Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/323830343a313330633a3130303a3a2f34302d3430203d3e20323633353132.roa
File:                     323830343a313330633a3130303a3a2f34302d3430203d3e20323633353132.roa (raw, json)
Hash identifier:          9ZA37UmQLf+ycyY7tuKawiVqKsCWudKzujbzqpsE2oc=
Subject key identifier:   66:EF:CB:1A:25:65:14:FB:60:C1:CA:AD:8E:BC:8E:F3:EC:D5:9B:38
Certificate issuer:       /CN=280DBCE26C80C869FE8BD73477199ADD10E444A2
Certificate serial:       06CBCE13FF87D962BF524A526575E28CE7DC2B31
Authority key identifier: 28:0D:BC:E2:6C:80:C8:69:FE:8B:D7:34:77:19:9A:DD:10:E4:44:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/323830343a313330633a3130303a3a2f34302d3430203d3e20323633353132.roa
Signing time:             Wed 05 Mar 2025 19:00:05 +0000
ROA not before:           Wed 05 Mar 2025 18:55:05 +0000
ROA not after:            Wed 04 Mar 2026 19:00:05 +0000
asID:                     263512
IP address blocks:        2804:130c:100::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:cb:ce:13:ff:87:d9:62:bf:52:4a:52:65:75:e2:8c:e7:dc:2b:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=280DBCE26C80C869FE8BD73477199ADD10E444A2
        Validity
            Not Before: Mar  5 18:55:05 2025 GMT
            Not After : Mar  4 19:00:05 2026 GMT
        Subject: CN=66EFCB1A256514FB60C1CAAD8EBC8EF3ECD59B38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7b:40:73:6d:fb:8c:60:db:8a:d4:81:6c:aa:
                    10:44:ee:6b:ea:73:58:cd:a5:bd:1a:8c:f8:c6:80:
                    e0:ed:4b:f5:1b:5d:ad:be:39:d4:69:7f:c9:98:8a:
                    8d:49:89:d0:5b:b5:ed:d5:11:ce:21:4f:ba:e1:cc:
                    5b:9e:0d:d2:71:0e:2c:a3:62:c8:40:ff:ce:e8:43:
                    7f:35:2e:f4:f3:92:bf:a1:12:0a:90:4a:bb:dd:04:
                    77:06:5b:4b:ef:a8:9a:02:9f:82:8f:e4:5c:6c:66:
                    c2:7e:72:75:6e:5e:85:99:df:35:16:07:bf:0e:00:
                    ff:64:ec:c5:bf:90:ba:f6:44:46:a5:ac:df:4e:49:
                    fa:0f:1a:21:56:28:de:d2:c8:41:09:10:89:9e:1f:
                    a6:30:7f:eb:f2:dc:99:c5:de:ed:8d:55:fe:03:eb:
                    85:fa:40:bb:09:a5:38:00:de:37:55:b2:87:96:f1:
                    e8:25:9e:23:cb:2b:2e:24:47:a9:30:d5:4f:53:2a:
                    0a:ae:97:26:f7:92:38:06:fe:86:69:88:dd:2f:36:
                    0f:70:75:13:21:03:58:d3:46:29:ad:c0:59:5b:12:
                    e6:36:4b:e4:08:17:31:8f:2d:02:01:c1:8a:df:4c:
                    77:59:fa:7c:9c:32:8f:56:00:5a:df:fb:3d:b7:42:
                    2f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:EF:CB:1A:25:65:14:FB:60:C1:CA:AD:8E:BC:8E:F3:EC:D5:9B:38
            X509v3 Authority Key Identifier:
                keyid:28:0D:BC:E2:6C:80:C8:69:FE:8B:D7:34:77:19:9A:DD:10:E4:44:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/323830343a313330633a3130303a3a2f34302d3430203d3e20323633353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:130c:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         8d:19:33:54:f5:37:d4:a1:f1:10:2c:88:09:e8:63:03:87:e1:
         15:b2:33:fb:db:53:44:04:fa:ea:4b:cd:bc:a6:e4:4e:ab:d9:
         27:c5:c6:84:bc:8b:18:27:30:0c:be:41:62:af:69:d6:99:cf:
         81:6d:38:1e:b9:89:25:e7:ab:3a:fd:c9:92:13:0b:ac:2b:27:
         e1:a9:66:41:bb:a9:ed:be:62:2f:d1:f2:f0:52:33:e1:d9:2d:
         ab:d6:f7:05:ba:03:b9:22:69:41:3d:3b:9f:67:ea:8a:46:0a:
         3e:1e:2e:22:d3:59:6b:c8:5f:5b:5c:c2:73:2d:25:cf:8c:76:
         fc:e1:51:e6:3d:e9:c8:d1:a7:06:72:29:8f:ab:55:3c:4d:a3:
         d3:1e:6d:7c:4d:73:ed:b0:06:31:ca:b8:d4:ad:49:ac:12:38:
         d3:9a:11:61:fd:64:05:89:d4:81:79:8a:a9:39:81:85:02:17:
         b8:a2:34:67:16:30:e0:5f:31:73:3a:31:3d:c8:ee:3e:fc:04:
         37:e2:6e:35:57:b8:1c:c9:ea:f3:00:8d:3a:c0:54:69:fa:fc:
         83:9e:40:3c:ea:6d:41:80:4c:02:44:b8:89:9b:60:30:19:17:
         28:5a:3d:63:d6:ae:2c:c8:ed:bf:8a:49:b2:c6:2c:f3:7f:a1:
         3e:c6:0a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:26:05 2025 by rpki-client