Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7fpm6Ps7XcjgaG4JuA2gxV8nfkftGbVy79Yf4W7tHkRL/0/323830343a3238383a3a2f33322d313238203d3e20323632383230.roa
File:                     323830343a3238383a3a2f33322d313238203d3e20323632383230.roa (raw, json)
Hash identifier:          gH+9aV4LGJwU+yKo+B2qCUiPScPvOrAej9vq6Cf727c=
Subject key identifier:   76:31:C1:34:97:83:BA:16:82:85:AC:1E:6B:D1:2C:7C:F8:F6:B8:FA
Certificate issuer:       /CN=77570FAC77508AD3070A2732DBD19271C2614647
Certificate serial:       574CA7714D497E3BCDC1EF71C88FCA6A291E57B4
Authority key identifier: 77:57:0F:AC:77:50:8A:D3:07:0A:27:32:DB:D1:92:71:C2:61:46:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77570FAC77508AD3070A2732DBD19271C2614647.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7fpm6Ps7XcjgaG4JuA2gxV8nfkftGbVy79Yf4W7tHkRL/0/323830343a3238383a3a2f33322d313238203d3e20323632383230.roa
Signing time:             Sat 08 Feb 2025 23:03:05 +0000
ROA not before:           Sat 08 Feb 2025 22:58:05 +0000
ROA not after:            Sat 07 Feb 2026 23:03:05 +0000
asID:                     262820
IP address blocks:        2804:288::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:4c:a7:71:4d:49:7e:3b:cd:c1:ef:71:c8:8f:ca:6a:29:1e:57:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77570FAC77508AD3070A2732DBD19271C2614647
        Validity
            Not Before: Feb  8 22:58:05 2025 GMT
            Not After : Feb  7 23:03:05 2026 GMT
        Subject: CN=7631C1349783BA168285AC1E6BD12C7CF8F6B8FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a6:c4:d9:cf:54:0f:e4:1d:76:b2:a5:f0:74:
                    09:61:ad:80:5b:1f:0c:b4:78:4c:be:cd:ad:53:1a:
                    c0:0d:f2:79:a5:58:bd:0b:2c:f7:40:3f:b8:2a:24:
                    24:87:10:75:0c:68:bf:91:d5:6b:61:35:9d:b8:bb:
                    61:0c:d4:f0:35:a9:dd:29:91:25:8f:a1:f7:6f:0d:
                    3d:0e:f4:d1:eb:5e:f2:45:fd:d7:fa:6a:a5:b7:d3:
                    db:60:88:7f:d0:bf:97:98:7f:c9:f3:03:4c:df:7b:
                    fb:ce:86:ad:30:b7:f8:b4:f4:a3:c1:9c:18:1f:f3:
                    e8:d5:13:1d:38:13:c1:d5:ee:7c:8e:7d:2a:64:ba:
                    5b:e5:a6:33:a3:9e:e5:6d:f8:f0:32:31:27:8d:e0:
                    6b:41:0a:6b:e8:92:80:16:9c:43:0d:77:29:cf:26:
                    b0:b4:8e:69:9a:e4:91:6c:6d:10:97:30:02:75:e1:
                    02:fd:ce:78:db:53:76:7e:0f:54:9b:47:1a:b5:86:
                    28:46:79:34:f5:85:61:cc:e3:28:e0:f7:e4:20:fc:
                    36:28:f4:a3:55:dd:5b:37:3e:cc:e4:9b:25:2d:49:
                    b7:95:d4:7c:45:e8:d5:b7:e4:90:16:45:09:b6:bd:
                    f5:e9:6b:1d:98:d0:56:e7:bb:b7:22:13:81:76:ff:
                    23:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:31:C1:34:97:83:BA:16:82:85:AC:1E:6B:D1:2C:7C:F8:F6:B8:FA
            X509v3 Authority Key Identifier:
                keyid:77:57:0F:AC:77:50:8A:D3:07:0A:27:32:DB:D1:92:71:C2:61:46:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7fpm6Ps7XcjgaG4JuA2gxV8nfkftGbVy79Yf4W7tHkRL/0/77570FAC77508AD3070A2732DBD19271C2614647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77570FAC77508AD3070A2732DBD19271C2614647.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7fpm6Ps7XcjgaG4JuA2gxV8nfkftGbVy79Yf4W7tHkRL/0/323830343a3238383a3a2f33322d313238203d3e20323632383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:288::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:49:59:a1:2a:0d:46:2b:fc:3b:cd:43:37:96:4c:5e:45:13:
         e1:af:c2:55:16:85:0f:db:41:e5:67:02:c5:10:61:ec:b6:63:
         83:d6:3a:9a:4f:17:30:7f:d2:f5:9a:33:6f:08:16:17:2a:c1:
         fa:5f:ee:c8:34:05:72:31:ba:31:46:25:ab:9c:27:85:fe:a2:
         9d:9f:f8:83:98:f2:51:a4:bf:f3:b8:00:85:91:0f:88:5f:eb:
         01:94:b4:e4:8c:d6:07:00:66:ba:fc:fc:4d:09:cb:2f:a6:27:
         46:6b:9a:b2:20:cf:b8:48:76:ba:cb:4a:3c:ab:c9:36:ee:e4:
         10:1c:72:6d:4c:42:f0:b1:b6:5c:c7:9f:3f:b8:f2:33:97:f6:
         6a:a3:e2:80:7f:03:4a:c9:15:61:5d:e9:b6:d3:8b:d7:68:33:
         01:67:47:32:4f:e8:b2:30:7e:bf:e9:a0:aa:cc:db:93:ae:5b:
         46:11:63:38:0e:60:d8:e2:0d:2f:1d:64:08:3b:df:c0:9a:21:
         85:b6:e1:ec:f2:34:80:8a:4c:4b:e0:16:b3:ff:8d:e5:0a:37:
         99:83:c6:e2:81:5d:77:ae:8f:d3:f2:18:ff:3a:7f:69:3c:0c:
         a4:8f:fc:42:f1:62:fe:28:76:16:31:a7:34:20:e2:94:fd:7f:
         b9:73:c0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:34:58 2025 by rpki-client