Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/1/323830343a313139343a3a2f33362d313238203d3e20323633343234.roa
File:                     323830343a313139343a3a2f33362d313238203d3e20323633343234.roa (raw, json)
Hash identifier:          vcI8P46Ip2QP4R5eyoj77nw7+uplBekbU5MoVjFE3Fs=
Subject key identifier:   C4:BE:0C:C7:09:F4:E4:3B:9F:80:9C:83:13:B1:F3:69:83:F1:8F:56
Certificate issuer:       /CN=7CA1E2D818532F6321B3C9E6EE790B2AFE560E21
Certificate serial:       6B71D850A899B3F3159F3ED19D9FE3A52329A9
Authority key identifier: 7C:A1:E2:D8:18:53:2F:63:21:B3:C9:E6:EE:79:0B:2A:FE:56:0E:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CA1E2D818532F6321B3C9E6EE790B2AFE560E21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/1/323830343a313139343a3a2f33362d313238203d3e20323633343234.roa
Signing time:             Sat 15 Feb 2025 22:36:53 +0000
ROA not before:           Sat 15 Feb 2025 22:31:53 +0000
ROA not after:            Sat 14 Feb 2026 22:36:53 +0000
asID:                     263424
IP address blocks:        2804:1194::/36 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:71:d8:50:a8:99:b3:f3:15:9f:3e:d1:9d:9f:e3:a5:23:29:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CA1E2D818532F6321B3C9E6EE790B2AFE560E21
        Validity
            Not Before: Feb 15 22:31:53 2025 GMT
            Not After : Feb 14 22:36:53 2026 GMT
        Subject: CN=C4BE0CC709F4E43B9F809C8313B1F36983F18F56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:25:91:79:8f:9f:2e:ab:d3:93:f8:b6:5b:90:
                    4b:34:0f:c6:ef:a7:7a:97:c8:ae:a9:38:7f:bf:e5:
                    3c:5a:a3:f0:e2:01:d6:66:2d:de:65:30:7e:9b:a5:
                    2a:49:c2:eb:ca:60:22:3f:f8:78:05:e5:63:ff:93:
                    14:c9:0f:4c:73:10:c7:97:4d:c0:13:c3:48:d6:c8:
                    50:51:dc:0d:21:dc:d0:4b:b9:5d:f1:b6:0b:74:c6:
                    72:47:f3:94:a4:a2:b6:a8:68:4b:dd:cf:af:05:ac:
                    46:91:eb:54:a0:10:4c:c8:7a:7a:89:71:62:a6:25:
                    6a:b2:7a:47:3b:cf:cb:c4:07:32:9a:ab:fd:74:df:
                    d1:72:2c:4e:7d:04:a0:92:48:d3:27:39:1f:a3:c1:
                    0c:22:7a:4d:b4:4b:ea:41:1c:de:f4:24:af:01:04:
                    05:18:46:b3:df:14:25:17:49:15:cf:fc:e0:ec:e7:
                    50:20:b2:b6:ad:e2:39:bc:02:38:7c:54:98:59:ea:
                    3d:30:f1:f7:73:6e:2f:25:6e:0c:a6:df:1d:b9:fd:
                    e1:d4:ef:0f:d8:78:15:dc:bf:03:ac:18:98:0a:e7:
                    f5:a2:f2:58:b0:ef:5a:a5:6a:f5:a6:74:49:f6:6a:
                    02:c2:5f:aa:02:76:b4:74:30:f8:49:70:fa:6b:ad:
                    a1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:BE:0C:C7:09:F4:E4:3B:9F:80:9C:83:13:B1:F3:69:83:F1:8F:56
            X509v3 Authority Key Identifier:
                keyid:7C:A1:E2:D8:18:53:2F:63:21:B3:C9:E6:EE:79:0B:2A:FE:56:0E:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/1/7CA1E2D818532F6321B3C9E6EE790B2AFE560E21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CA1E2D818532F6321B3C9E6EE790B2AFE560E21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/1/323830343a313139343a3a2f33362d313238203d3e20323633343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1194::/36

    Signature Algorithm: sha256WithRSAEncryption
         b9:ef:80:26:d0:75:77:ec:d0:77:91:24:95:cd:0f:f0:d6:27:
         e7:16:89:10:fc:e2:d1:88:f4:7e:9d:5b:46:dc:bc:ba:86:c2:
         d3:d0:0a:e6:26:50:18:d6:18:97:4c:00:71:85:ee:aa:1f:2e:
         76:ca:ed:00:90:7c:7a:3c:61:c2:b5:2c:db:ac:11:ff:d7:ad:
         cd:17:40:ce:6f:67:6a:31:7c:db:9d:65:64:77:3e:7e:a3:55:
         90:6a:69:06:4f:d9:35:44:da:0f:d7:d7:fe:f9:06:08:db:ed:
         55:f6:15:8b:f4:af:99:ef:e7:58:ab:9d:cf:85:0e:89:1f:d4:
         8f:da:8f:ad:a3:38:51:f5:e6:b7:ae:1c:3a:1f:c3:8e:9d:95:
         0e:3d:52:8b:5c:fc:90:31:28:11:c2:a4:f7:38:37:ca:8d:8d:
         45:39:be:f6:1e:b1:17:ad:f1:c4:4e:07:2d:55:46:a2:55:d9:
         0f:db:04:75:3f:6b:47:1c:c5:3a:2a:f8:cd:2b:73:e2:93:23:
         c8:22:a4:27:70:b4:ab:64:09:82:7d:3a:36:e4:b6:65:e5:8f:
         02:fc:ed:28:54:05:2c:6d:f1:ec:81:ae:e0:e8:4d:6b:99:b8:
         1f:a4:c1:d9:af:17:83:02:13:2d:89:11:33:5c:29:a8:9a:06:
         bf:ad:3c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:40:56 2025 by rpki-client