Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5q8V1ZqFRhaDaeqFQsHQ9FjBLjQs7jLE1MiSykb7PkKT/0/323830343a373034303a3a2f33322d3438203d3e20323730373135.roa
File:                     323830343a373034303a3a2f33322d3438203d3e20323730373135.roa (raw, json)
Hash identifier:          4GRegcsALZq9G/zxKzTjbGEV/z4k3eJRVTuPheCFm/Q=
Subject key identifier:   28:DB:E0:6D:77:5B:A7:F5:94:66:77:75:34:05:9A:17:ED:4C:B5:3C
Certificate issuer:       /CN=B05D92D1D23A775F96A539CDC0506B49BB5A1EE7
Certificate serial:       28577EE71AAAD2175BC37B8B4F6FC3D05A67674B
Authority key identifier: B0:5D:92:D1:D2:3A:77:5F:96:A5:39:CD:C0:50:6B:49:BB:5A:1E:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B05D92D1D23A775F96A539CDC0506B49BB5A1EE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5q8V1ZqFRhaDaeqFQsHQ9FjBLjQs7jLE1MiSykb7PkKT/0/323830343a373034303a3a2f33322d3438203d3e20323730373135.roa
Signing time:             Fri 14 Mar 2025 13:16:25 +0000
ROA not before:           Fri 14 Mar 2025 13:11:25 +0000
ROA not after:            Fri 13 Mar 2026 13:16:25 +0000
asID:                     270715
IP address blocks:        2804:7040::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:57:7e:e7:1a:aa:d2:17:5b:c3:7b:8b:4f:6f:c3:d0:5a:67:67:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B05D92D1D23A775F96A539CDC0506B49BB5A1EE7
        Validity
            Not Before: Mar 14 13:11:25 2025 GMT
            Not After : Mar 13 13:16:25 2026 GMT
        Subject: CN=28DBE06D775BA7F59466777534059A17ED4CB53C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:62:89:65:a9:5b:09:3e:64:db:89:58:1b:de:
                    82:51:a9:6f:b5:f0:3e:e0:2d:97:28:7d:8f:ff:19:
                    89:45:36:af:22:ac:43:1d:fd:58:94:53:a8:26:25:
                    f1:6b:3e:c7:ef:a7:44:e8:d2:67:2a:b4:26:db:00:
                    52:d6:03:77:87:27:57:2e:21:f3:25:19:0a:9b:2b:
                    df:a0:7e:28:05:19:1c:c4:0d:01:51:5a:b8:45:a7:
                    eb:ab:bb:ec:40:c8:20:4f:aa:8f:b2:18:91:94:3d:
                    32:4e:0a:d3:67:52:72:ac:3f:29:df:2b:7a:d9:f2:
                    97:ea:91:df:2d:89:ad:5e:0e:11:18:b0:2d:a6:38:
                    ce:89:23:53:88:3b:8f:34:b3:20:f8:ab:e4:35:01:
                    67:5f:a1:b6:db:47:1f:79:a0:5a:61:42:e3:6f:fd:
                    1e:ea:2c:a0:98:00:04:00:f2:12:6d:6c:01:02:f7:
                    81:fb:cf:63:dc:1e:34:5c:71:28:48:d4:7d:c1:1d:
                    b6:fa:5c:c0:2f:24:af:a9:db:00:2d:9e:e9:dd:44:
                    4d:9a:7f:4d:22:06:e1:16:a2:86:f1:3e:9a:96:5b:
                    31:86:7b:ca:df:91:f4:e0:3e:b5:47:83:04:96:63:
                    a2:1f:28:23:90:7d:d4:12:d2:38:c4:7c:40:85:8f:
                    e7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:DB:E0:6D:77:5B:A7:F5:94:66:77:75:34:05:9A:17:ED:4C:B5:3C
            X509v3 Authority Key Identifier:
                keyid:B0:5D:92:D1:D2:3A:77:5F:96:A5:39:CD:C0:50:6B:49:BB:5A:1E:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5q8V1ZqFRhaDaeqFQsHQ9FjBLjQs7jLE1MiSykb7PkKT/0/B05D92D1D23A775F96A539CDC0506B49BB5A1EE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B05D92D1D23A775F96A539CDC0506B49BB5A1EE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5q8V1ZqFRhaDaeqFQsHQ9FjBLjQs7jLE1MiSykb7PkKT/0/323830343a373034303a3a2f33322d3438203d3e20323730373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7040::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:0b:98:a3:c4:81:98:4f:ba:05:76:6e:64:5d:66:be:58:50:
         4d:35:e7:13:6c:f1:bf:6e:68:63:62:84:17:c1:d4:0f:00:7b:
         77:73:d4:5b:d9:37:97:ef:7b:0e:b6:8b:2d:8b:49:2c:14:0c:
         6e:00:8a:33:09:ad:15:92:c5:ff:4f:5a:b4:00:4f:83:7f:ca:
         ea:c5:b9:c0:e9:6f:c6:26:88:02:7b:cd:e8:49:5b:f0:db:5d:
         26:5d:e7:6e:a5:b6:54:3f:c8:d6:5c:58:00:00:3d:b2:2f:f3:
         cb:b3:ad:7a:2d:c0:35:b5:e1:c2:0a:29:3e:61:69:a2:c3:7a:
         46:e2:eb:47:c1:44:96:88:5e:6d:c4:bf:16:00:7b:6c:4d:fc:
         fa:2f:54:46:9f:80:3c:fc:47:8b:e9:0d:3f:0c:a2:31:36:75:
         35:84:32:38:f4:c3:8f:0c:8d:1d:16:37:c0:42:e3:97:f6:5c:
         44:55:e4:48:c9:9d:75:24:4e:95:13:ca:9a:ab:a5:67:d8:7f:
         6d:dd:e9:73:2a:32:6e:06:6d:91:2f:80:93:c0:df:53:5a:85:
         11:3c:69:b7:90:fc:1c:2f:65:bf:1a:a5:0b:7a:d7:92:c6:69:
         bb:f8:a2:ef:34:87:4e:32:e9:44:e1:97:09:d1:ed:e5:cd:7a:
         78:0e:86:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:07:08 2025 by rpki-client