Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a3a2f33322d3332203d3e20323639303234.roa
File:                     323830343a356534633a3a2f33322d3332203d3e20323639303234.roa (raw, json)
Hash identifier:          GpXWwKgvdW4PW5quYm0y0y03OwWgSjcupgwstMKQCJM=
Subject key identifier:   EA:0C:4B:1D:29:80:77:BC:D7:A8:D3:68:41:41:A2:B2:D2:C7:1C:3D
Certificate issuer:       /CN=0D6BBDFF03C5B7F2CFFAAA5624D6A8B3A65F3032
Certificate serial:       427965A718E47104297AEBF89062F141733EA4A9
Authority key identifier: 0D:6B:BD:FF:03:C5:B7:F2:CF:FA:AA:56:24:D6:A8:B3:A6:5F:30:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6BBDFF03C5B7F2CFFAAA5624D6A8B3A65F3032.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a3a2f33322d3332203d3e20323639303234.roa
Signing time:             Wed 30 Apr 2025 18:19:16 +0000
ROA not before:           Wed 30 Apr 2025 18:14:16 +0000
ROA not after:            Wed 29 Apr 2026 18:19:16 +0000
asID:                     269024
IP address blocks:        2804:5e4c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:79:65:a7:18:e4:71:04:29:7a:eb:f8:90:62:f1:41:73:3e:a4:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D6BBDFF03C5B7F2CFFAAA5624D6A8B3A65F3032
        Validity
            Not Before: Apr 30 18:14:16 2025 GMT
            Not After : Apr 29 18:19:16 2026 GMT
        Subject: CN=EA0C4B1D298077BCD7A8D3684141A2B2D2C71C3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:49:c1:d4:82:63:4b:5a:0c:cb:57:e6:c8:f6:
                    b0:b8:e7:97:2e:b8:bb:46:f5:57:d5:f1:33:f9:bb:
                    ca:f6:09:78:c4:56:f1:6a:fb:8e:fb:a7:c8:64:d0:
                    52:f5:8d:da:7c:a8:43:1d:b2:a5:db:cc:48:f3:de:
                    d2:98:45:6a:25:79:21:70:29:74:0c:a2:45:46:a6:
                    2c:07:7e:ea:86:ac:03:0a:f7:67:d7:35:f5:32:7a:
                    60:dd:5c:b9:6d:02:94:e5:ed:f9:8f:be:4b:ae:df:
                    f5:1d:54:55:df:c6:3f:fc:fb:e1:8d:55:e3:f9:3b:
                    d3:0d:61:fb:e0:2b:82:62:85:0a:fc:3d:a3:ce:4f:
                    25:86:1f:d1:33:6a:7b:a4:3a:0b:39:a8:d3:b0:de:
                    d7:a1:ae:87:35:74:8c:44:7e:f5:96:d9:c5:a4:69:
                    61:ac:b5:46:0b:dd:f7:ea:37:df:38:09:b6:c9:1c:
                    be:b0:12:25:e7:16:5f:2d:07:ad:71:ec:0d:94:ae:
                    aa:57:76:8c:34:5b:db:05:39:2d:95:d4:70:08:ee:
                    d4:dc:3a:ab:f0:8a:0a:14:89:79:47:55:ce:25:78:
                    8b:38:b3:92:2c:06:54:31:e9:66:b7:85:95:57:76:
                    3d:ed:62:54:8e:9f:3d:9b:e7:1b:da:6f:cd:e2:c3:
                    64:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:0C:4B:1D:29:80:77:BC:D7:A8:D3:68:41:41:A2:B2:D2:C7:1C:3D
            X509v3 Authority Key Identifier:
                keyid:0D:6B:BD:FF:03:C5:B7:F2:CF:FA:AA:56:24:D6:A8:B3:A6:5F:30:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/0D6BBDFF03C5B7F2CFFAAA5624D6A8B3A65F3032.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6BBDFF03C5B7F2CFFAAA5624D6A8B3A65F3032.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a3a2f33322d3332203d3e20323639303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:36:5c:41:a1:b9:52:b2:37:d8:01:4b:b2:cc:03:45:83:8a:
         2e:d8:ca:0e:40:78:29:52:4e:da:c6:80:3d:05:78:56:aa:44:
         0b:dd:39:ed:bf:c5:70:93:de:4c:63:c2:18:65:00:84:f7:af:
         9a:b3:12:16:d2:10:41:f3:c9:7c:fc:95:cf:1d:2e:d8:7d:ac:
         12:d1:4e:fa:be:25:f0:d6:6a:1c:a8:9c:de:54:83:1e:e2:18:
         f4:8d:e2:7a:f8:83:e8:d8:f5:c7:fe:9c:12:73:b0:a1:17:f1:
         fb:bf:29:0a:85:2f:f4:9a:b0:60:db:f6:1d:6d:b5:a3:13:76:
         e5:f5:01:23:0d:5f:71:5c:48:e0:29:52:5f:c1:4f:63:77:ec:
         dd:37:1f:b3:f4:52:c0:a4:9c:4c:bd:b8:0e:d3:d9:19:c5:5b:
         f6:77:56:09:fe:5e:bd:d2:3f:82:3e:08:ab:e8:7d:33:42:6b:
         69:d7:3f:fa:a3:bb:83:85:90:d0:a4:d3:b9:a1:da:10:bf:9c:
         e4:85:af:4a:6f:d0:78:3d:db:d0:9e:bc:c3:57:57:3b:df:76:
         fe:5e:4e:59:d8:b1:cf:0a:d6:2d:6a:93:b6:11:26:d8:96:01:
         eb:c6:9a:69:34:73:4e:3c:d8:ff:8a:58:d1:c8:46:00:f0:f5:
         0c:55:b3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 12:49:14 2025 by rpki-client