Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/1/323830343a333437633a3a2f33322d3438203d3e20323635343631.roa
File:                     323830343a333437633a3a2f33322d3438203d3e20323635343631.roa (raw, json)
Hash identifier:          GQZM8elSwJ9jTTX+/X/UgXMpvRRPaU9CIZc7SgtNaAo=
Subject key identifier:   87:FB:4D:91:6A:A6:C6:B9:36:21:79:62:11:C2:4C:F0:02:80:10:84
Certificate issuer:       /CN=0837B5323ECCA59AC2E4D7DCC683A9592A5ECB3B
Certificate serial:       750076239309D5266CD322B5EFFC34850BF85DA7
Authority key identifier: 08:37:B5:32:3E:CC:A5:9A:C2:E4:D7:DC:C6:83:A9:59:2A:5E:CB:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0837B5323ECCA59AC2E4D7DCC683A9592A5ECB3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/1/323830343a333437633a3a2f33322d3438203d3e20323635343631.roa
Signing time:             Thu 06 Mar 2025 18:46:00 +0000
ROA not before:           Thu 06 Mar 2025 18:41:00 +0000
ROA not after:            Thu 05 Mar 2026 18:46:00 +0000
asID:                     265461
IP address blocks:        2804:347c::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:00:76:23:93:09:d5:26:6c:d3:22:b5:ef:fc:34:85:0b:f8:5d:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0837B5323ECCA59AC2E4D7DCC683A9592A5ECB3B
        Validity
            Not Before: Mar  6 18:41:00 2025 GMT
            Not After : Mar  5 18:46:00 2026 GMT
        Subject: CN=87FB4D916AA6C6B93621796211C24CF002801084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4c:8c:c1:0c:7c:26:1e:02:ed:5e:8d:4b:20:
                    35:77:94:7a:f2:9a:20:4f:fe:ac:cd:11:84:f7:0f:
                    3b:66:b7:e7:4c:fa:91:5f:77:66:95:88:47:c1:7c:
                    21:d4:2c:31:0b:7c:36:16:b0:c5:31:9d:90:d5:f5:
                    e1:2d:d5:b5:64:f9:57:e7:d4:f3:04:d3:01:04:85:
                    4d:71:ec:cb:5b:f0:89:1f:dd:3a:09:f7:55:b6:39:
                    4e:93:e8:cc:b0:e1:a7:b6:ce:e7:76:3c:0c:17:5d:
                    6b:e7:80:41:5f:72:44:e3:b1:e9:64:05:3b:a0:af:
                    31:01:a5:d6:fa:62:57:b5:3b:85:56:a0:39:86:53:
                    25:1b:4d:5f:44:36:ca:26:01:a3:fa:1b:af:6b:ef:
                    ea:62:2a:49:57:8c:98:1e:c7:9f:41:15:13:6e:29:
                    63:08:c0:c6:e5:af:d6:36:19:b8:76:11:cc:23:86:
                    b8:cf:a4:d5:71:f5:7a:e5:b2:4f:e5:c6:f5:3f:d1:
                    9c:27:c3:99:48:0c:38:10:3b:19:59:be:c7:f0:72:
                    25:a7:93:cf:7e:69:2a:62:b1:f2:7d:3e:ae:2c:01:
                    93:37:59:77:30:c3:c0:f9:77:5d:46:f7:3d:83:40:
                    e5:11:3c:48:4d:f9:8d:a6:75:69:61:44:1d:2f:d4:
                    2d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:FB:4D:91:6A:A6:C6:B9:36:21:79:62:11:C2:4C:F0:02:80:10:84
            X509v3 Authority Key Identifier:
                keyid:08:37:B5:32:3E:CC:A5:9A:C2:E4:D7:DC:C6:83:A9:59:2A:5E:CB:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/1/0837B5323ECCA59AC2E4D7DCC683A9592A5ECB3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0837B5323ECCA59AC2E4D7DCC683A9592A5ECB3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/1/323830343a333437633a3a2f33322d3438203d3e20323635343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:347c::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:56:5f:82:5e:d1:58:dc:56:5d:5b:58:b0:af:0b:b6:77:20:
         8a:f3:2c:2c:0a:98:23:a8:69:0c:a7:78:3c:dc:92:e1:16:34:
         aa:71:87:4b:08:52:69:f0:11:27:51:c3:8c:d5:d8:fb:0c:4d:
         e0:b6:3c:04:fe:2f:45:6c:55:91:2c:a3:ec:95:c4:71:6c:ed:
         fa:b3:d1:63:89:f9:b2:9c:d2:29:12:1b:0f:9c:57:88:a0:98:
         9c:fb:4c:57:9d:e0:dd:b7:6a:64:e3:87:25:d6:7c:e5:15:a4:
         90:f8:ff:9c:b7:ca:ee:f3:b6:32:e4:de:7f:60:e3:28:7a:0e:
         c4:50:c8:ad:42:41:7c:bc:22:c7:32:a3:5c:ea:70:6f:fb:66:
         68:80:56:c1:25:ac:a9:56:77:fa:b6:1c:42:79:5c:26:7f:62:
         03:5c:7b:d4:82:5f:e5:28:64:b0:80:61:0b:8f:bf:7e:02:51:
         f5:b1:8e:fb:e5:6e:b0:53:53:36:a3:e4:5c:4a:f8:81:50:0b:
         97:e8:ff:fd:35:de:d3:0f:88:5b:2f:e2:1e:0b:3f:a2:65:b2:
         5b:99:1e:b1:e5:f6:5e:38:ac:a3:8c:52:5c:7d:35:30:18:cd:
         32:fd:db:13:cc:33:98:20:64:ad:7e:2d:7d:ef:1c:28:45:52:
         d7:d1:a5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:13:31 2025 by rpki-client