Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/323830343a376434633a3a2f33322d3438203d3e20323731353532.roa
File:                     323830343a376434633a3a2f33322d3438203d3e20323731353532.roa (raw, json)
Hash identifier:          4FdtPx9RyNkN4ztnujOwlne7tNDPzp/1/j9VG1rgmXM=
Subject key identifier:   50:F0:D9:63:35:B7:B7:04:3B:25:AA:EA:8F:09:FF:1E:80:B1:30:8B
Certificate issuer:       /CN=8D4C41093F9C1CEA8DFF560B0F664B94298AD57E
Certificate serial:       2CF114B4230215DA14E6AA77BBE61E2972459DBB
Authority key identifier: 8D:4C:41:09:3F:9C:1C:EA:8D:FF:56:0B:0F:66:4B:94:29:8A:D5:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D4C41093F9C1CEA8DFF560B0F664B94298AD57E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/323830343a376434633a3a2f33322d3438203d3e20323731353532.roa
Signing time:             Fri 21 Mar 2025 18:34:08 +0000
ROA not before:           Fri 21 Mar 2025 18:29:08 +0000
ROA not after:            Fri 20 Mar 2026 18:34:08 +0000
asID:                     271552
IP address blocks:        2804:7d4c::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:f1:14:b4:23:02:15:da:14:e6:aa:77:bb:e6:1e:29:72:45:9d:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D4C41093F9C1CEA8DFF560B0F664B94298AD57E
        Validity
            Not Before: Mar 21 18:29:08 2025 GMT
            Not After : Mar 20 18:34:08 2026 GMT
        Subject: CN=50F0D96335B7B7043B25AAEA8F09FF1E80B1308B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:25:c6:90:08:f9:78:d1:df:8c:a9:5c:a9:da:
                    c6:68:8f:7e:12:c8:73:26:e1:98:84:61:36:7c:76:
                    00:ac:92:46:06:c5:59:1d:40:54:2f:52:41:b3:3c:
                    6f:0a:f0:30:9b:18:66:9d:1a:dd:6a:c2:d9:74:8c:
                    36:06:95:01:ea:8c:e8:92:61:51:a1:34:7a:a2:a0:
                    8b:96:49:40:9d:71:b5:66:9f:8f:57:6a:55:77:5b:
                    a3:1e:e3:4c:4e:cd:83:69:88:26:07:17:cd:0f:54:
                    80:9d:d7:9f:51:af:be:c2:7d:2b:29:6d:ce:69:a2:
                    27:25:62:08:27:69:8a:18:fe:97:4b:96:59:37:38:
                    f6:c9:71:91:2f:84:a2:71:56:e7:9d:56:04:db:24:
                    57:10:b3:d5:cf:a0:eb:92:b6:83:c6:f4:e5:3a:f4:
                    79:82:d0:9f:0d:22:f7:a3:b7:e9:1f:97:86:cf:3a:
                    a6:e6:66:ed:6b:dc:8e:cc:14:11:96:dd:8c:2a:d3:
                    ed:df:f8:b1:06:bc:7c:80:00:ff:8d:40:e7:63:43:
                    a1:be:bc:b7:b4:77:b8:1b:30:93:0e:73:20:2a:20:
                    df:ad:a0:46:41:97:75:9b:ba:35:7f:1e:b1:6c:cd:
                    f9:e9:a1:92:ca:00:b6:94:69:8b:cb:8f:bd:19:b0:
                    fb:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F0:D9:63:35:B7:B7:04:3B:25:AA:EA:8F:09:FF:1E:80:B1:30:8B
            X509v3 Authority Key Identifier:
                keyid:8D:4C:41:09:3F:9C:1C:EA:8D:FF:56:0B:0F:66:4B:94:29:8A:D5:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/8D4C41093F9C1CEA8DFF560B0F664B94298AD57E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D4C41093F9C1CEA8DFF560B0F664B94298AD57E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/323830343a376434633a3a2f33322d3438203d3e20323731353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:76:de:1b:8c:ab:d9:3e:c1:4e:19:24:73:55:3f:05:2e:73:
         7c:72:ec:6f:c6:f1:42:e8:61:84:47:1d:c1:ad:a9:62:0b:97:
         74:b1:70:02:88:ce:34:b7:13:12:49:59:ff:91:01:8e:07:a9:
         2b:c2:fb:36:6c:03:7c:56:8b:e3:ef:50:65:18:a1:16:f0:a8:
         37:cc:85:b4:bf:e4:dd:78:19:67:76:d6:84:99:33:27:9c:ee:
         51:33:cc:b5:bf:be:68:89:44:25:ec:d1:36:d9:2a:ff:15:92:
         71:e6:6f:4c:79:06:dc:52:fa:f5:be:d6:15:b4:9f:75:79:c6:
         93:c1:57:f1:02:35:cd:ad:db:15:8e:4d:29:d5:f7:5d:af:0e:
         25:1f:16:ea:88:25:83:61:ea:23:02:63:f8:cc:3c:67:4b:d4:
         79:03:0f:7f:93:ce:0a:4b:31:2f:51:62:c6:b3:84:b8:5b:3e:
         2f:73:40:cf:34:8e:f5:7f:34:0f:fb:43:ed:bf:d8:03:c7:ec:
         24:9c:a4:7e:41:d3:05:fc:41:73:b0:84:65:a1:03:01:64:5b:
         bb:d5:37:25:a5:78:a1:6d:7f:e9:17:bd:d9:0a:2a:b3:7c:6e:
         94:a8:e2:32:26:be:70:ac:29:6c:e8:18:b2:eb:c4:14:6e:5a:
         03:20:95:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:47:48 2025 by rpki-client