Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/323830343a356266633a3a2f33322d3438203d3e20323638383831.roa
File:                     323830343a356266633a3a2f33322d3438203d3e20323638383831.roa (raw, json)
Hash identifier:          i06R7ZftAjC7a/YY6upqVlOH5minL/+0Kvab9Pct10w=
Subject key identifier:   51:43:64:AB:97:66:7A:5D:F4:6E:F7:72:D1:74:7D:30:8C:CA:FD:1D
Certificate issuer:       /CN=DD880B71129737798123EE9EDC1423C3E8280892
Certificate serial:       1CB776D09348667F2E2105CAAC39A0169DF3E61D
Authority key identifier: DD:88:0B:71:12:97:37:79:81:23:EE:9E:DC:14:23:C3:E8:28:08:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD880B71129737798123EE9EDC1423C3E8280892.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/323830343a356266633a3a2f33322d3438203d3e20323638383831.roa
Signing time:             Thu 06 Mar 2025 19:00:00 +0000
ROA not before:           Thu 06 Mar 2025 18:55:00 +0000
ROA not after:            Fri 06 Mar 2026 19:00:00 +0000
asID:                     268881
IP address blocks:        2804:5bfc::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:b7:76:d0:93:48:66:7f:2e:21:05:ca:ac:39:a0:16:9d:f3:e6:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD880B71129737798123EE9EDC1423C3E8280892
        Validity
            Not Before: Mar  6 18:55:00 2025 GMT
            Not After : Mar  6 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0c:30:99:37:c6:6e:37:3b:12:82:7b:70:76:
                    d4:80:0f:d3:e8:7e:e6:b9:75:8b:80:e5:33:ae:66:
                    4f:44:bc:b0:89:3f:4d:9b:60:35:a5:82:05:fc:23:
                    84:c5:ab:2d:53:b0:7a:63:35:fd:65:f3:47:ff:09:
                    50:ec:08:68:b7:e2:15:84:b7:b3:76:b6:75:14:c7:
                    b8:b3:cc:c6:ac:ca:f6:e5:a3:d5:24:c6:88:ab:35:
                    0c:10:91:0b:ef:c7:e0:af:a1:38:91:7d:26:fe:26:
                    5e:85:2e:1f:e5:e0:f0:55:f0:fd:e4:68:25:48:d3:
                    db:6d:2d:5a:86:f6:3f:b4:71:fc:26:3f:78:f0:5e:
                    6d:8c:4e:bb:31:66:6a:49:6c:93:9b:93:2d:b9:16:
                    1a:a8:50:78:47:34:31:09:08:27:ff:f1:5a:7c:9d:
                    2e:da:a5:bb:c2:38:1f:8b:45:73:8c:a5:46:6c:bb:
                    98:20:fc:62:79:2b:c4:41:18:33:f9:3d:8b:54:4e:
                    15:f7:3c:ff:c8:bd:30:d0:8a:95:95:0c:ec:91:9a:
                    4a:cb:e8:be:9e:58:89:f7:29:7f:ab:58:8a:42:b4:
                    ef:c8:3f:28:5a:b5:0c:44:19:a3:cd:8d:fb:7c:97:
                    30:3d:11:b9:ee:fd:f6:60:0a:01:5f:3c:02:49:90:
                    91:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:43:64:AB:97:66:7A:5D:F4:6E:F7:72:D1:74:7D:30:8C:CA:FD:1D
            X509v3 Authority Key Identifier:
                keyid:DD:88:0B:71:12:97:37:79:81:23:EE:9E:DC:14:23:C3:E8:28:08:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD880B71129737798123EE9EDC1423C3E8280892.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/323830343a356266633a3a2f33322d3438203d3e20323638383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5bfc::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:5c:c7:7a:4a:ef:79:99:3a:eb:61:4a:2c:40:0b:d6:8f:b7:
         af:25:c7:a7:a6:ff:27:12:64:de:df:40:8b:fb:b8:d1:04:59:
         35:d4:5d:6c:36:56:27:a4:6b:3a:4d:f5:4e:d0:75:99:c8:74:
         28:35:9e:bb:51:14:ee:ed:27:74:c7:c4:42:a0:ef:a0:88:48:
         0b:3b:a0:9a:8b:db:3b:2e:c4:77:de:c3:a0:58:2b:b3:4a:58:
         3c:71:63:07:17:33:df:fe:6b:49:66:78:e0:ce:b0:21:90:1a:
         e3:d5:ef:3a:53:95:19:10:0c:f1:eb:de:98:a4:6b:db:09:88:
         f8:15:ee:da:44:00:14:98:16:55:33:56:99:bb:16:39:79:1b:
         67:37:c2:7e:c6:15:04:4f:62:e8:2f:07:32:8f:62:b1:41:f4:
         c6:66:35:7b:3a:48:0f:76:dd:35:c0:72:4e:d8:5e:20:d6:b7:
         88:27:39:fc:49:45:14:84:11:50:3d:12:aa:d8:23:e1:3b:fb:
         82:08:71:19:45:ec:3e:38:60:b2:ac:6c:37:35:1f:47:e5:e1:
         99:90:5c:b6:81:61:b7:79:d5:32:0f:30:e5:38:32:e3:83:7d:
         00:11:f9:d7:93:4c:1a:b4:5c:99:fe:86:a6:d2:36:00:4d:b5:
         d5:6d:8b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 11:52:40 2025 by rpki-client