Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NUV4XA6H6viQcv4eLX8rtGynudHw2rvd3WfKE2ffELb/1/323830343a333865343a3a2f33322d3438203d3e20323636353038.roa
File:                     323830343a333865343a3a2f33322d3438203d3e20323636353038.roa (raw, json)
Hash identifier:          7t8yhV0k/bA1AjqvPjiCZxRA/tJx1nCk2/dyeg5pwiU=
Subject key identifier:   C1:00:0B:65:53:04:D2:E6:30:72:63:96:B3:63:ED:F7:DE:CB:68:5E
Certificate issuer:       /CN=10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F
Certificate serial:       1F5272D9DE53A3AEECF2C0949FF1EB2720745CF8
Authority key identifier: 10:CC:3E:D3:0E:D2:B9:E1:9A:7E:D0:8E:B0:6D:68:83:FE:4A:22:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NUV4XA6H6viQcv4eLX8rtGynudHw2rvd3WfKE2ffELb/1/323830343a333865343a3a2f33322d3438203d3e20323636353038.roa
Signing time:             Thu 06 Mar 2025 16:55:41 +0000
ROA not before:           Thu 06 Mar 2025 16:50:41 +0000
ROA not after:            Thu 05 Mar 2026 16:55:41 +0000
asID:                     266508
IP address blocks:        2804:38e4::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:52:72:d9:de:53:a3:ae:ec:f2:c0:94:9f:f1:eb:27:20:74:5c:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F
        Validity
            Not Before: Mar  6 16:50:41 2025 GMT
            Not After : Mar  5 16:55:41 2026 GMT
        Subject: CN=C1000B655304D2E630726396B363EDF7DECB685E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ee:cc:48:b0:f6:56:b3:2c:49:5d:f3:a7:07:
                    9a:51:32:f8:04:48:9b:a0:e7:87:5f:8a:b0:e1:3d:
                    be:e7:26:ec:08:9e:2f:2c:54:b0:c3:87:b6:1a:7a:
                    57:f4:52:8b:d2:ac:71:b9:53:3a:2a:ef:d6:44:ae:
                    c8:bf:3c:d7:e9:4a:f0:7c:74:14:ff:88:5a:26:19:
                    45:bf:c4:c8:8f:2b:f0:48:1d:61:87:ae:0e:45:38:
                    ea:f9:1a:34:0d:ac:1c:bd:09:65:66:2a:2d:93:2d:
                    54:54:8b:2a:29:4c:c2:dd:db:ae:ee:87:df:aa:71:
                    2c:eb:de:44:5a:ff:0a:35:f2:9d:16:78:91:4a:f6:
                    aa:9d:39:26:f0:93:ef:04:52:d5:65:cd:ad:d7:89:
                    04:89:f7:bc:13:d5:99:e7:b9:1f:a1:82:f9:9c:b8:
                    e0:67:b5:20:93:86:18:92:6c:b0:0c:44:6f:97:98:
                    ff:00:a9:8b:2b:97:16:36:b3:99:33:76:1c:96:ec:
                    05:2f:41:29:eb:ae:28:b1:8e:68:11:47:e1:21:0d:
                    ee:1a:09:62:31:9e:ef:c0:6d:69:ce:32:74:1e:46:
                    6d:80:c0:fd:84:34:07:4b:cd:35:94:4a:1f:c0:9b:
                    f2:86:ff:18:56:9d:85:0b:18:68:25:82:45:7d:27:
                    de:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:00:0B:65:53:04:D2:E6:30:72:63:96:B3:63:ED:F7:DE:CB:68:5E
            X509v3 Authority Key Identifier:
                keyid:10:CC:3E:D3:0E:D2:B9:E1:9A:7E:D0:8E:B0:6D:68:83:FE:4A:22:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NUV4XA6H6viQcv4eLX8rtGynudHw2rvd3WfKE2ffELb/1/10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NUV4XA6H6viQcv4eLX8rtGynudHw2rvd3WfKE2ffELb/1/323830343a333865343a3a2f33322d3438203d3e20323636353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:38e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:8f:01:db:fb:d5:8e:b5:60:0d:eb:0b:23:f5:83:98:43:76:
         bf:95:7e:a3:f5:61:f3:05:8c:cd:e2:b1:c4:78:37:a3:e1:44:
         6e:c8:26:89:b5:c1:9e:11:e6:e1:97:bb:26:b2:f6:9b:59:e0:
         ab:f4:2c:87:1b:6e:c7:ec:ed:08:b7:17:6e:46:6b:ec:df:d1:
         bc:29:1e:1a:93:80:cc:9c:9b:0f:c8:98:30:8c:ed:5d:f2:c0:
         6f:ed:bc:ca:46:02:0a:f4:9b:7e:ea:d4:a7:f3:de:eb:c5:7c:
         63:50:33:fc:ed:13:f9:55:5a:39:f6:c4:84:60:12:eb:b2:42:
         3b:a4:e7:1f:ec:6d:15:15:8b:a1:30:49:08:56:88:3f:02:96:
         41:b8:8c:a1:94:36:fe:bc:62:15:39:58:2d:9d:c7:81:6d:53:
         b0:26:db:67:c9:db:50:6e:24:5e:3c:62:ce:57:fe:0c:a9:3e:
         b6:5c:50:e5:1b:ef:d6:f5:3a:74:83:61:64:0e:a2:a0:ca:23:
         b3:f3:21:7f:56:0c:b5:b0:1d:bf:bb:a5:61:9a:27:a3:33:45:
         92:74:74:d5:29:4f:b9:90:97:ff:45:09:05:c6:b9:94:2b:0b:
         d6:5d:1c:9c:59:eb:46:14:b8:5e:77:7c:f9:9c:42:d2:e1:78:
         13:cc:c8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:47:48 2025 by rpki-client