Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/323830343a353766343a3a2f33322d3335203d3e20323638303937.roa
File:                     323830343a353766343a3a2f33322d3335203d3e20323638303937.roa (raw, json)
Hash identifier:          04cbYMQus1Orjdc8xVmQpaXy4JaaY1wUAQgbWt4/9ys=
Subject key identifier:   06:6E:73:C3:73:D6:56:C0:C5:1D:49:71:99:BF:A3:ED:24:B3:59:E7
Certificate issuer:       /CN=A0C2C9C26175F7213ADA72D8BFF2959A6D661C60
Certificate serial:       0EC2E20BD85C5DEF817FFEEEAA9DD310F4D74E77
Authority key identifier: A0:C2:C9:C2:61:75:F7:21:3A:DA:72:D8:BF:F2:95:9A:6D:66:1C:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/323830343a353766343a3a2f33322d3335203d3e20323638303937.roa
Signing time:             Thu 06 Mar 2025 10:33:14 +0000
ROA not before:           Thu 06 Mar 2025 10:28:14 +0000
ROA not after:            Thu 05 Mar 2026 10:33:14 +0000
asID:                     268097
IP address blocks:        2804:57f4::/32 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:c2:e2:0b:d8:5c:5d:ef:81:7f:fe:ee:aa:9d:d3:10:f4:d7:4e:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0C2C9C26175F7213ADA72D8BFF2959A6D661C60
        Validity
            Not Before: Mar  6 10:28:14 2025 GMT
            Not After : Mar  5 10:33:14 2026 GMT
        Subject: CN=066E73C373D656C0C51D497199BFA3ED24B359E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5d:0c:13:0b:6b:3c:22:c3:16:fc:68:2e:52:
                    20:fe:73:d2:ed:3c:52:57:f7:96:92:76:f9:e6:81:
                    07:41:37:e2:45:86:28:e7:be:9f:ea:85:98:8a:2f:
                    19:06:ce:76:5b:25:38:af:a6:9b:40:1d:39:15:3c:
                    21:f8:17:7c:4d:de:f7:9c:4a:f6:6a:59:c9:3f:35:
                    0f:b4:a6:e0:43:3f:be:ff:de:1e:20:3e:77:8b:f8:
                    32:b1:53:ef:0b:67:b5:9f:1f:b8:bb:c0:3f:80:e8:
                    54:34:f8:62:3f:6c:b7:b2:35:8c:ae:4b:f0:08:54:
                    18:ad:35:b0:83:0b:b4:9f:6c:60:f9:5f:f4:1b:be:
                    62:df:82:2b:fd:66:23:dc:28:a4:17:bb:61:88:97:
                    89:ce:c0:da:7b:04:58:77:56:34:47:55:cc:50:f1:
                    fe:2b:88:c6:16:15:87:45:27:23:87:e9:88:fa:2f:
                    16:af:dd:75:b9:48:6e:f7:97:7e:28:cd:3c:23:98:
                    75:73:cc:9e:44:db:0a:28:34:55:9e:ac:49:d5:7e:
                    b0:ea:83:7d:f4:51:b9:a8:9f:0d:c9:79:79:69:48:
                    24:c3:67:93:06:ba:21:3a:92:ce:ea:68:03:20:24:
                    7b:90:bb:db:cc:e5:c5:2f:06:db:95:5a:29:fc:8d:
                    75:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:6E:73:C3:73:D6:56:C0:C5:1D:49:71:99:BF:A3:ED:24:B3:59:E7
            X509v3 Authority Key Identifier:
                keyid:A0:C2:C9:C2:61:75:F7:21:3A:DA:72:D8:BF:F2:95:9A:6D:66:1C:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/323830343a353766343a3a2f33322d3335203d3e20323638303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:57f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:7b:f1:60:c1:fe:96:83:1f:7b:b1:20:24:ef:ce:6d:9e:65:
         e2:b3:8e:9c:bc:e5:06:29:2c:21:ef:96:c3:90:ba:a5:6d:d5:
         0d:da:df:07:99:12:bb:80:00:f7:de:78:76:44:21:5a:3b:b8:
         e3:52:c2:01:f2:63:43:f1:7a:c1:b2:76:6d:89:29:7f:00:0b:
         b1:dd:51:41:ea:45:44:ba:80:a9:78:77:60:86:f1:f1:d2:e1:
         04:89:c8:dc:d2:f3:8b:db:81:89:8d:29:a3:82:fd:5d:d3:ad:
         c0:1e:3f:bc:34:1e:8e:bc:ca:96:a8:4a:f4:ea:e8:57:99:f7:
         16:cf:f1:ea:3f:bc:5c:ac:c5:8e:58:54:23:e3:e5:2e:da:3e:
         29:a2:e1:50:ee:2b:3b:d7:b7:dd:9d:4b:bc:f0:48:87:fa:35:
         68:1f:36:f7:9a:69:30:d3:f7:29:b5:30:06:27:65:69:33:43:
         76:ae:4c:8e:15:a4:65:34:76:cc:53:d7:92:4e:c0:17:9d:bf:
         c8:a6:72:e0:e5:c9:29:b4:bf:04:a5:81:9d:bb:4c:a2:05:0e:
         0a:3c:0b:f2:b4:07:04:ee:a9:4b:79:51:5c:c3:d4:cd:b9:00:
         ca:e4:3e:3c:33:e9:58:c0:f3:64:d6:06:d0:db:e9:7e:7b:13:
         24:64:68:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 12:41:48 2025 by rpki-client