Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/323830343a3536633a313130303a3a2f34302d3430203d3e203238323130.roa
File:                     323830343a3536633a313130303a3a2f34302d3430203d3e203238323130.roa (raw, json)
Hash identifier:          B1fGM6SIfBYV8lj0FmSPXq5MVF7K2P76I9ZdPYOzshw=
Subject key identifier:   44:C4:AD:BA:6D:08:6E:70:7D:26:DD:81:FC:35:F5:74:7F:1A:57:7C
Certificate issuer:       /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial:       72A7EA4A4C3368D1A007078BAF19536FDD16A35D
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/323830343a3536633a313130303a3a2f34302d3430203d3e203238323130.roa
Signing time:             Thu 06 Mar 2025 04:42:08 +0000
ROA not before:           Thu 06 Mar 2025 04:37:08 +0000
ROA not after:            Thu 05 Mar 2026 04:42:08 +0000
asID:                     28210
IP address blocks:        2804:56c:1100::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:a7:ea:4a:4c:33:68:d1:a0:07:07:8b:af:19:53:6f:dd:16:a3:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
        Validity
            Not Before: Mar  6 04:37:08 2025 GMT
            Not After : Mar  5 04:42:08 2026 GMT
        Subject: CN=44C4ADBA6D086E707D26DD81FC35F5747F1A577C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:55:76:5a:50:05:cb:24:e9:78:04:ea:28:2c:
                    11:12:e2:50:d5:ee:a9:8b:00:33:b8:d0:0d:05:60:
                    47:c4:69:aa:63:ed:7b:e6:83:88:2e:e5:66:63:a2:
                    1e:0f:64:ec:d8:59:b2:93:53:37:31:f6:ce:1c:12:
                    f3:ab:88:80:01:3a:ab:21:28:cb:a5:f1:f5:b2:cd:
                    43:38:ba:3d:d2:68:25:ea:b9:1f:67:e4:35:bf:25:
                    48:7e:9d:a0:e2:25:6a:e9:8d:43:91:36:d5:53:1c:
                    a9:77:a1:4a:71:7a:c9:b1:a5:4d:01:ef:6c:c0:33:
                    0b:74:71:a6:e8:b2:67:23:8b:97:95:fd:cd:34:74:
                    f6:32:54:3d:d4:16:2a:1f:f0:14:a4:56:6e:26:e4:
                    05:46:c0:47:65:78:57:8f:4d:19:be:42:76:d4:a8:
                    c5:16:7a:c6:76:3e:11:07:cc:55:00:44:9b:e3:39:
                    15:33:3f:21:19:15:94:5f:04:7c:06:d3:8d:20:99:
                    5f:96:53:ea:8d:46:f2:3c:d4:61:b0:12:b8:8a:50:
                    ef:03:43:f4:dc:82:5c:d0:75:f0:3e:79:02:f6:53:
                    fd:08:dd:dc:ed:4a:79:ff:98:cb:97:7e:55:9b:40:
                    d8:e5:b0:03:44:3b:d9:ec:3f:2e:b5:15:8b:f7:12:
                    5e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C4:AD:BA:6D:08:6E:70:7D:26:DD:81:FC:35:F5:74:7F:1A:57:7C
            X509v3 Authority Key Identifier:
                keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/323830343a3536633a313130303a3a2f34302d3430203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56c:1100::/40

    Signature Algorithm: sha256WithRSAEncryption
         50:73:25:c9:7c:c2:1c:48:30:67:d9:96:b1:be:a2:13:a0:98:
         29:91:f7:f8:2c:ac:e3:5d:45:aa:28:0d:d7:09:e0:9d:76:b4:
         8a:53:72:ea:67:a0:17:21:48:85:18:7a:36:48:59:ef:a1:63:
         57:ca:42:7d:e2:7c:e9:59:3d:df:4e:bf:9a:3c:ef:7b:57:68:
         6d:ba:f4:2e:9f:2c:7d:cc:4d:b8:ae:18:bb:d3:4a:88:07:21:
         a6:51:ea:5d:55:a7:d2:6b:d6:78:34:55:62:be:bc:38:1d:9c:
         8a:b3:9c:8f:53:f0:c1:22:20:8c:8e:18:79:67:46:5f:c1:26:
         18:7d:14:39:c0:49:c9:cc:33:e7:a3:87:77:11:4d:b7:47:08:
         22:b0:96:6c:68:76:52:17:35:ee:fd:b1:e5:59:d6:49:60:d9:
         f4:91:ac:85:00:38:bc:16:d3:94:0c:e7:b2:10:de:be:d2:48:
         ad:ee:0d:66:6a:e4:4f:f4:04:e1:89:a5:a0:37:c1:bb:87:c0:
         92:89:1b:63:05:d7:28:1a:5b:f6:c0:26:ed:b0:59:09:75:ee:
         b3:a2:28:2c:33:06:eb:ac:35:f8:d2:e8:2b:79:26:7d:93:f6:
         1f:05:22:83:cb:2f:fa:68:b0:fd:c1:79:6c:17:94:b9:99:30:
         af:f5:46:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:44:31 2025 by rpki-client