Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/323830343a316134633a3a2f33332d3333203d3e203631383531.roa
File:                     323830343a316134633a3a2f33332d3333203d3e203631383531.roa (raw, json)
Hash identifier:          wibnSgR+rA3lLG7rjD+xhqMBksqCIs33lpNjHBFXNt4=
Subject key identifier:   AB:6C:45:AF:99:D7:28:C1:97:04:BD:35:11:AF:C9:E4:09:70:F9:8A
Certificate issuer:       /CN=AFA55E041FA0E5D394A1480902275296B12C222A
Certificate serial:       36A336030D15BF2A05D9595371931D32A42C49D0
Authority key identifier: AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/323830343a316134633a3a2f33332d3333203d3e203631383531.roa
Signing time:             Wed 26 Feb 2025 19:36:22 +0000
ROA not before:           Wed 26 Feb 2025 19:31:22 +0000
ROA not after:            Wed 25 Feb 2026 19:36:22 +0000
asID:                     61851
IP address blocks:        2804:1a4c::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:a3:36:03:0d:15:bf:2a:05:d9:59:53:71:93:1d:32:a4:2c:49:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFA55E041FA0E5D394A1480902275296B12C222A
        Validity
            Not Before: Feb 26 19:31:22 2025 GMT
            Not After : Feb 25 19:36:22 2026 GMT
        Subject: CN=AB6C45AF99D728C19704BD3511AFC9E40970F98A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:83:92:1b:68:88:b0:0c:f7:33:9d:3c:15:ef:
                    bd:9c:d8:8a:f3:f1:3b:db:3b:14:2e:dd:28:01:45:
                    5b:fa:19:e9:c5:b6:58:18:e0:62:31:ba:0f:89:34:
                    9d:56:b5:01:84:8c:6c:83:89:6d:6f:4a:b6:ca:23:
                    4e:b2:5d:3b:04:22:1c:ea:58:3b:a0:39:94:1b:73:
                    e9:58:4a:46:bc:fa:c2:9e:5d:ef:ba:8f:5b:33:0f:
                    fe:ce:a2:8f:03:7f:10:3b:b7:5e:e0:47:72:b4:b6:
                    1a:6a:96:99:ea:fa:43:03:cd:30:d6:60:c8:65:2f:
                    42:2e:75:33:71:95:c2:98:79:7e:6f:f3:70:ff:37:
                    e9:3a:17:de:8f:8f:a2:e5:cf:02:a5:97:33:02:fa:
                    17:14:79:b5:62:2e:86:10:43:ef:fa:f9:9a:fc:7f:
                    16:51:57:1b:02:24:79:32:ad:69:07:15:78:16:d4:
                    df:fb:6f:88:7a:2c:f3:4a:6d:09:9f:5f:be:b2:83:
                    91:6b:7a:ab:1e:a3:31:f3:b4:56:2a:c0:15:32:11:
                    59:ff:2e:5e:b4:52:87:b7:3d:36:32:a2:ca:cb:60:
                    f5:7c:9c:25:20:d3:66:1e:9a:bd:1c:23:fa:16:61:
                    a7:01:85:71:b8:5b:6b:6e:7b:07:d8:0f:e4:07:ea:
                    6a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:6C:45:AF:99:D7:28:C1:97:04:BD:35:11:AF:C9:E4:09:70:F9:8A
            X509v3 Authority Key Identifier:
                keyid:AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/AFA55E041FA0E5D394A1480902275296B12C222A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/323830343a316134633a3a2f33332d3333203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a4c::/33

    Signature Algorithm: sha256WithRSAEncryption
         92:fe:1c:ad:4e:22:7b:ff:45:82:af:c8:8f:47:26:11:8a:d4:
         68:7a:c4:74:4e:9c:de:cc:55:ec:4c:2f:7c:ee:8d:93:7a:27:
         5e:d1:12:83:c2:bc:7d:84:2f:76:98:ed:d8:bf:c0:e5:44:ed:
         7d:d7:a3:31:3c:2f:91:7e:26:b9:60:af:f6:19:87:5e:c0:95:
         0c:34:5a:c9:c6:e0:44:21:fd:7c:02:ae:bf:8e:61:f7:83:97:
         06:e3:aa:33:47:ac:22:63:6f:1c:f9:82:96:cf:29:c4:2f:d0:
         f8:78:3a:06:d1:16:f8:bb:89:5c:1e:dd:5a:e6:ae:cd:0d:dc:
         48:92:b7:15:e7:c4:92:65:ec:09:e5:ad:bd:cb:91:f7:ff:0e:
         ae:e5:ee:4e:53:7f:08:0c:a2:42:62:fa:ea:7b:f9:aa:ca:9a:
         9d:ba:47:50:ba:a6:50:bb:bf:31:9c:fb:90:c8:59:47:3a:9c:
         91:67:67:7a:7c:38:7d:fc:92:4d:2e:5a:fd:a3:df:a9:4b:14:
         60:1d:89:f8:01:f8:7d:d1:85:d1:77:73:82:04:4e:76:15:80:
         ed:0a:f9:10:70:5c:47:cd:c4:a2:f5:15:52:95:20:1f:3f:03:
         27:32:db:b1:4e:5f:b9:f1:8e:f1:32:01:60:3a:ce:eb:ab:33:
         71:b9:e1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:00:19 2025 by rpki-client