Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/323830343a376238383a3a2f33322d313238203d3e20323731343337.roa
File:                     323830343a376238383a3a2f33322d313238203d3e20323731343337.roa (raw, json)
Hash identifier:          DLWfmkSr6sH6JeKP4UYhWmJkIeQZOxl0eczKcWJFqkw=
Subject key identifier:   A4:90:8B:96:14:3D:2C:30:13:BE:F8:92:52:F4:03:90:B2:5C:96:32
Certificate issuer:       /CN=038BE8318FD3D7C7FB94CE07A5A03B4AA15CCC6C
Certificate serial:       709DD7418A03A19946AB5E8B15714042A5CB4E78
Authority key identifier: 03:8B:E8:31:8F:D3:D7:C7:FB:94:CE:07:A5:A0:3B:4A:A1:5C:CC:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/038BE8318FD3D7C7FB94CE07A5A03B4AA15CCC6C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/323830343a376238383a3a2f33322d313238203d3e20323731343337.roa
Signing time:             Thu 20 Feb 2025 18:16:03 +0000
ROA not before:           Thu 20 Feb 2025 18:11:03 +0000
ROA not after:            Thu 19 Feb 2026 18:16:03 +0000
asID:                     271437
IP address blocks:        2804:7b88::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:9d:d7:41:8a:03:a1:99:46:ab:5e:8b:15:71:40:42:a5:cb:4e:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=038BE8318FD3D7C7FB94CE07A5A03B4AA15CCC6C
        Validity
            Not Before: Feb 20 18:11:03 2025 GMT
            Not After : Feb 19 18:16:03 2026 GMT
        Subject: CN=A4908B96143D2C3013BEF89252F40390B25C9632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:19:93:ce:b2:60:53:8d:cc:20:c1:7b:db:87:
                    ba:b7:95:42:34:b9:92:b1:3f:6d:6d:9b:c8:41:d4:
                    6f:e2:cb:58:7f:0f:2d:bf:9b:8c:2d:19:20:35:32:
                    cd:89:8d:b2:66:e6:ef:d3:f3:7b:a8:81:ff:4a:98:
                    22:b3:64:0f:b1:ba:d2:7b:40:b4:c2:7d:f3:91:8e:
                    ff:b1:1d:ab:82:27:ac:d2:1e:c6:83:4a:1f:08:95:
                    2d:63:79:db:68:4a:5c:82:14:07:a0:5a:e5:98:25:
                    bd:1b:18:29:2c:06:95:5e:d0:ff:0f:c7:8b:63:6e:
                    f8:94:92:f8:b5:e3:18:7e:ac:d9:dd:a2:01:85:82:
                    e9:57:ae:e8:12:3b:89:60:75:b7:e7:33:22:e0:39:
                    1b:03:d1:bc:48:9c:42:47:ae:ac:b4:0e:37:e8:63:
                    2a:c6:9e:f1:9a:bf:60:eb:bc:e1:9a:09:c3:41:44:
                    79:45:2b:b2:a5:27:a8:dd:52:08:4d:62:2d:7e:b8:
                    1b:d5:84:e4:f3:9b:58:8c:34:4e:25:94:d2:41:70:
                    bc:c3:16:72:1d:31:e5:72:20:8d:07:14:1e:a3:fa:
                    8b:1d:ba:b4:f7:c6:13:b8:a2:15:2b:f0:82:63:3f:
                    37:fe:6d:a8:70:53:e1:e8:79:9a:de:48:9a:10:ad:
                    49:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:90:8B:96:14:3D:2C:30:13:BE:F8:92:52:F4:03:90:B2:5C:96:32
            X509v3 Authority Key Identifier:
                keyid:03:8B:E8:31:8F:D3:D7:C7:FB:94:CE:07:A5:A0:3B:4A:A1:5C:CC:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/038BE8318FD3D7C7FB94CE07A5A03B4AA15CCC6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/038BE8318FD3D7C7FB94CE07A5A03B4AA15CCC6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/323830343a376238383a3a2f33322d313238203d3e20323731343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b88::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:e6:02:dd:c6:da:4f:bf:4e:c1:29:12:ec:b6:75:68:07:d3:
         34:02:78:72:01:30:24:9e:3b:fd:ae:ef:fa:b5:15:a6:ce:d8:
         79:d3:e8:ee:b4:c0:e9:11:20:77:a0:3a:93:5c:36:bf:3f:7f:
         ae:8a:d0:75:b2:42:aa:18:c7:e0:ab:94:b0:f4:4e:93:a5:f3:
         c4:35:b9:d9:c8:d6:41:5f:49:ea:6f:a8:0a:14:c0:ee:7d:45:
         9b:02:03:b1:67:08:8b:18:e4:cd:29:b4:34:69:19:b8:05:61:
         2f:2f:41:cc:ee:a1:3b:aa:dd:ba:8a:2d:d2:93:8c:9a:a4:bb:
         5b:30:5e:62:79:c3:43:f0:79:56:83:94:40:9c:d9:8f:ba:90:
         db:14:a7:92:f7:37:93:7c:54:88:ae:ec:3e:17:5c:63:02:7a:
         e7:ec:1f:39:e1:92:4c:eb:c6:e0:7d:0a:73:37:00:a9:32:fc:
         39:9b:3e:72:6c:42:4b:29:34:c6:52:92:bc:af:f9:ee:a5:66:
         37:c3:17:b2:95:19:ac:c3:2e:27:49:9e:2b:aa:8b:50:47:c1:
         26:95:66:a5:5e:1d:80:4c:bf:50:6c:31:68:91:6d:9d:19:20:
         c2:13:b8:be:07:42:96:7a:ae:2e:94:43:21:be:ff:19:4d:58:
         75:8c:53:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:53:20 2025 by rpki-client