Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/323830343a346263383a3130303a3a2f34322d3432203d3e20323633343135.roa
File:                     323830343a346263383a3130303a3a2f34322d3432203d3e20323633343135.roa (raw, json)
Hash identifier:          b5hV0jul+0k9L5pFDdLGvt2ne9JWG+LboIh7XsHQV7U=
Subject key identifier:   97:AD:98:63:DC:26:1D:34:57:2C:07:51:FC:7E:43:FD:C2:C9:0B:00
Certificate issuer:       /CN=8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062
Certificate serial:       01982510F9AB0190D3C067AF6DEFA6790A81E55B
Authority key identifier: 8B:C9:F7:AD:42:F2:2B:9F:05:99:DE:DE:F7:DF:60:71:8D:CE:10:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/323830343a346263383a3130303a3a2f34322d3432203d3e20323633343135.roa
Signing time:             Thu 06 Mar 2025 04:33:10 +0000
ROA not before:           Thu 06 Mar 2025 04:28:10 +0000
ROA not after:            Thu 05 Mar 2026 04:33:10 +0000
asID:                     263415
IP address blocks:        2804:4bc8:100::/42 maxlen: 42
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:25:10:f9:ab:01:90:d3:c0:67:af:6d:ef:a6:79:0a:81:e5:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062
        Validity
            Not Before: Mar  6 04:28:10 2025 GMT
            Not After : Mar  5 04:33:10 2026 GMT
        Subject: CN=97AD9863DC261D34572C0751FC7E43FDC2C90B00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d7:fc:2f:18:ab:a1:35:08:8e:ba:0b:5e:49:
                    45:9a:da:1d:d8:1a:06:80:5c:62:65:85:d0:8c:1e:
                    1f:ea:ac:9e:4f:b9:13:2d:8d:a2:08:c5:2f:a0:bb:
                    1b:55:5d:51:c8:68:44:33:ca:39:ae:15:3a:8c:58:
                    2a:4d:7a:4c:53:1d:c4:0f:67:c2:72:31:ca:cc:2d:
                    cb:ee:82:1d:b2:4b:c6:13:71:82:25:d1:ae:b3:a0:
                    0a:b8:d6:89:52:46:db:47:32:6b:06:f9:56:65:f0:
                    d8:0e:d7:13:6b:51:3f:80:7d:d6:ca:cc:16:c1:35:
                    9d:b7:ec:d9:83:e0:24:97:f9:90:bc:96:c8:d6:d5:
                    04:d1:73:f0:16:7f:16:85:0e:8d:68:d2:75:ea:e3:
                    ca:e1:65:46:a2:39:05:ce:e7:eb:2b:25:2a:09:1c:
                    2c:f0:c0:97:4b:b5:8a:59:d0:e1:7b:73:1d:c4:ae:
                    2b:63:65:3f:75:96:bc:3a:11:96:ed:b4:1d:63:3b:
                    f7:3e:60:fc:4d:fe:0d:da:5b:5c:43:fd:df:6a:8c:
                    bb:67:8e:23:15:72:bf:d5:6c:5f:a3:05:10:58:ad:
                    28:5b:c2:fb:8c:6e:e1:f7:c6:66:d1:b0:b0:ea:d3:
                    b8:51:bd:e4:02:15:81:67:9d:b9:f3:9e:d2:51:95:
                    35:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:AD:98:63:DC:26:1D:34:57:2C:07:51:FC:7E:43:FD:C2:C9:0B:00
            X509v3 Authority Key Identifier:
                keyid:8B:C9:F7:AD:42:F2:2B:9F:05:99:DE:DE:F7:DF:60:71:8D:CE:10:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/323830343a346263383a3130303a3a2f34322d3432203d3e20323633343135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bc8:100::/42

    Signature Algorithm: sha256WithRSAEncryption
         6f:81:8b:3a:e9:4e:93:90:a3:ad:74:3a:d2:9b:10:2e:39:34:
         1d:42:90:6c:67:bc:ba:ad:e6:17:e2:9e:36:4d:4c:a0:37:1b:
         47:a2:8a:ea:6b:9d:52:5f:f3:51:fe:ad:70:72:3d:56:24:b5:
         d9:e6:65:b4:e1:9c:37:5a:c3:c3:b9:40:17:3c:09:01:49:54:
         d6:3c:c7:18:e9:48:a8:ff:15:83:b5:2a:2f:bc:ab:f5:46:62:
         12:f3:1f:92:f6:f6:fd:1c:aa:1f:c5:e3:f4:f4:99:2c:51:d9:
         60:1a:51:0e:c3:dc:3a:a1:0c:a0:7a:d6:59:ed:93:b3:04:7e:
         b3:5a:d3:69:8f:d3:9d:02:ef:53:7c:80:fa:5b:1b:22:43:f2:
         08:e9:d8:1b:c6:d1:13:c9:b4:f0:35:9e:08:d2:5d:48:0d:45:
         c3:d7:7a:ea:f7:a4:57:18:0c:65:99:e3:54:fa:c7:dd:46:ad:
         7b:ae:d6:4f:b0:7e:f8:d1:19:74:c1:cd:1b:c2:23:dd:f0:e4:
         86:b2:47:b7:df:1e:95:7a:8d:1a:ae:d5:d1:f3:a9:19:10:87:
         c3:18:1f:79:80:02:f1:0f:ee:19:d9:91:c1:8e:70:5f:a7:5a:
         db:e8:b5:96:9b:04:9b:67:69:20:39:5e:58:f3:f6:aa:d2:4e:
         2b:39:5d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:10:21 2025 by rpki-client