Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/323830343a333164633a343030303a3a2f33342d3334203d3e20323635303431.roa
File:                     323830343a333164633a343030303a3a2f33342d3334203d3e20323635303431.roa (raw, json)
Hash identifier:          Kz2zFv9ooWsuy4m+N+BLsjovksV5M/8CuNe6I7b+2gg=
Subject key identifier:   DC:A9:6D:75:01:65:86:D1:21:53:2C:44:B5:43:F6:D2:A2:0A:A1:23
Certificate issuer:       /CN=A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF
Certificate serial:       76B6B3C542E9A91E4825D2F58CECE75447272C31
Authority key identifier: A7:BC:3B:DB:C2:87:71:E2:3B:6A:3A:F8:FB:D3:66:4A:C4:C0:EC:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/323830343a333164633a343030303a3a2f33342d3334203d3e20323635303431.roa
Signing time:             Thu 06 Mar 2025 16:52:48 +0000
ROA not before:           Thu 06 Mar 2025 16:47:48 +0000
ROA not after:            Thu 05 Mar 2026 16:52:48 +0000
asID:                     265041
IP address blocks:        2804:31dc:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:b6:b3:c5:42:e9:a9:1e:48:25:d2:f5:8c:ec:e7:54:47:27:2c:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF
        Validity
            Not Before: Mar  6 16:47:48 2025 GMT
            Not After : Mar  5 16:52:48 2026 GMT
        Subject: CN=DCA96D75016586D121532C44B543F6D2A20AA123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ae:3e:6e:cf:9e:f8:f7:37:97:8d:ca:e3:06:
                    df:e4:0b:1a:a9:16:20:4d:33:1b:8b:c4:8b:66:7d:
                    c7:19:f3:fa:29:d0:7e:8f:cc:24:6c:a6:a4:31:e4:
                    57:67:28:03:fe:71:e9:3f:20:f3:a1:dc:84:33:88:
                    76:18:a6:b0:1a:38:d1:40:30:c7:e4:a4:f8:3c:fe:
                    16:15:dd:d1:ed:e1:49:0f:1e:db:12:40:52:a9:50:
                    ba:4f:ba:8f:cd:a8:d0:63:37:80:40:e3:54:4d:04:
                    44:47:42:48:12:b4:03:7c:8d:85:67:af:6a:3f:a6:
                    0b:46:e8:11:dc:9c:88:91:00:3b:de:bc:4d:25:ff:
                    1c:1d:6c:c0:44:1a:b6:01:d4:94:20:dd:8f:74:14:
                    98:3b:6f:d8:5c:66:da:9b:67:c0:90:ad:7c:5d:e8:
                    66:de:ea:54:68:3f:b0:b4:a4:67:be:da:2f:fe:05:
                    db:5d:f8:36:a3:c4:3c:64:02:4d:20:dd:85:a0:3e:
                    af:a8:f5:45:f3:05:1d:0b:a3:77:3b:cf:ea:57:22:
                    44:a4:cd:82:22:d4:02:bf:31:1c:e8:67:9c:14:61:
                    1c:87:7e:ca:9b:a9:ad:b3:f4:8b:6b:fd:8d:06:41:
                    6b:ca:42:92:37:ca:5a:89:b3:6b:61:60:74:6f:90:
                    b2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:A9:6D:75:01:65:86:D1:21:53:2C:44:B5:43:F6:D2:A2:0A:A1:23
            X509v3 Authority Key Identifier:
                keyid:A7:BC:3B:DB:C2:87:71:E2:3B:6A:3A:F8:FB:D3:66:4A:C4:C0:EC:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/323830343a333164633a343030303a3a2f33342d3334203d3e20323635303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:31dc:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         17:a5:8c:7a:c5:c8:a7:ad:4f:b3:21:a2:19:43:6e:7e:56:3a:
         d9:57:3e:3d:b6:32:db:f6:65:d5:b0:63:91:44:44:40:3d:ba:
         3c:f3:4d:d5:ad:d4:57:c5:e7:3d:ec:73:dc:b9:bf:51:91:15:
         76:be:5d:c9:40:95:9d:08:ef:eb:3b:e7:f4:71:e6:d7:46:6c:
         a6:0f:16:98:de:c7:71:5a:c9:1b:c3:c4:8a:5f:7f:da:b6:80:
         2b:32:bd:c2:1a:44:f0:38:3a:00:6e:e5:f5:0e:f2:fe:8e:38:
         49:7b:fb:cd:54:36:79:63:bb:19:bb:54:09:b8:1c:17:38:f6:
         42:7b:1d:a7:22:fa:55:f9:02:67:3c:e5:bc:23:5f:66:d3:57:
         59:a8:bf:e0:81:6a:32:c2:85:66:a8:ac:7d:2b:4c:20:30:76:
         fb:28:c3:f2:b3:ab:1b:76:02:88:78:10:0d:16:1c:50:eb:ad:
         e6:79:a0:ab:d8:78:1f:f7:cd:1c:d0:31:89:cb:18:e5:0a:2b:
         25:fa:3e:80:5d:c5:37:f1:06:ac:24:d7:4d:f6:b5:7c:ea:f8:
         10:f8:8d:d9:f8:4a:92:eb:db:71:cc:75:58:d5:33:20:b7:22:
         7b:e8:1b:ee:fa:1e:4b:b8:dc:26:df:af:0e:a2:6f:7c:38:3a:
         1c:e4:46:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:13:42 2025 by rpki-client