Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8YQeN5kXSJ6iqsVQ4YQCmsJe8181UzYwCJshTtneCpsR/2/323830343a343635633a3a2f33322d3334203d3e20323636393835.roa
File:                     323830343a343635633a3a2f33322d3334203d3e20323636393835.roa (raw, json)
Hash identifier:          NSUTd+jNQlxEWgEHUGBU26ljbt8t1wltALHSyy3OQwM=
Subject key identifier:   C6:99:97:52:92:FF:50:B1:B0:0A:6D:3C:62:19:EE:99:E1:E5:EE:26
Certificate issuer:       /CN=704F7944732F98AD0D651DC0C5B89C092F753A92
Certificate serial:       4854D812EAE964FA2A66D1D40B9959BAA5DBCF21
Authority key identifier: 70:4F:79:44:73:2F:98:AD:0D:65:1D:C0:C5:B8:9C:09:2F:75:3A:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/704F7944732F98AD0D651DC0C5B89C092F753A92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8YQeN5kXSJ6iqsVQ4YQCmsJe8181UzYwCJshTtneCpsR/2/323830343a343635633a3a2f33322d3334203d3e20323636393835.roa
Signing time:             Wed 05 Mar 2025 19:00:09 +0000
ROA not before:           Wed 05 Mar 2025 18:55:09 +0000
ROA not after:            Wed 04 Mar 2026 19:00:09 +0000
asID:                     266985
IP address blocks:        2804:465c::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:54:d8:12:ea:e9:64:fa:2a:66:d1:d4:0b:99:59:ba:a5:db:cf:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=704F7944732F98AD0D651DC0C5B89C092F753A92
        Validity
            Not Before: Mar  5 18:55:09 2025 GMT
            Not After : Mar  4 19:00:09 2026 GMT
        Subject: CN=3082010A0282010100D754669B97ED4F42803AE64E266B3EC5BCAA295F71FEB901E222B83DA77F19522FB9E9AFCE5DF5F833D1EFC0752E387D52617D648D8EB4AA393E8D3CF99CEAAD7630882F454BEFA1987BFDCD0794A11E9901F080937228E8CEB7A979051F7D85C83EFB59850CE71D3D2AF9C48A419122E646531B22337924DF7A4145A23079729E9E13AD23447F6F12492582A7277B3FE1D1D6F2D55509E4F673744052C58F0C10B2374F08148AAB21A30A400B6220B67119722F942721DA0076DA4258741846DE9CF59DB8F8D1E919B36DCEBF44A714C09DEDF41C2C89F7F48EFABC94664A42D17BD73CD89F7D2E56415FC9E110BB652358B9F060C597DAC4B32F270AB933370203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:54:66:9b:97:ed:4f:42:80:3a:e6:4e:26:6b:
                    3e:c5:bc:aa:29:5f:71:fe:b9:01:e2:22:b8:3d:a7:
                    7f:19:52:2f:b9:e9:af:ce:5d:f5:f8:33:d1:ef:c0:
                    75:2e:38:7d:52:61:7d:64:8d:8e:b4:aa:39:3e:8d:
                    3c:f9:9c:ea:ad:76:30:88:2f:45:4b:ef:a1:98:7b:
                    fd:cd:07:94:a1:1e:99:01:f0:80:93:72:28:e8:ce:
                    b7:a9:79:05:1f:7d:85:c8:3e:fb:59:85:0c:e7:1d:
                    3d:2a:f9:c4:8a:41:91:22:e6:46:53:1b:22:33:79:
                    24:df:7a:41:45:a2:30:79:72:9e:9e:13:ad:23:44:
                    7f:6f:12:49:25:82:a7:27:7b:3f:e1:d1:d6:f2:d5:
                    55:09:e4:f6:73:74:40:52:c5:8f:0c:10:b2:37:4f:
                    08:14:8a:ab:21:a3:0a:40:0b:62:20:b6:71:19:72:
                    2f:94:27:21:da:00:76:da:42:58:74:18:46:de:9c:
                    f5:9d:b8:f8:d1:e9:19:b3:6d:ce:bf:44:a7:14:c0:
                    9d:ed:f4:1c:2c:89:f7:f4:8e:fa:bc:94:66:4a:42:
                    d1:7b:d7:3c:d8:9f:7d:2e:56:41:5f:c9:e1:10:bb:
                    65:23:58:b9:f0:60:c5:97:da:c4:b3:2f:27:0a:b9:
                    33:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:99:97:52:92:FF:50:B1:B0:0A:6D:3C:62:19:EE:99:E1:E5:EE:26
            X509v3 Authority Key Identifier:
                keyid:70:4F:79:44:73:2F:98:AD:0D:65:1D:C0:C5:B8:9C:09:2F:75:3A:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8YQeN5kXSJ6iqsVQ4YQCmsJe8181UzYwCJshTtneCpsR/2/704F7944732F98AD0D651DC0C5B89C092F753A92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/704F7944732F98AD0D651DC0C5B89C092F753A92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YQeN5kXSJ6iqsVQ4YQCmsJe8181UzYwCJshTtneCpsR/2/323830343a343635633a3a2f33322d3334203d3e20323636393835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:465c::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:62:20:00:bd:bc:9b:a6:c8:bb:9f:03:21:51:ad:ae:d1:7f:
         f7:cc:d3:79:d3:49:bd:4a:0a:2f:db:c6:a8:85:28:00:1f:2b:
         ac:a2:b2:34:bf:53:27:8a:94:a4:9e:4d:07:a8:86:d4:d5:95:
         91:65:01:2a:fc:93:89:2a:46:2f:8e:94:95:42:95:a7:4b:35:
         8f:06:f3:d6:f0:19:49:23:fb:a0:5d:94:ad:b0:d5:3f:34:4f:
         ea:25:60:d2:e0:eb:8c:3c:46:34:b3:da:24:8e:3d:4e:a6:d9:
         b4:37:59:fd:d1:fd:75:ca:03:34:7c:eb:e1:63:56:59:37:99:
         63:a5:f3:69:91:ac:37:05:e4:5d:ba:46:e1:ff:bc:cd:29:86:
         4d:1b:cf:56:b1:57:48:bb:6d:e9:7c:79:ba:83:42:91:44:e5:
         35:d5:51:b7:da:27:19:68:90:f1:66:15:cb:ff:92:5b:af:3f:
         c5:40:92:d2:a2:75:f7:fe:05:ab:de:e1:65:93:d4:a6:e9:6b:
         2e:76:05:fa:bc:b1:b7:7d:92:9f:e6:45:05:fb:06:9e:2a:25:
         3c:60:c4:cd:84:48:1c:58:8f:83:b7:e0:c7:1e:c4:30:11:25:
         33:f6:be:46:83:a5:6b:74:9a:bc:59:f9:7e:13:a5:53:55:ec:
         ec:85:28:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:39:08 2025 by rpki-client