Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/323830343a346335303a3a2f33332d3333203d3e20323637333633.roa
File:                     323830343a346335303a3a2f33332d3333203d3e20323637333633.roa (raw, json)
Hash identifier:          jxCmJDgniaa8L6MUnhVRHv+QEbty0aHUqWE+2jdD/5Q=
Subject key identifier:   76:08:F6:28:53:90:B2:71:68:5D:C3:1E:9E:06:5E:F7:5D:5E:68:CF
Certificate issuer:       /CN=D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA
Certificate serial:       4A3616EBA77F0ED7A4DAFFA036F7E95EBE94F8CC
Authority key identifier: D7:C6:5B:91:75:A8:C5:5D:D1:BE:8B:5D:6F:51:15:2D:72:C5:05:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/323830343a346335303a3a2f33332d3333203d3e20323637333633.roa
Signing time:             Thu 06 Mar 2025 13:54:54 +0000
ROA not before:           Thu 06 Mar 2025 13:49:54 +0000
ROA not after:            Thu 05 Mar 2026 13:54:54 +0000
asID:                     267363
IP address blocks:        2804:4c50::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:36:16:eb:a7:7f:0e:d7:a4:da:ff:a0:36:f7:e9:5e:be:94:f8:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA
        Validity
            Not Before: Mar  6 13:49:54 2025 GMT
            Not After : Mar  5 13:54:54 2026 GMT
        Subject: CN=7608F6285390B271685DC31E9E065EF75D5E68CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d8:c3:e1:1f:13:d3:0d:b2:85:71:83:3e:64:
                    8c:dc:59:ad:e6:0b:f5:73:e4:1a:4a:25:1f:13:67:
                    13:37:fc:cd:8f:20:3c:3e:6f:10:be:74:f4:d2:e4:
                    e7:cf:f3:9b:ab:b2:a6:ac:39:9f:ee:1e:24:ea:20:
                    a6:ba:c5:1e:66:53:54:e4:90:d6:2a:83:ac:97:f0:
                    13:9d:9e:08:90:e4:d7:05:cf:35:fa:54:8b:d3:b4:
                    7d:5b:56:6e:f4:57:5c:33:f9:bc:42:68:20:43:ca:
                    96:68:ed:fc:c4:56:00:bc:c0:47:93:d0:7c:c6:9c:
                    29:41:43:38:c6:29:26:fd:cf:bf:4f:79:d2:95:9c:
                    06:a9:fa:86:18:a3:2d:67:33:3b:7c:d9:89:5b:9a:
                    e2:7e:4b:09:6f:9a:26:3d:df:73:2a:3a:fe:9e:cd:
                    21:28:c9:58:bf:72:80:90:5e:aa:4e:ef:44:82:2f:
                    cc:ee:75:6c:44:39:51:95:63:b0:77:81:25:27:a3:
                    69:bd:ad:49:c2:5b:e1:71:8a:50:aa:8d:c0:ec:95:
                    76:4d:e6:8a:9e:66:cf:11:91:d8:b2:13:b8:0b:38:
                    43:6f:43:26:6b:ba:74:70:32:f9:10:8f:9f:9d:64:
                    66:80:1b:96:e6:75:32:f0:0a:3a:8c:b0:6d:2b:cc:
                    48:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:08:F6:28:53:90:B2:71:68:5D:C3:1E:9E:06:5E:F7:5D:5E:68:CF
            X509v3 Authority Key Identifier:
                keyid:D7:C6:5B:91:75:A8:C5:5D:D1:BE:8B:5D:6F:51:15:2D:72:C5:05:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/323830343a346335303a3a2f33332d3333203d3e20323637333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c50::/33

    Signature Algorithm: sha256WithRSAEncryption
         b4:c6:0d:70:31:84:25:ab:7c:72:f8:8e:7d:0e:b9:e5:d8:b7:
         ec:aa:2d:25:99:d1:5a:b9:69:97:d0:61:51:b2:d9:ce:5b:74:
         aa:d1:90:4b:62:70:36:d4:1d:cc:9c:8d:f1:d3:50:90:72:cc:
         88:de:3d:94:9d:df:2b:b8:45:5c:e0:73:9f:95:31:06:14:55:
         c3:f2:1d:db:32:65:7e:88:c3:8b:42:db:1b:04:e8:a2:79:1b:
         e3:4a:c8:92:fb:51:74:19:29:f8:9e:5a:4b:25:c8:ea:b5:c8:
         5e:09:20:a7:4c:4e:4d:1f:8c:e5:09:26:eb:97:e9:82:af:3a:
         ae:bd:c8:8b:de:b6:d0:cf:42:47:0b:ae:67:99:81:ee:9f:38:
         ff:ed:fc:59:47:4d:10:02:31:54:13:6b:4b:12:eb:de:6b:b6:
         2d:02:f5:f6:b1:28:17:50:34:e5:70:64:12:d2:07:8d:ab:45:
         61:52:8f:15:67:65:c5:9c:aa:91:f1:90:cc:fd:70:77:56:a2:
         b7:2d:ff:31:60:e5:7d:e9:e7:52:40:cf:0b:fc:f1:b1:85:c0:
         39:2b:47:51:47:99:d9:7f:18:9f:43:36:3c:53:32:98:f5:45:
         91:ff:a4:05:e3:d6:26:70:d5:8e:b2:d2:86:58:9a:37:8a:77:
         36:53:12:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:11:57 2025 by rpki-client