Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/323830343a303a356330303a3a2f34382d3438203d3e2032373136.roa
File:                     323830343a303a356330303a3a2f34382d3438203d3e2032373136.roa (raw, json)
Hash identifier:          Y8ZqiKLq/QrbVGjZfixOnl0uXgdk24GfKPmgZf9vmPU=
Subject key identifier:   F8:B7:37:F9:57:68:2F:93:AC:EB:F9:8E:B2:91:FC:E6:E8:D0:F6:87
Certificate issuer:       /CN=D54C376960A26972A0B767BDA084048DFFE3673E
Certificate serial:       2612C00CC49121D900F9372AD4C75ECE0D867FF2
Authority key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/323830343a303a356330303a3a2f34382d3438203d3e2032373136.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     2716
IP address blocks:        2804:0:5c00::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:12:c0:0c:c4:91:21:d9:00:f9:37:2a:d4:c7:5e:ce:0d:86:7f:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54C376960A26972A0B767BDA084048DFFE3673E
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:cf:9e:de:6d:c7:02:43:77:b2:d5:43:1b:50:
                    2c:35:88:98:ef:ff:7b:88:33:3c:5a:4e:69:c6:0b:
                    dd:07:b0:63:fe:72:72:53:b2:ac:cb:48:cf:fd:64:
                    62:0c:8e:ff:44:53:b3:a9:07:bc:74:84:5a:c3:e3:
                    2b:cc:e6:40:4d:c7:86:c5:d3:dd:9d:94:f2:76:1d:
                    88:84:c6:33:aa:b9:9f:ab:e5:f5:ab:a9:4e:50:85:
                    cb:81:b5:33:c1:98:79:d9:a0:1b:83:6e:f6:58:3b:
                    8a:68:4e:60:68:33:83:6e:59:85:aa:16:97:5b:aa:
                    ab:d7:bb:e4:3a:06:f7:65:bc:e8:aa:d6:7d:88:e2:
                    a3:7c:10:4e:5e:8d:98:2e:5c:79:3d:57:b3:cc:fc:
                    7c:86:1a:53:30:6d:9c:6c:ab:58:72:0d:36:95:42:
                    f2:a4:24:54:80:99:6b:11:31:86:4f:7a:e7:6f:39:
                    d3:1c:68:c0:79:5e:45:10:11:95:e4:2e:63:0d:e9:
                    db:4b:00:32:2c:af:46:20:4d:3d:4d:09:ab:79:c1:
                    ff:e7:11:6f:90:3f:0f:9f:44:d4:04:c1:ce:ef:32:
                    48:16:d7:95:16:89:33:c2:b8:9e:ee:8c:a0:d8:63:
                    99:2b:a0:a8:ab:48:f2:45:3f:9c:8a:41:5a:7f:a3:
                    0a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B7:37:F9:57:68:2F:93:AC:EB:F9:8E:B2:91:FC:E6:E8:D0:F6:87
            X509v3 Authority Key Identifier:
                keyid:D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/323830343a303a356330303a3a2f34382d3438203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:0:5c00::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:b4:b1:2f:32:4d:18:a4:00:92:9c:74:32:df:41:50:e6:37:
         bb:15:c9:86:8b:1b:b6:d2:13:e3:ca:9a:96:ad:b3:e9:4a:3b:
         84:e5:34:12:1c:5e:3c:f2:cd:a1:66:b2:3a:a7:3c:cf:b3:7f:
         46:d9:78:7d:5d:d8:13:bd:c0:4b:88:ca:fa:62:d4:a1:20:a2:
         cc:96:10:5c:be:39:07:fb:26:e4:4f:e4:37:2e:22:26:80:03:
         36:82:82:c7:98:e0:ed:59:3a:56:91:e8:47:30:ed:83:ee:f1:
         c4:f2:f4:23:fa:14:18:50:a7:5d:48:ce:84:c2:08:ce:d9:d7:
         1a:cc:dd:aa:46:0e:50:c1:fd:a5:a5:30:e9:77:f2:e7:ef:d7:
         be:ce:56:f7:78:75:02:42:f3:56:a3:84:82:fa:c3:2b:ee:47:
         4f:f9:9b:2d:52:74:c8:d9:f4:4c:cb:6e:9d:fd:78:aa:da:28:
         90:2c:6e:78:5f:af:d2:07:a4:fa:17:78:5b:ab:9a:46:a2:32:
         c6:ab:53:25:a6:a3:46:92:26:a0:ee:b4:eb:bf:ba:80:6b:cb:
         64:9b:3b:0e:da:92:4d:1c:46:e3:86:57:26:dc:8f:f7:ee:08:
         d3:ef:e0:0c:ac:47:df:7d:0a:58:1a:4c:91:8a:ea:e3:fd:a2:
         9b:d2:60:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:55:26 2025 by rpki-client