Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8xZCkddoSb3sQAmuGqUxZjW9d9hKaRYnoKqXvN5WR77/0/323830343a393066383a3a2f33322d3336203d3e20323734363130.roa
File:                     323830343a393066383a3a2f33322d3336203d3e20323734363130.roa (raw, json)
Hash identifier:          h07S7fUxtjOOU447CH8OwD4P2WlX3tWoUNoFbQJlBCs=
Subject key identifier:   C5:A2:72:00:22:B9:73:EF:A9:AE:C8:82:6C:D4:6F:5B:96:DF:8E:39
Certificate issuer:       /CN=C51FD21C8D535F269191EF0B5FCF7D24E7C1517C
Certificate serial:       1C35C88B5204C0D0C9A0453BE92186DA9225D9EB
Authority key identifier: C5:1F:D2:1C:8D:53:5F:26:91:91:EF:0B:5F:CF:7D:24:E7:C1:51:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C51FD21C8D535F269191EF0B5FCF7D24E7C1517C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8xZCkddoSb3sQAmuGqUxZjW9d9hKaRYnoKqXvN5WR77/0/323830343a393066383a3a2f33322d3336203d3e20323734363130.roa
Signing time:             Wed 27 Nov 2024 15:54:50 +0000
ROA not before:           Wed 27 Nov 2024 15:49:50 +0000
ROA not after:            Wed 26 Nov 2025 15:54:50 +0000
asID:                     274610
IP address blocks:        2804:90f8::/32 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:35:c8:8b:52:04:c0:d0:c9:a0:45:3b:e9:21:86:da:92:25:d9:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C51FD21C8D535F269191EF0B5FCF7D24E7C1517C
        Validity
            Not Before: Nov 27 15:49:50 2024 GMT
            Not After : Nov 26 15:54:50 2025 GMT
        Subject: CN=C5A2720022B973EFA9AEC8826CD46F5B96DF8E39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:dd:d1:2c:43:ff:05:0d:c9:9d:3f:1a:69:3c:
                    79:5c:b6:23:d9:10:0e:4f:ec:d6:8d:fb:17:34:05:
                    c1:04:12:3d:46:ad:27:44:f1:05:cc:68:43:cf:86:
                    94:4a:d7:61:42:64:8a:16:3c:58:a0:26:d7:9b:fd:
                    53:9f:53:7c:df:13:a0:0d:6b:21:45:4e:f3:a0:87:
                    7b:30:ca:6c:3c:15:4c:3f:c7:65:88:56:9c:fb:e1:
                    b2:a4:1b:3b:93:42:c9:ec:1a:ed:10:2f:c4:59:da:
                    3a:19:62:19:c1:c2:11:81:8b:14:01:6d:46:3c:8e:
                    4c:48:09:b3:e8:38:e1:fe:05:d1:bf:ae:0b:6f:72:
                    22:5a:47:4d:71:b2:5a:b0:ba:89:02:12:b4:0c:57:
                    f5:a8:dd:e7:c3:b2:df:97:02:01:1d:8e:76:c3:fe:
                    d0:ec:21:aa:2d:cf:d1:9c:fb:1a:cf:48:69:03:28:
                    c8:d2:29:a9:51:f7:9c:e2:fb:d3:cc:c6:a4:08:b3:
                    60:69:3c:3f:d6:b1:61:3b:ec:98:de:b5:42:25:27:
                    83:e3:8f:42:3f:38:e4:9d:72:3e:b9:60:9d:f5:e7:
                    41:c3:82:b2:22:9b:ec:29:85:05:9b:25:78:90:26:
                    64:07:7d:3d:b4:14:f8:bc:65:b8:44:b3:0c:5c:9d:
                    b9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A2:72:00:22:B9:73:EF:A9:AE:C8:82:6C:D4:6F:5B:96:DF:8E:39
            X509v3 Authority Key Identifier:
                keyid:C5:1F:D2:1C:8D:53:5F:26:91:91:EF:0B:5F:CF:7D:24:E7:C1:51:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8xZCkddoSb3sQAmuGqUxZjW9d9hKaRYnoKqXvN5WR77/0/C51FD21C8D535F269191EF0B5FCF7D24E7C1517C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C51FD21C8D535F269191EF0B5FCF7D24E7C1517C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8xZCkddoSb3sQAmuGqUxZjW9d9hKaRYnoKqXvN5WR77/0/323830343a393066383a3a2f33322d3336203d3e20323734363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:90f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:d4:59:e8:38:ee:22:33:60:cc:fa:85:a1:5e:ec:0a:df:2d:
         5b:84:52:bd:14:50:23:c0:26:2b:30:0c:08:33:ee:95:85:65:
         f6:4a:98:76:29:8d:8d:e9:15:b7:e2:5a:43:ab:98:ca:8c:2c:
         a4:01:6e:13:71:f2:e2:e7:e4:70:a7:8a:45:6f:a0:86:e8:87:
         29:56:ab:a4:c3:b9:db:e9:1a:de:66:8b:9f:55:72:88:ec:12:
         0f:64:b6:1f:8f:36:bb:bd:8e:6f:fa:af:f4:8f:ce:e4:bc:98:
         ab:7e:47:e6:6b:2c:64:a2:2e:64:62:2f:04:e3:0d:f3:d3:6e:
         5d:ce:7b:4f:03:81:32:2d:94:cb:ae:d6:4f:16:ec:20:38:64:
         cf:5f:e4:bd:96:83:ca:ac:f6:a1:85:73:ec:29:38:e7:02:03:
         aa:16:49:8f:b4:4a:5f:38:2c:81:59:52:0b:98:31:4b:7c:e2:
         a3:94:01:de:86:4e:b8:c3:75:29:d3:cb:c0:9c:ea:10:aa:fe:
         35:ce:f9:64:b6:0d:c3:5c:db:0a:f1:b5:ad:9c:ef:e6:53:b0:
         9b:b5:67:c9:23:11:5d:79:fd:c1:cb:8b:80:07:68:a7:ec:7e:
         7d:0c:85:c2:3f:90:b6:96:9c:a5:22:c2:69:ef:75:e6:81:06:
         80:09:6f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:06:34 2025 by rpki-client