Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7innpnSxgy6Ra6kkGd6vf4evxdXgHX9s5VuGTg8xsQnH/0/323830343a376164343a6530303a3a2f34302d3430203d3e20323731333934.roa
File:                     323830343a376164343a6530303a3a2f34302d3430203d3e20323731333934.roa (raw, json)
Hash identifier:          +8w56QY0I+5gGDHFJDnhGGwQlO/2Woo75Fn5wRWnrIU=
Subject key identifier:   97:96:6F:86:75:8D:46:07:64:5F:9D:74:65:4B:C4:ED:85:47:E5:88
Certificate issuer:       /CN=DD271F242DF0D8617E8D7597283EB60BDB86C2FD
Certificate serial:       0A4E4C1725C9C823A3D22879AA1CEF78999BFE74
Authority key identifier: DD:27:1F:24:2D:F0:D8:61:7E:8D:75:97:28:3E:B6:0B:DB:86:C2:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD271F242DF0D8617E8D7597283EB60BDB86C2FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7innpnSxgy6Ra6kkGd6vf4evxdXgHX9s5VuGTg8xsQnH/0/323830343a376164343a6530303a3a2f34302d3430203d3e20323731333934.roa
Signing time:             Tue 04 Feb 2025 03:32:19 +0000
ROA not before:           Tue 04 Feb 2025 03:27:19 +0000
ROA not after:            Tue 03 Feb 2026 03:32:19 +0000
asID:                     271394
IP address blocks:        2804:7ad4:e00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:4e:4c:17:25:c9:c8:23:a3:d2:28:79:aa:1c:ef:78:99:9b:fe:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD271F242DF0D8617E8D7597283EB60BDB86C2FD
        Validity
            Not Before: Feb  4 03:27:19 2025 GMT
            Not After : Feb  3 03:32:19 2026 GMT
        Subject: CN=97966F86758D4607645F9D74654BC4ED8547E588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c6:db:ad:5b:8c:3e:8d:35:32:40:dc:dc:49:
                    e9:3d:5d:74:c8:ee:c9:42:b3:b2:9b:3d:33:7e:71:
                    68:c9:70:bc:8b:75:12:3f:d3:ee:e3:60:64:41:79:
                    d5:f0:2a:87:50:94:9d:01:b7:15:96:8e:02:46:00:
                    71:16:5a:02:3c:db:f5:6b:51:ab:53:0c:1b:39:94:
                    54:66:15:5c:2d:0e:2a:bb:c3:ab:5a:78:a0:8f:3a:
                    4e:8d:72:0e:de:25:dd:7d:dd:a4:1c:76:27:36:eb:
                    45:a9:f1:33:2a:f9:65:8f:c0:00:a0:77:7f:36:7c:
                    ba:b3:b5:41:79:75:6e:d4:61:78:2d:e6:94:be:7e:
                    23:98:71:a4:f5:82:e4:86:af:5d:5c:8a:d1:aa:a8:
                    3d:af:e0:86:a5:f5:b5:01:3a:36:2d:cf:a6:15:ac:
                    5f:29:e5:98:2e:3a:78:1e:2b:8c:bc:6a:80:b1:46:
                    fc:7f:ed:55:0f:3e:c6:55:3b:d7:f3:1f:fd:c5:d1:
                    13:90:2a:53:dc:c1:0d:2c:14:38:bb:41:e9:26:e0:
                    1d:69:88:09:f9:59:48:97:3b:58:5d:eb:19:f3:4f:
                    00:b7:84:7c:02:04:a5:f8:50:98:26:3f:36:53:09:
                    75:f1:db:47:5a:d0:c4:c8:25:12:79:8e:85:37:e2:
                    d7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:96:6F:86:75:8D:46:07:64:5F:9D:74:65:4B:C4:ED:85:47:E5:88
            X509v3 Authority Key Identifier:
                keyid:DD:27:1F:24:2D:F0:D8:61:7E:8D:75:97:28:3E:B6:0B:DB:86:C2:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7innpnSxgy6Ra6kkGd6vf4evxdXgHX9s5VuGTg8xsQnH/0/DD271F242DF0D8617E8D7597283EB60BDB86C2FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD271F242DF0D8617E8D7597283EB60BDB86C2FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7innpnSxgy6Ra6kkGd6vf4evxdXgHX9s5VuGTg8xsQnH/0/323830343a376164343a6530303a3a2f34302d3430203d3e20323731333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ad4:e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         94:05:08:89:4e:9f:a6:04:b1:cd:3d:0e:ec:70:14:5e:8f:ce:
         45:e5:65:a3:94:8a:5f:90:80:24:3e:5a:8e:aa:8a:88:35:69:
         eb:29:d9:72:29:bf:ff:dc:b4:18:47:b2:8b:65:4f:f5:8e:fc:
         38:dc:7c:e1:a6:a0:7d:1b:bd:03:7a:81:37:f9:a8:fb:40:ce:
         32:00:2c:0e:1b:df:2f:1a:b4:af:82:92:a3:b9:b5:12:a4:a5:
         6e:fc:8f:b8:77:27:5b:7a:e8:41:0a:e3:e8:2f:84:fa:ad:8b:
         57:96:7c:6d:b4:0e:6d:bc:c6:54:eb:79:5c:fa:f0:c8:87:a7:
         ac:78:a9:27:04:2b:5b:90:09:63:8e:87:4b:b1:7a:55:eb:13:
         3e:d0:6a:07:ff:cc:6e:e8:8e:92:aa:ab:65:5a:91:39:a0:44:
         95:c6:85:49:38:90:46:0b:e7:20:83:ae:a5:0b:e1:a4:79:a8:
         e5:3b:6a:6e:07:5e:ed:70:ab:a7:8c:a3:ca:6d:b2:42:17:f6:
         cc:e1:0e:37:d9:be:43:5a:b8:34:53:e1:bd:3a:b3:29:3e:55:
         0b:81:7a:9f:78:4f:4e:d1:2c:bd:97:aa:b3:88:87:f9:78:a2:
         56:76:0b:c3:0b:2d:7a:2b:5b:a6:8b:25:d0:5e:92:71:68:56:
         3b:ea:35:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:56:59 2025 by rpki-client