Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/323830343a6636633a3a2f33322d3438203d3e20323633353835.roa
File:                     323830343a6636633a3a2f33322d3438203d3e20323633353835.roa (raw, json)
Hash identifier:          ZAiTzVT6Smptu3erkc691v254HU7H5BYJHCLhRXfQEU=
Subject key identifier:   C2:31:3B:9A:73:DA:44:6C:12:95:01:04:40:53:D9:EE:59:B2:F3:51
Certificate issuer:       /CN=1D8D631665748A7E3D1B22EAB3E9675F5F6756D0
Certificate serial:       3749D96C8D8AE71B75FD3BDEA7519F77B50E87F5
Authority key identifier: 1D:8D:63:16:65:74:8A:7E:3D:1B:22:EA:B3:E9:67:5F:5F:67:56:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/323830343a6636633a3a2f33322d3438203d3e20323633353835.roa
Signing time:             Thu 06 Mar 2025 20:00:00 +0000
ROA not before:           Thu 06 Mar 2025 19:55:00 +0000
ROA not after:            Fri 06 Mar 2026 20:00:00 +0000
asID:                     263585
IP address blocks:        2804:f6c::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:49:d9:6c:8d:8a:e7:1b:75:fd:3b:de:a7:51:9f:77:b5:0e:87:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D8D631665748A7E3D1B22EAB3E9675F5F6756D0
        Validity
            Not Before: Mar  6 19:55:00 2025 GMT
            Not After : Mar  6 20:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b0:a8:39:65:c4:95:88:90:bf:6f:cc:f2:7f:
                    ff:d4:f0:b8:8d:df:5b:b5:e0:c2:62:94:07:66:5d:
                    60:08:f7:bd:40:2d:b9:49:ca:ac:d9:f3:11:a3:88:
                    72:47:79:ac:d6:54:2b:51:0a:b7:b2:11:e6:2f:1d:
                    80:70:65:18:ba:08:db:41:fd:63:58:a5:fd:21:af:
                    c4:97:2e:c2:ad:00:83:c3:a9:84:5f:1f:d1:c0:a9:
                    d4:50:86:6f:89:39:f7:08:bc:f8:46:4d:58:dd:37:
                    56:42:4c:52:95:32:07:60:95:9e:8d:f1:ec:e6:43:
                    9c:89:3a:51:df:59:44:1c:17:e0:5d:24:13:bb:c6:
                    63:16:44:50:da:74:95:17:79:c7:c5:2d:d9:be:af:
                    a8:3d:54:f1:88:cd:ba:4d:69:cf:ee:90:7b:33:41:
                    76:c6:e9:17:b7:01:a7:0d:f7:1b:43:d3:dc:ea:dd:
                    13:61:d4:ac:1a:d8:56:7c:2d:e8:4d:4c:16:fd:f5:
                    9f:ec:7a:d1:26:8c:1c:52:7f:62:a2:74:5d:57:8f:
                    8e:ac:92:41:1a:f7:f5:d5:03:ed:01:22:5c:0f:1c:
                    8e:c6:bb:bd:d9:24:9a:c1:ee:81:3d:a6:a9:cb:50:
                    38:a3:b2:0f:30:3f:f6:68:6a:ec:13:66:30:c2:c7:
                    25:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:31:3B:9A:73:DA:44:6C:12:95:01:04:40:53:D9:EE:59:B2:F3:51
            X509v3 Authority Key Identifier:
                keyid:1D:8D:63:16:65:74:8A:7E:3D:1B:22:EA:B3:E9:67:5F:5F:67:56:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/323830343a6636633a3a2f33322d3438203d3e20323633353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f6c::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:e0:0c:85:80:1a:c7:4e:bc:31:e9:c4:9b:42:ca:8d:a5:2b:
         0f:52:c9:f8:74:93:8d:f9:d7:60:ab:7a:54:0e:ac:4f:e4:a2:
         ac:27:7a:cf:b0:a2:9c:b8:9f:a7:9d:7d:e7:f8:39:1e:b8:fc:
         bd:33:11:a6:f7:c3:c1:5c:bb:3e:82:a8:02:b2:b9:6d:5e:5f:
         0a:40:95:fa:e7:c1:f6:10:fe:be:6e:24:9c:71:29:dc:e9:1b:
         79:0f:24:f7:07:5d:03:58:2d:e8:19:f9:fc:32:68:06:f6:18:
         6c:13:88:a2:6e:a8:81:04:bc:11:6a:8f:cb:77:2f:7c:40:b1:
         72:c2:d3:62:da:34:63:9b:ca:35:f5:69:65:5b:88:e6:1f:1d:
         5c:06:19:13:f1:d0:46:92:aa:75:6e:72:69:c3:04:ec:5f:0f:
         5c:2f:81:d6:b0:37:cd:73:7d:1e:65:ad:e6:a6:bf:b4:96:34:
         32:f7:7d:b6:fc:7e:f1:bd:54:26:72:7c:6d:e7:d4:91:7b:36:
         b2:60:b5:a4:18:22:ba:39:5c:97:c1:f4:e3:d8:fe:9d:08:d7:
         15:11:36:d3:99:2b:7b:c3:e3:af:80:0e:3b:06:6b:b0:b8:ff:
         44:64:41:b7:e1:bf:40:a4:25:51:f0:78:86:b8:d4:93:ee:8d:
         a3:77:71:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:44:57 2025 by rpki-client