Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5PySNaTpMYxV7sQMnK6aMNp5bZyDgFTc3o9nKMZdR7Xn/0/323830343a376664343a3a2f33322d3332203d3e20323731373132.roa
File:                     323830343a376664343a3a2f33322d3332203d3e20323731373132.roa (raw, json)
Hash identifier:          aG1cE6B/zGrlvKBXNmqiLftx8UC1au+OTP+Hbepe6mE=
Subject key identifier:   59:AC:BD:CF:9A:AA:EB:98:D7:40:58:0A:0A:F5:1E:82:F3:C9:66:63
Certificate issuer:       /CN=56F98FD5AAD5AA0A2C1665689B464A1E16C89914
Certificate serial:       72BEDC7571D0B4615D7852C1CAEDA8649DE995BE
Authority key identifier: 56:F9:8F:D5:AA:D5:AA:0A:2C:16:65:68:9B:46:4A:1E:16:C8:99:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56F98FD5AAD5AA0A2C1665689B464A1E16C89914.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5PySNaTpMYxV7sQMnK6aMNp5bZyDgFTc3o9nKMZdR7Xn/0/323830343a376664343a3a2f33322d3332203d3e20323731373132.roa
Signing time:             Tue 21 Jan 2025 21:03:54 +0000
ROA not before:           Tue 21 Jan 2025 20:58:54 +0000
ROA not after:            Tue 20 Jan 2026 21:03:54 +0000
asID:                     271712
IP address blocks:        2804:7fd4::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:be:dc:75:71:d0:b4:61:5d:78:52:c1:ca:ed:a8:64:9d:e9:95:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56F98FD5AAD5AA0A2C1665689B464A1E16C89914
        Validity
            Not Before: Jan 21 20:58:54 2025 GMT
            Not After : Jan 20 21:03:54 2026 GMT
        Subject: CN=59ACBDCF9AAAEB98D740580A0AF51E82F3C96663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:35:43:68:b3:9f:22:39:a0:c2:68:71:ba:d4:
                    1a:db:0f:4e:6e:92:40:10:d3:a9:44:8c:7a:a9:49:
                    e7:b0:41:66:54:56:cc:17:72:1b:c5:37:f9:f4:34:
                    a1:b7:33:63:54:90:d9:1e:3c:9f:fd:50:d2:b4:03:
                    a6:0e:a0:12:b1:6a:11:ce:44:15:30:f8:24:cb:80:
                    a8:a2:5c:20:c9:99:f3:24:fd:43:4d:8d:a0:70:8b:
                    94:2f:43:3d:bb:2e:96:c3:55:d3:90:d7:27:ea:e7:
                    f5:cf:38:d7:d8:02:7b:b8:9d:73:6f:4b:f8:82:1d:
                    57:68:7a:12:e3:82:70:35:f0:de:71:65:8d:11:0b:
                    40:c9:b9:ea:61:73:8a:6b:98:27:c6:78:c8:5e:56:
                    ba:c4:71:3b:61:b6:67:11:a0:a1:9d:f8:b5:25:e4:
                    87:3f:cd:ef:56:be:18:5f:a2:ba:2b:9c:68:f6:58:
                    6b:ff:9e:33:ad:f2:78:f5:bd:93:84:e2:8d:e0:a2:
                    67:71:6c:54:2b:4d:0e:88:7c:dd:db:60:0a:30:50:
                    2c:c9:23:38:0d:0f:e6:45:ed:ed:63:0c:7b:a6:3d:
                    7d:91:65:d0:a7:52:9f:ac:64:de:68:4d:bd:a4:24:
                    26:65:2a:2c:49:74:3d:09:4d:b7:0b:40:5b:ee:0f:
                    7f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:AC:BD:CF:9A:AA:EB:98:D7:40:58:0A:0A:F5:1E:82:F3:C9:66:63
            X509v3 Authority Key Identifier:
                keyid:56:F9:8F:D5:AA:D5:AA:0A:2C:16:65:68:9B:46:4A:1E:16:C8:99:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5PySNaTpMYxV7sQMnK6aMNp5bZyDgFTc3o9nKMZdR7Xn/0/56F98FD5AAD5AA0A2C1665689B464A1E16C89914.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56F98FD5AAD5AA0A2C1665689B464A1E16C89914.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5PySNaTpMYxV7sQMnK6aMNp5bZyDgFTc3o9nKMZdR7Xn/0/323830343a376664343a3a2f33322d3332203d3e20323731373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7fd4::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:0c:9b:1b:64:03:d7:f1:28:eb:09:1a:d3:5b:c7:09:03:bc:
         13:0c:6b:2a:78:38:86:93:df:ef:68:f6:37:24:36:bf:bf:e6:
         be:b4:89:6c:9b:34:93:83:34:9f:e5:d4:14:45:89:10:8d:71:
         55:77:b3:e8:ec:8e:f0:db:ae:8e:4d:d4:bf:39:f5:d1:ba:20:
         1c:ec:c0:a5:da:17:68:a6:65:ba:95:19:3a:f1:bf:d3:cb:87:
         1a:1d:7b:19:56:cb:86:59:62:72:83:71:06:14:62:c2:0c:83:
         93:5d:5b:83:e2:a5:4b:b7:ac:5e:8e:3b:ed:64:0a:ea:0e:51:
         64:21:ed:f7:25:86:5c:49:25:a9:bc:d5:7d:a8:95:31:28:e0:
         27:b4:b9:e3:f7:dd:db:6e:54:f7:82:d7:f9:cb:96:13:a6:2d:
         49:b7:4e:1a:81:9b:81:9a:16:94:5d:38:df:37:c7:c5:9c:e1:
         5c:36:3e:96:67:12:91:f9:22:55:62:7b:ec:03:46:20:1d:46:
         25:a9:d2:0a:48:ea:ca:6e:a2:70:02:24:b1:24:3f:47:43:bf:
         5f:52:30:ce:8e:ee:e2:11:82:f6:07:aa:a8:c4:a2:c5:c9:3a:
         20:3e:e8:ba:f9:54:22:19:4e:d0:33:5d:23:e5:06:41:28:10:
         30:6e:ba:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:27:03 2025 by rpki-client