Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7S4PyS4bkS4c9yDWgAAhYQFMK1c71M5st2xTPu8k8MPh/0/323830343a363532303a3a2f33322d313238203d3e20323639343730.roa
File:                     323830343a363532303a3a2f33322d313238203d3e20323639343730.roa (raw, json)
Hash identifier:          Hp8bb2QLzPeJolzxVfb4StA1SvBC48SKeg9FrrjY3/c=
Subject key identifier:   66:6A:70:99:C3:82:63:98:9D:F0:9F:11:44:69:4F:FE:1F:57:D3:06
Certificate issuer:       /CN=B7CE75B7F7838B9A1A22D35DD7BBA03C08BD0085
Certificate serial:       22C1AC5BDA784F5AD707E09F149CABE0401C8C38
Authority key identifier: B7:CE:75:B7:F7:83:8B:9A:1A:22:D3:5D:D7:BB:A0:3C:08:BD:00:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7CE75B7F7838B9A1A22D35DD7BBA03C08BD0085.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7S4PyS4bkS4c9yDWgAAhYQFMK1c71M5st2xTPu8k8MPh/0/323830343a363532303a3a2f33322d313238203d3e20323639343730.roa
Signing time:             Sun 02 Mar 2025 20:33:52 +0000
ROA not before:           Sun 02 Mar 2025 20:28:52 +0000
ROA not after:            Sun 01 Mar 2026 20:33:52 +0000
asID:                     269470
IP address blocks:        2804:6520::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:c1:ac:5b:da:78:4f:5a:d7:07:e0:9f:14:9c:ab:e0:40:1c:8c:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7CE75B7F7838B9A1A22D35DD7BBA03C08BD0085
        Validity
            Not Before: Mar  2 20:28:52 2025 GMT
            Not After : Mar  1 20:33:52 2026 GMT
        Subject: CN=666A7099C38263989DF09F1144694FFE1F57D306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c6:9e:95:67:44:ac:a0:62:30:fc:4b:4d:3e:
                    7a:2b:f1:7f:14:34:eb:e9:69:ca:ad:ed:ee:9c:5a:
                    9c:bd:02:3c:9b:fe:6e:de:c9:dd:4c:92:27:6b:f4:
                    5b:53:d8:21:4c:5c:19:73:51:86:86:b0:c3:61:45:
                    5e:62:15:fd:aa:6f:27:2f:d3:90:91:03:96:4c:54:
                    34:6d:0e:46:7c:57:86:3c:4d:d1:83:9a:b6:c3:03:
                    66:f2:37:2b:16:f8:12:64:27:54:23:b8:87:92:15:
                    c7:b6:14:c9:34:4b:b0:12:dc:1b:88:c9:e1:3d:4e:
                    a3:82:aa:4e:14:7a:07:56:8f:17:73:0b:29:ea:43:
                    c7:fc:dc:8c:70:91:4c:d2:e4:5c:e3:90:77:bc:7f:
                    d3:2c:e9:3a:9b:f8:b9:35:aa:68:d8:d8:37:fa:d7:
                    65:bf:0c:fd:11:3d:33:cd:58:39:06:d2:70:8a:90:
                    d1:31:be:a1:d9:39:6d:13:7d:f3:8b:52:32:3d:82:
                    8e:91:22:9c:ef:f8:e1:ed:9b:17:ca:e8:37:ad:83:
                    a6:a1:11:09:85:f9:98:05:86:4a:59:2c:3c:95:ff:
                    96:be:f0:64:54:40:e2:f1:fa:d9:02:86:65:58:6c:
                    29:c8:84:2e:da:23:02:6f:93:dc:fa:b3:b6:1f:0c:
                    10:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:6A:70:99:C3:82:63:98:9D:F0:9F:11:44:69:4F:FE:1F:57:D3:06
            X509v3 Authority Key Identifier:
                keyid:B7:CE:75:B7:F7:83:8B:9A:1A:22:D3:5D:D7:BB:A0:3C:08:BD:00:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7S4PyS4bkS4c9yDWgAAhYQFMK1c71M5st2xTPu8k8MPh/0/B7CE75B7F7838B9A1A22D35DD7BBA03C08BD0085.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7CE75B7F7838B9A1A22D35DD7BBA03C08BD0085.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7S4PyS4bkS4c9yDWgAAhYQFMK1c71M5st2xTPu8k8MPh/0/323830343a363532303a3a2f33322d313238203d3e20323639343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6520::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:22:5c:d7:5a:a4:52:33:e2:89:3f:a0:dd:74:6f:c1:5d:1b:
         7b:8e:16:23:e1:c5:0b:4d:91:7c:27:27:56:7e:48:28:59:e7:
         dc:4f:a3:b8:25:32:46:de:16:6b:37:2a:b5:a6:66:3d:30:09:
         79:06:6e:56:cb:e9:f9:31:35:2b:b0:d5:5d:8f:ac:6d:a6:b2:
         3c:e6:24:de:fb:f1:0a:78:85:2e:b6:e5:e2:17:2a:da:90:6c:
         1c:70:2f:56:0d:31:ec:73:d1:be:45:b1:6c:c2:a6:64:29:2b:
         5a:1f:1a:25:67:cf:53:f8:07:ca:c2:a8:7a:46:8b:49:8f:41:
         b7:69:0f:f2:e7:98:4f:f2:b8:56:af:ba:e9:dd:85:1a:93:89:
         42:a9:19:ce:b2:be:2d:bd:67:25:cf:72:1d:af:93:71:52:44:
         c9:61:a7:6e:cd:f1:74:17:86:bb:fc:5d:62:3a:9c:42:90:da:
         6a:fc:2b:a8:b7:c9:de:ac:ff:79:11:ef:ca:00:33:37:aa:3d:
         9e:2f:67:02:57:21:4b:16:3e:86:0d:2e:38:d3:3b:c4:a6:6b:
         af:14:ec:55:fb:08:23:f0:f5:60:28:46:4d:43:46:62:e5:e4:
         bc:14:8e:7e:41:46:ec:0f:25:74:37:cd:b3:42:42:6a:08:6e:
         88:e9:c4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:57:21 2025 by rpki-client