Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/323830343a3165303a3a2f33322d3336203d3e20323632373834.roa
File:                     323830343a3165303a3a2f33322d3336203d3e20323632373834.roa (raw, json)
Hash identifier:          rsZBGscFsjfGNzf8b3C709/VGMej2RcqPeikaOJM5p4=
Subject key identifier:   3E:A0:8D:BC:C7:58:9F:0A:8A:E3:74:25:07:31:2B:6F:83:F1:B4:E6
Certificate issuer:       /CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
Certificate serial:       6B40F7236E4E8F1FD1F1285EDE72E53485A69CEE
Authority key identifier: 8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/323830343a3165303a3a2f33322d3336203d3e20323632373834.roa
Signing time:             Thu 06 Mar 2025 07:52:36 +0000
ROA not before:           Thu 06 Mar 2025 07:47:36 +0000
ROA not after:            Thu 05 Mar 2026 07:52:36 +0000
asID:                     262784
IP address blocks:        2804:1e0::/32 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:40:f7:23:6e:4e:8f:1f:d1:f1:28:5e:de:72:e5:34:85:a6:9c:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
        Validity
            Not Before: Mar  6 07:47:36 2025 GMT
            Not After : Mar  5 07:52:36 2026 GMT
        Subject: CN=3EA08DBCC7589F0A8AE3742507312B6F83F1B4E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:17:7f:da:24:99:bd:4f:27:24:41:6e:c7:47:
                    26:3e:c7:6e:d9:39:3a:14:59:c9:12:8a:ac:bf:9d:
                    22:6b:c4:e5:2a:e2:53:fa:b8:8e:3f:07:8d:2f:51:
                    ae:12:eb:3e:18:42:dd:a4:be:14:ad:bf:93:eb:cb:
                    ff:55:08:b7:29:c3:a9:6b:9a:9d:f8:4b:37:1c:7e:
                    b8:a4:30:32:ca:e8:5d:aa:9f:a8:7b:79:32:e7:82:
                    b6:69:0f:65:22:72:59:5b:86:06:76:90:7f:f0:a8:
                    ce:10:79:df:7f:f6:68:06:c9:20:49:a5:8f:68:04:
                    f5:9b:49:c5:93:b5:69:7a:32:29:93:e9:fa:89:bc:
                    a1:b9:54:95:6e:e7:e8:34:2a:e5:0e:33:81:ed:00:
                    f8:6d:62:b6:e7:e4:81:30:32:0a:25:97:7c:46:f0:
                    7f:89:f1:2f:d2:54:9b:91:a9:13:72:b4:4b:95:a5:
                    27:38:d7:ee:a6:ed:a7:b1:07:ce:d4:e3:e8:f0:20:
                    8f:55:b8:6e:39:4f:86:e3:4e:8c:48:49:ce:e9:1d:
                    9c:12:fd:0f:8d:13:da:8a:c0:9c:d2:76:44:ed:4a:
                    e8:d1:02:76:96:2e:e6:01:1f:fd:be:b1:b2:5d:42:
                    c4:f6:94:98:86:80:89:ed:ba:25:aa:c5:08:7f:c1:
                    74:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A0:8D:BC:C7:58:9F:0A:8A:E3:74:25:07:31:2B:6F:83:F1:B4:E6
            X509v3 Authority Key Identifier:
                keyid:8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/323830343a3165303a3a2f33322d3336203d3e20323632373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:23:1c:7a:bc:f2:8d:c5:77:c5:c9:ef:1e:c4:93:8f:f2:14:
         68:fe:de:cd:ac:95:19:d5:af:50:24:22:1c:5d:5e:c7:ab:fa:
         3a:ef:e8:1c:89:8c:c2:55:42:bd:5d:a6:e1:3a:ad:2f:ca:8e:
         2c:e2:b9:66:21:04:c7:6a:28:a6:9d:1a:27:c5:85:ce:4b:6d:
         57:dd:98:12:d3:aa:43:15:58:19:1e:5e:a3:63:c5:ee:d1:8a:
         76:d0:ac:d7:c6:ee:fc:82:af:4d:5e:b8:b9:22:71:53:87:8d:
         c1:23:c4:7f:48:d1:38:4c:ee:b0:a9:e8:95:9a:a5:40:e9:07:
         76:44:73:93:7f:3d:ef:80:a0:a3:a7:3c:5f:94:8e:12:c3:5c:
         88:99:f4:b3:e4:22:51:8c:ea:f9:4e:da:8e:f8:25:c0:83:8e:
         a1:fc:1a:5e:58:d6:b0:16:a1:23:53:a6:13:af:49:72:90:4b:
         be:f9:f8:b7:6b:e5:46:7a:6a:ab:ab:dc:c6:97:7b:b9:47:b8:
         81:11:a3:a4:a1:80:89:12:b0:8d:75:94:fd:45:a3:39:29:e3:
         0a:cf:54:69:ea:88:6f:99:a0:ee:59:e7:ba:96:14:11:5e:20:
         b1:d4:8e:8c:36:89:b5:3c:cd:da:3c:aa:2d:b5:5e:1f:5f:b5:
         b3:1f:9e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:24:35 2025 by rpki-client