Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/323830343a383863343a3a2f34382d3438203d3e20323732373932.roa
File:                     323830343a383863343a3a2f34382d3438203d3e20323732373932.roa (raw, json)
Hash identifier:          pMsNE9PZdxPUZQ1ee0l8kve5nW5PLVXShE79wF6S0BA=
Subject key identifier:   6E:18:A0:F3:12:C6:5E:32:47:07:E2:AC:CF:0D:85:01:96:70:A8:88
Certificate issuer:       /CN=2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9
Certificate serial:       3CBF3765CF59B286FB76AEC2F4A3DA8D02E7661D
Authority key identifier: 28:00:AF:8E:67:2F:64:E0:2C:EC:5D:04:7E:DE:B2:AD:86:B4:7E:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/323830343a383863343a3a2f34382d3438203d3e20323732373932.roa
Signing time:             Thu 06 Mar 2025 22:24:44 +0000
ROA not before:           Thu 06 Mar 2025 22:19:44 +0000
ROA not after:            Thu 05 Mar 2026 22:24:44 +0000
asID:                     272792
IP address blocks:        2804:88c4::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:bf:37:65:cf:59:b2:86:fb:76:ae:c2:f4:a3:da:8d:02:e7:66:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9
        Validity
            Not Before: Mar  6 22:19:44 2025 GMT
            Not After : Mar  5 22:24:44 2026 GMT
        Subject: CN=6E18A0F312C65E324707E2ACCF0D85019670A888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:57:f9:72:df:9e:c1:9c:b9:ef:8f:0c:20:86:
                    bf:c9:9f:eb:ed:d9:b1:26:79:91:65:0b:44:d8:dd:
                    b6:b4:9e:5b:68:06:e2:7f:01:26:68:6a:db:4f:7e:
                    94:c9:73:fa:73:a0:ee:c6:22:81:bb:7e:34:8a:bc:
                    1e:70:fd:39:10:23:c0:80:38:3a:b5:7f:de:2e:be:
                    94:92:ad:d2:9d:60:d2:ab:66:7d:81:4c:f6:6c:96:
                    f5:0e:53:c5:f2:1c:bd:72:13:58:9c:54:38:6c:47:
                    e4:6b:87:f8:8e:6a:12:84:a9:ae:2d:02:bb:b4:48:
                    26:45:9f:81:b0:c0:d5:c2:16:4b:e5:f3:86:29:56:
                    9e:1a:70:c5:16:f4:80:fe:a2:6f:e0:75:6f:08:7a:
                    84:21:1f:41:9d:75:6f:b8:64:e5:bf:1f:ed:f2:84:
                    1d:96:76:a0:09:39:46:76:4a:6e:e1:4a:b9:96:56:
                    1a:b4:96:ee:30:5b:40:33:5a:16:52:b9:a8:96:4e:
                    a2:8b:ba:30:25:f2:28:8f:7f:e7:c0:8a:93:d5:5c:
                    71:e6:ad:c2:97:69:4a:a1:56:53:d6:1a:27:5a:45:
                    4c:94:96:67:bf:75:a2:2a:ef:c1:49:28:9e:a1:09:
                    bf:03:f4:90:10:38:e4:a8:3e:59:05:21:7a:bc:a1:
                    6c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:18:A0:F3:12:C6:5E:32:47:07:E2:AC:CF:0D:85:01:96:70:A8:88
            X509v3 Authority Key Identifier:
                keyid:28:00:AF:8E:67:2F:64:E0:2C:EC:5D:04:7E:DE:B2:AD:86:B4:7E:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/323830343a383863343a3a2f34382d3438203d3e20323732373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:88c4::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:66:4d:1e:b7:b2:96:f0:7d:a8:10:3b:82:ee:d6:90:ac:55:
         4a:57:41:6e:c9:71:ec:48:92:0d:d2:c5:6b:76:ed:a4:5d:e7:
         96:f9:ae:f0:9e:de:c7:41:13:98:55:ab:bd:a5:5b:d7:69:14:
         ea:ef:16:c1:7d:e8:70:37:64:77:46:de:b8:e3:6a:65:35:03:
         d2:9d:aa:a5:64:9f:00:63:d2:21:b2:aa:7b:95:f0:1b:20:22:
         34:de:e1:6a:25:37:59:f6:b0:24:56:8a:09:a6:89:f1:81:95:
         b8:df:d5:85:9b:48:ab:04:11:2b:a3:fd:48:ea:6c:4c:0e:54:
         8c:3d:82:e7:ce:dd:71:6f:fd:ee:69:66:23:64:f8:61:e0:5f:
         c6:4d:dd:35:ce:d7:a8:ad:07:c0:ce:66:c6:a3:11:2b:57:99:
         33:c4:58:3b:e4:78:c9:fb:52:a2:8e:2c:cc:3a:ea:37:65:9b:
         78:ab:24:07:ce:bd:0f:1a:65:95:51:1d:9c:35:b4:9b:cf:87:
         1f:81:a5:12:87:9e:09:ea:77:37:c0:d4:13:c5:d2:00:26:3a:
         91:63:8d:c9:e8:f9:77:25:2c:0f:05:cb:df:fd:b9:73:e0:aa:
         59:3c:cd:64:08:e5:be:a7:b5:31:2e:06:34:e4:56:a6:54:a8:
         66:57:9e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:52:57 2025 by rpki-client