:aa:8f:e3:0b:48:00:4b:29:2b:4c:e6:37:08:15:
                    df:b7:bb:0d:52:5d:07:fc:a0:06:ff:cd:ae:81:a9:
                    73:58:4b:46:4f:08:f0:8b:85:14:05:de:65:6c:dd:
                    db:3e:52:d0:65:93:d6:07:ee:6f:60:20:ed:83:c0:
                    24:f1:7f:ac:f0:cb:2e:d8:90:aa:bf:a9:53:59:f1:
                    62:46:f4:33:58:ab:94:73:2e:30:18:18:b3:61:33:
                    f1:0f:e0:a7:6f:15:cd:32:1f:7c:92:72:66:da:14:
                    32:59:f0:16:70:8f:7d:05:f6:e1:9f:b0:6d:d0:aa:
                    1a:9c:fa:fe:2f:5d:b5:6a:62:48:ad:6e:da:cd:ca:
                    fc:94:19:ff:57:eb:76:b0:0d:53:be:0d:aa:6d:48:
                    b8:e3:ca:0a:60:4e:d4:3d:fe:ed:45:af:8d:9b:6d:
                    54:16:20:f1:e3:1a:f1:3e:66:56:c8:de:7a:21:5f:
                    6a:b0:cf:7c:d8:77:1b:dd:49:a5:6c:48:01:4a:56:
                    d3:23:df:ff:05:90:c5:bf:64:33:c8:f3:bf:01:95:
                    81:e3:eb:af:21:e4:fe:25:6f:0c:3d:45:23:93:d2:
                    31:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:0A:C1:A2:03:6C:F1:98:FE:6D:5A:5C:27:EF:64:57:2E:F7:6F:F4
            X509v3 Authority Key Identifier:
                keyid:DC:28:C5:A2:EA:1E:56:49:5A:A9:66:FB:19:84:C7:F3:06:4F:DA:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/323830343a326664383a383038303a3a2f34382d3438203d3e20323634393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2fd8:8080::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:1e:bd:7d:69:71:24:94:10:24:57:f5:c8:85:f4:4a:44:22:
         35:45:e9:a9:c8:ec:51:e0:8b:8a:89:42:c4:a0:85:0d:5b:4f:
         15:fb:da:dd:9d:08:14:4c:22:9b:75:36:70:c4:ff:97:4f:30:
         23:12:c1:fc:fb:38:87:0d:85:45:32:90:1a:35:bb:29:55:22:
         af:7c:4f:f2:c9:58:9c:aa:83:27:d6:f7:98:9a:3d:25:89:51:
         44:73:00:7e:1f:d6:10:d8:28:58:02:ff:bd:ae:07:b5:ac:fc:
         1a:d7:be:15:ad:a5:5f:2a:6a:c2:98:03:0f:85:95:85:1a:49:
         76:4a:36:58:23:6d:25:ff:ea:2c:5d:38:b1:c6:4c:12:c6:73:
         74:99:e7:59:35:fa:72:ef:42:7c:d9:9d:21:9c:09:78:32:a4:
         37:7b:1d:f2:ed:19:e2:54:5a:b8:ff:d4:c5:5d:b7:19:96:6f:
         f6:89:ff:61:c6:e8:b4:4f:f8:38:3e:ca:f2:6a:76:93:10:65:
         4b:5c:7c:a6:a6:1f:ad:d3:fc:75:74:19:e2:c7:11:b2:ef:7c:
         3c:13:2c:f1:12:a0:64:64:cb:9b:49:dc:1d:a1:09:1e:17:96:
         aa:b8:70:11:ae:e3:3b:cd:78:3b:6b:7b:c7:d2:02:cb:59:45:
         02:3c:a3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 08:02:13 2025 by rpki-client