Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8v9o4vDKFhy4Px3hw3PCFiSzsntpe2nWsGp725EnBvg5/2/323830343a366164633a3a2f33322d313238203d3e20323730333632.roa
File:                     323830343a366164633a3a2f33322d313238203d3e20323730333632.roa (raw, json)
Hash identifier:          upt5TT8FOe5QeiqNDsn3IDhYY1D4DQPiIPI86XKa+co=
Subject key identifier:   ED:EB:04:3D:25:2F:8B:2E:E5:BC:B1:39:9A:0A:0E:17:11:E1:92:52
Certificate issuer:       /CN=1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD
Certificate serial:       696049A42AE1CF3CEDE152F39282AE3A51EF8C6D
Authority key identifier: 1B:10:04:FC:54:CD:C4:0D:C5:66:7B:1D:6B:18:3C:CE:A2:DA:4F:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8v9o4vDKFhy4Px3hw3PCFiSzsntpe2nWsGp725EnBvg5/2/323830343a366164633a3a2f33322d313238203d3e20323730333632.roa
Signing time:             Wed 05 Mar 2025 20:02:35 +0000
ROA not before:           Wed 05 Mar 2025 19:57:35 +0000
ROA not after:            Wed 04 Mar 2026 20:02:35 +0000
asID:                     270362
IP address blocks:        2804:6adc::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:60:49:a4:2a:e1:cf:3c:ed:e1:52:f3:92:82:ae:3a:51:ef:8c:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD
        Validity
            Not Before: Mar  5 19:57:35 2025 GMT
            Not After : Mar  4 20:02:35 2026 GMT
        Subject: CN=EDEB043D252F8B2EE5BCB1399A0A0E1711E19252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5a:42:3b:b6:71:6d:00:0d:00:ce:1e:b9:e2:
                    08:ec:ab:86:4e:80:7c:8f:92:d3:66:e3:d5:bf:76:
                    a4:50:20:7e:c0:6e:e5:53:ed:3e:f0:f1:79:d5:94:
                    15:ab:e6:5f:da:72:bc:a7:16:07:90:74:16:4b:77:
                    d0:a6:4a:56:2f:85:24:4b:b7:25:eb:d4:65:7d:6b:
                    01:55:7f:63:8b:b2:b5:7d:97:44:3b:df:5e:6b:0e:
                    cd:a9:ef:f7:4d:10:a3:85:8f:e9:5f:f8:85:b3:92:
                    6f:eb:85:b6:2b:1b:cd:c6:e2:ee:c2:8d:ad:3f:62:
                    92:0d:5f:4a:ab:a0:56:c4:28:ea:94:e0:67:99:35:
                    21:dc:65:b2:c5:3c:a8:ff:13:07:f2:28:8f:6f:3e:
                    e2:b0:ac:7d:81:c3:d8:c7:68:75:2b:fb:bf:c4:83:
                    fb:84:1a:a1:c1:6f:af:d1:dc:19:9f:be:f5:0d:12:
                    30:dc:ba:ee:cc:2d:c6:14:00:81:14:09:96:80:bf:
                    d1:98:d8:cf:b0:a2:a0:4c:2b:e4:54:a4:50:41:82:
                    22:23:83:0d:2d:31:e7:32:ce:4e:b2:9d:ab:8b:25:
                    08:9f:99:b1:3f:f9:e1:09:5a:e1:a4:c6:43:51:8a:
                    bb:56:96:8d:a9:50:4a:dc:93:f3:1b:ee:32:6b:5d:
                    7a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:EB:04:3D:25:2F:8B:2E:E5:BC:B1:39:9A:0A:0E:17:11:E1:92:52
            X509v3 Authority Key Identifier:
                keyid:1B:10:04:FC:54:CD:C4:0D:C5:66:7B:1D:6B:18:3C:CE:A2:DA:4F:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8v9o4vDKFhy4Px3hw3PCFiSzsntpe2nWsGp725EnBvg5/2/1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8v9o4vDKFhy4Px3hw3PCFiSzsntpe2nWsGp725EnBvg5/2/323830343a366164633a3a2f33322d313238203d3e20323730333632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6adc::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:5d:d8:59:db:c5:3f:82:34:4d:25:48:05:84:f6:6c:2d:0b:
         da:ff:96:dd:1d:5d:c7:53:3c:55:e7:a8:77:de:44:72:73:5e:
         e6:fe:c6:7c:fb:7b:a5:09:fe:31:2b:b9:db:c5:3a:57:7f:6d:
         db:45:07:1b:5b:bd:54:d6:56:74:18:a0:6a:18:6e:6e:ce:5c:
         00:c8:93:60:80:14:27:9a:6f:55:34:1d:6d:a2:ee:b0:fa:e6:
         8e:ea:5e:db:96:ec:17:c6:72:3a:de:22:80:cc:67:03:3e:f2:
         0f:9b:6f:91:c8:c0:74:fc:b6:29:dd:0c:ce:ba:a7:a0:c4:df:
         4b:a7:f3:ae:c3:ba:34:39:74:ba:8a:b5:9a:40:9d:40:bb:b1:
         47:f1:80:25:ca:88:80:40:22:16:c3:a0:82:d6:56:d9:db:0b:
         e5:4f:6c:54:e5:e0:08:23:89:b0:c5:15:a4:4c:6f:1e:fe:93:
         49:6e:c4:65:45:ab:6a:da:51:61:ce:b6:eb:74:7b:0d:6b:c1:
         e1:61:2a:10:45:a3:38:b3:f3:73:d5:38:69:c7:dd:90:36:ab:
         1b:9e:23:8e:c7:96:2e:c4:ba:ea:2a:c3:5b:6b:a4:21:02:2b:
         cb:f4:c2:c7:f0:58:14:18:c3:c9:5b:ba:db:66:c3:c9:63:cb:
         01:2b:6e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:07:46 2025 by rpki-client