Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/323830343a3536633a323132303a3a2f34332d3433203d3e203238323130.roa
File:                     323830343a3536633a323132303a3a2f34332d3433203d3e203238323130.roa (raw, json)
Hash identifier:          YpfW27fUJfXtvoXQV3o55Uj8NfIIxlhSzoLzH010LwQ=
Subject key identifier:   CB:CA:FE:62:ED:B8:48:65:8D:E1:32:2F:20:02:C4:8F:75:9E:6B:71
Certificate issuer:       /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial:       6335FE09B6EB9486C91EC95354E043A916682728
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/323830343a3536633a323132303a3a2f34332d3433203d3e203238323130.roa
Signing time:             Thu 06 Mar 2025 04:42:11 +0000
ROA not before:           Thu 06 Mar 2025 04:37:11 +0000
ROA not after:            Thu 05 Mar 2026 04:42:11 +0000
asID:                     28210
IP address blocks:        2804:56c:2120::/43 maxlen: 43
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:35:fe:09:b6:eb:94:86:c9:1e:c9:53:54:e0:43:a9:16:68:27:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
        Validity
            Not Before: Mar  6 04:37:11 2025 GMT
            Not After : Mar  5 04:42:11 2026 GMT
        Subject: CN=CBCAFE62EDB848658DE1322F2002C48F759E6B71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a5:7c:d0:8e:56:1c:c2:b2:ff:c0:37:71:58:
                    30:b0:db:f7:99:26:9d:7d:6d:ad:c2:23:af:c4:4e:
                    2a:69:90:8a:a2:42:57:aa:53:0f:72:d4:15:36:e3:
                    9e:5c:40:48:90:ad:cf:41:95:e8:51:a6:32:84:ec:
                    8c:2c:04:b3:37:ca:08:e2:ce:90:ae:7d:09:73:3f:
                    22:c8:08:60:53:95:05:cc:9d:b4:57:fa:5e:8a:83:
                    d9:ac:83:06:95:c7:c5:d3:0e:2e:03:18:ac:2a:e7:
                    b0:6e:6d:ac:c8:9d:87:53:de:89:e5:e2:aa:34:28:
                    8c:4f:45:a9:24:9c:89:d2:26:89:82:92:c8:21:ea:
                    58:65:6a:97:5a:9b:c5:61:f9:18:48:d3:14:57:fc:
                    fb:c0:56:a6:4d:e7:5b:63:93:17:2f:06:a6:a8:44:
                    9b:59:23:ff:cd:34:2c:8a:4c:bd:bb:d2:d6:84:b9:
                    73:60:96:69:cc:a4:76:1f:fa:9f:68:79:9d:0d:f3:
                    f5:38:29:da:f2:fb:20:15:1f:ea:c5:70:e2:2c:e9:
                    bb:b7:a0:32:39:2c:14:28:3e:9f:cc:13:d4:a2:e1:
                    ba:2d:fe:c5:ad:32:4f:d0:cc:7c:63:d4:10:61:e6:
                    d2:7d:1f:73:b5:a6:72:0d:32:57:4a:ac:2c:4e:fb:
                    0a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:CA:FE:62:ED:B8:48:65:8D:E1:32:2F:20:02:C4:8F:75:9E:6B:71
            X509v3 Authority Key Identifier:
                keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/323830343a3536633a323132303a3a2f34332d3433203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56c:2120::/43

    Signature Algorithm: sha256WithRSAEncryption
         18:37:b0:80:cd:17:01:2f:21:16:e2:fb:aa:0c:d9:61:26:2c:
         12:37:60:77:65:7e:ec:88:61:0e:ac:52:64:e2:7c:90:ae:69:
         ec:10:c8:3b:59:1c:5c:36:ab:5b:af:8f:6f:7e:51:66:36:dc:
         1f:89:ed:99:d4:9c:4d:a7:86:69:a1:e0:77:b1:a8:08:61:48:
         6a:c8:a7:9a:c3:6e:23:17:c5:82:32:ff:07:6a:dc:1c:a7:89:
         cc:9d:2a:45:1f:43:cc:0f:03:c3:fa:2e:d4:50:35:d7:27:c6:
         f7:2c:c0:c0:e8:af:1b:4d:a7:0a:1b:f5:fa:15:aa:3a:16:fb:
         46:e5:f1:aa:68:c5:e7:10:0b:e4:e7:10:b2:b3:31:1b:ff:24:
         3c:e8:3e:c0:19:9d:c6:ad:0c:b4:40:2b:de:1d:c5:c1:cc:61:
         c8:0a:8d:53:09:0d:e4:20:fe:50:0a:42:8d:78:7a:2b:51:6d:
         34:83:44:b1:f9:3d:24:e8:94:56:18:39:81:8f:1d:13:a4:6e:
         23:f4:2d:7b:0c:07:ee:26:a7:d7:58:b9:93:8c:32:b2:00:ee:
         34:d0:3b:fc:51:d8:7d:8a:c3:ac:68:24:b7:92:4a:a9:3d:f1:
         f9:54:29:88:a0:da:64:fa:d7:1c:08:21:35:1e:3a:b5:f3:7f:
         97:20:99:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:44:49 2025 by rpki-client