Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/323830343a383863343a66633a3a2f34382d3438203d3e20323732373932.roa
File:                     323830343a383863343a66633a3a2f34382d3438203d3e20323732373932.roa (raw, json)
Hash identifier:          uIquRLf1o2jdjOFSQRwCQgQeJopCGHlj6eVpPkoczCw=
Subject key identifier:   7E:34:4A:ED:44:D6:A2:1F:DE:F3:6C:A1:C3:D0:3C:25:46:86:0B:B3
Certificate issuer:       /CN=2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9
Certificate serial:       55EB4BCA03238DFD87EF478F5E714585E6DE4BE9
Authority key identifier: 28:00:AF:8E:67:2F:64:E0:2C:EC:5D:04:7E:DE:B2:AD:86:B4:7E:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/323830343a383863343a66633a3a2f34382d3438203d3e20323732373932.roa
Signing time:             Thu 06 Mar 2025 22:24:44 +0000
ROA not before:           Thu 06 Mar 2025 22:19:44 +0000
ROA not after:            Thu 05 Mar 2026 22:24:44 +0000
asID:                     272792
IP address blocks:        2804:88c4:fc::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:eb:4b:ca:03:23:8d:fd:87:ef:47:8f:5e:71:45:85:e6:de:4b:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9
        Validity
            Not Before: Mar  6 22:19:44 2025 GMT
            Not After : Mar  5 22:24:44 2026 GMT
        Subject: CN=7E344AED44D6A21FDEF36CA1C3D03C2546860BB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c0:00:2b:6e:48:9f:ab:c1:0a:0d:c1:0d:6c:
                    04:bd:92:89:1b:06:08:ba:bf:a0:b5:67:01:e7:76:
                    50:8c:bc:8e:30:3f:11:96:49:bc:ae:0d:3f:9c:e2:
                    98:bb:cb:2f:2e:80:a0:e5:f6:24:f8:3e:85:67:f3:
                    75:47:fc:80:bf:af:4a:99:cb:ca:fb:cb:fe:48:88:
                    c2:6c:2e:8b:63:b8:07:f0:65:24:81:ea:7b:2d:10:
                    7d:38:f0:ba:74:65:7b:8b:49:d4:67:c9:20:c3:8e:
                    cc:37:bf:3c:45:68:b8:b5:de:b6:b6:5f:53:c1:e2:
                    0e:0d:cd:d9:f7:77:79:9c:d1:be:65:23:2c:95:b3:
                    05:5c:5d:e0:cd:bf:0e:5b:e1:23:a4:ee:6d:13:e2:
                    0e:4d:b5:b5:60:49:85:45:2c:2f:29:b0:e7:a3:cf:
                    9a:77:52:c2:54:48:1d:25:17:19:55:0a:2f:2a:7b:
                    ea:8b:d0:0e:a7:9b:46:3a:88:eb:33:5f:cb:1f:0c:
                    29:4a:44:c6:57:69:af:31:03:00:4c:a9:af:3d:a6:
                    ba:4c:9c:fb:b2:48:12:a5:ad:e8:7b:7e:b8:de:87:
                    a7:ce:f3:16:6c:31:e9:7f:86:3b:db:38:e4:2d:cb:
                    f2:ab:74:1a:96:15:7f:55:6b:50:21:45:1a:02:27:
                    f1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:34:4A:ED:44:D6:A2:1F:DE:F3:6C:A1:C3:D0:3C:25:46:86:0B:B3
            X509v3 Authority Key Identifier:
                keyid:28:00:AF:8E:67:2F:64:E0:2C:EC:5D:04:7E:DE:B2:AD:86:B4:7E:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/323830343a383863343a66633a3a2f34382d3438203d3e20323732373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:88c4:fc::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:7f:de:b7:e2:19:36:e6:8d:9b:50:44:13:ea:b9:7e:21:bf:
         2e:5a:3b:c6:d7:f1:fc:54:78:2e:25:fc:f2:a4:5d:a4:13:cf:
         79:03:a7:ca:d3:eb:65:67:43:2c:86:63:dc:55:5b:88:e5:58:
         c9:20:12:34:c1:18:fc:c4:55:b9:58:0c:45:f0:48:a9:a3:e3:
         d9:34:c3:19:01:7f:b3:ba:69:2a:a8:14:8f:4a:26:ae:2f:0f:
         8f:bb:c1:d5:dd:14:9f:f1:64:fb:b9:79:2d:0e:4d:89:4d:1f:
         76:ab:7d:c4:5e:f1:fb:be:31:a0:65:fd:14:f9:22:ef:0c:f6:
         70:9f:36:e2:4d:74:53:ce:6e:e5:b5:12:80:81:d0:b8:39:2d:
         1c:a3:e4:58:00:bd:49:09:6e:f5:da:8c:fb:18:54:32:5d:69:
         aa:88:72:f8:60:68:3a:51:fa:fb:d0:4d:07:34:4e:ae:71:3f:
         97:d7:70:1c:9d:57:7f:00:4c:4b:3b:55:4c:0a:28:42:d2:8f:
         46:b3:92:77:81:c6:5c:78:95:6f:4e:cf:a9:23:3a:58:05:1e:
         e6:6d:45:00:a2:6b:72:cb:a3:d7:71:f8:9e:e2:dd:01:b3:b8:
         e7:e7:d0:91:20:3b:84:72:72:11:f2:53:4c:da:7e:12:3e:42:
         81:a5:76:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:52:56 2025 by rpki-client