Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/323830343a346335303a383030303a3a2f33342d3334203d3e20323637333633.roa
File:                     323830343a346335303a383030303a3a2f33342d3334203d3e20323637333633.roa (raw, json)
Hash identifier:          yacUfiSwS3lYmbKkBclLewB+MAyhPqz7XyZgH18bY+A=
Subject key identifier:   AA:2C:72:9E:66:9C:05:0A:BF:26:F9:A1:88:05:82:41:59:DD:11:41
Certificate issuer:       /CN=D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA
Certificate serial:       398C7BD6A3FF08DCBE2D09425E0E993874CC03EF
Authority key identifier: D7:C6:5B:91:75:A8:C5:5D:D1:BE:8B:5D:6F:51:15:2D:72:C5:05:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/323830343a346335303a383030303a3a2f33342d3334203d3e20323637333633.roa
Signing time:             Thu 06 Mar 2025 13:54:53 +0000
ROA not before:           Thu 06 Mar 2025 13:49:53 +0000
ROA not after:            Thu 05 Mar 2026 13:54:53 +0000
asID:                     267363
IP address blocks:        2804:4c50:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:8c:7b:d6:a3:ff:08:dc:be:2d:09:42:5e:0e:99:38:74:cc:03:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA
        Validity
            Not Before: Mar  6 13:49:53 2025 GMT
            Not After : Mar  5 13:54:53 2026 GMT
        Subject: CN=AA2C729E669C050ABF26F9A18805824159DD1141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bb:24:3e:ec:ca:dd:86:b1:36:c0:a6:d5:52:
                    9c:b3:32:63:13:64:a6:90:56:2d:46:55:c8:fd:7f:
                    f9:84:c5:76:1c:a1:f1:06:2d:10:93:7c:91:7a:c8:
                    9c:bc:38:50:58:50:a6:a1:4c:a4:d2:6d:45:c7:0f:
                    33:9f:bb:27:d5:fc:04:64:be:59:85:68:63:98:1e:
                    6e:a1:67:c0:98:79:4c:10:19:b5:2f:ca:c3:c1:59:
                    bb:40:a0:af:90:32:a7:54:82:30:c9:95:03:ca:3d:
                    24:8c:18:8c:e5:07:0a:c9:fe:86:c1:3d:f2:84:50:
                    0c:cc:17:42:7b:21:0f:32:e2:d9:6f:30:30:75:b7:
                    6a:26:fa:f4:11:ee:2e:d4:f9:a2:f0:40:c6:0a:a9:
                    84:75:ea:e9:b9:21:8a:a1:a2:c7:eb:5f:92:fd:56:
                    5e:a7:d9:35:60:cd:04:05:40:16:0d:d1:e0:23:2e:
                    bd:7d:65:2f:c6:32:46:c7:27:4c:1e:b2:b4:49:c3:
                    3e:a0:18:d7:c8:32:6d:cf:12:89:b6:4e:9e:ad:95:
                    92:db:3b:88:95:e7:f5:f6:a1:50:b9:48:66:b0:08:
                    3e:86:ec:29:59:02:bb:29:52:68:3f:54:68:e6:2a:
                    80:87:40:48:26:49:d9:62:9e:fb:92:59:60:0d:26:
                    2c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:2C:72:9E:66:9C:05:0A:BF:26:F9:A1:88:05:82:41:59:DD:11:41
            X509v3 Authority Key Identifier:
                keyid:D7:C6:5B:91:75:A8:C5:5D:D1:BE:8B:5D:6F:51:15:2D:72:C5:05:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/323830343a346335303a383030303a3a2f33342d3334203d3e20323637333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c50:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         58:59:96:8f:a9:3a:3c:0a:85:0f:05:db:b6:a5:77:fa:c8:d4:
         23:73:9f:13:4d:20:25:ba:46:72:47:ad:d8:6e:70:3b:a3:59:
         51:5c:90:c1:2c:a2:ae:dd:61:40:3e:2a:c3:af:44:b6:da:bb:
         c2:6c:ec:c7:3c:70:02:52:1b:45:cb:06:00:fb:11:0d:c7:f3:
         a4:a5:d5:4a:e4:06:af:e6:1e:b5:60:e4:e1:ca:b2:42:9f:21:
         17:7e:01:e7:62:87:e9:2e:43:3f:e3:df:80:09:d1:ff:2a:3f:
         21:86:ee:c5:fe:1d:19:b9:cd:30:cf:86:95:da:5d:fc:b3:6b:
         38:94:5b:c5:ef:25:f5:d5:9a:7d:76:99:41:3c:2b:72:d5:8a:
         ab:d9:c7:db:07:e2:a1:46:d4:ed:fe:f2:4d:2e:3f:a4:39:ba:
         8a:5e:fb:03:15:50:7a:eb:e5:b1:39:2c:09:62:51:82:34:77:
         f1:57:d7:69:dc:54:7e:5a:57:03:04:24:a7:5a:55:28:18:6b:
         19:0e:a3:a2:99:fa:bb:a6:74:05:46:1d:72:91:b4:3e:06:e7:
         69:ca:03:80:2e:22:c5:06:a9:dc:61:a5:f1:82:0d:48:44:8f:
         6a:a9:6f:3b:65:71:2e:fc:3a:77:ef:a7:61:e8:eb:51:d9:71:
         d3:97:e2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:01:27 2025 by rpki-client