Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/1/323830343a3939343a3a2f33322d3332203d3e203238313339.roa
File:                     323830343a3939343a3a2f33322d3332203d3e203238313339.roa (raw, json)
Hash identifier:          RPN18IT2+egdFVKJ4A3/EYGNmkImGhCNzdPJOs7hlSE=
Subject key identifier:   9B:4D:8C:F1:C3:D3:49:A6:AF:FE:D7:26:9E:36:35:A5:05:B5:59:45
Certificate issuer:       /CN=7EDE5A1D4AEC36DA897FAB540829FFA15F101665
Certificate serial:       1AFDD540A0ECA45C72C6C983EA5A3E076BD514A8
Authority key identifier: 7E:DE:5A:1D:4A:EC:36:DA:89:7F:AB:54:08:29:FF:A1:5F:10:16:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EDE5A1D4AEC36DA897FAB540829FFA15F101665.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/1/323830343a3939343a3a2f33322d3332203d3e203238313339.roa
Signing time:             Thu 06 Mar 2025 07:33:37 +0000
ROA not before:           Thu 06 Mar 2025 07:28:37 +0000
ROA not after:            Thu 05 Mar 2026 07:33:37 +0000
asID:                     28139
IP address blocks:        2804:994::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:fd:d5:40:a0:ec:a4:5c:72:c6:c9:83:ea:5a:3e:07:6b:d5:14:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EDE5A1D4AEC36DA897FAB540829FFA15F101665
        Validity
            Not Before: Mar  6 07:28:37 2025 GMT
            Not After : Mar  5 07:33:37 2026 GMT
        Subject: CN=9B4D8CF1C3D349A6AFFED7269E3635A505B55945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9f:f0:49:d7:ed:00:52:b6:0a:e9:9d:2d:f3:
                    c1:14:cf:91:5c:60:97:58:38:8d:b4:79:c8:8a:d9:
                    d9:af:dc:bd:f0:43:9d:88:6d:cd:f3:bd:47:39:1c:
                    bb:5d:da:9a:32:90:34:b6:b9:20:7f:71:9d:7c:61:
                    f6:f4:de:fc:7d:f0:ab:ff:19:e5:99:6a:dc:a8:6c:
                    fa:db:bb:df:7a:8c:75:c9:63:a6:f3:c9:22:66:95:
                    56:6a:ad:11:9b:65:e7:92:e8:20:43:85:6b:63:97:
                    19:93:fd:40:9d:3a:7c:0b:93:54:67:a2:ba:df:4e:
                    fc:1e:9b:d3:48:d6:fd:67:34:32:ce:9b:55:07:13:
                    bd:85:86:ac:e3:df:ba:1f:60:86:dc:76:5b:ab:60:
                    e2:e5:d0:b0:78:53:f7:37:45:46:92:68:75:f4:06:
                    0b:57:0b:f3:6b:23:8f:83:63:91:36:c5:25:f1:3b:
                    eb:c4:40:be:41:3d:a3:cc:65:54:c3:8e:93:48:bc:
                    1c:3f:94:ee:e9:00:7c:c1:1d:e6:ff:4a:a3:75:90:
                    fc:2a:e2:b8:a1:c7:3e:b8:41:cf:72:62:4f:c8:3c:
                    b5:f7:9e:85:fe:a8:c6:66:22:c8:4e:b3:fc:20:31:
                    f4:ed:60:81:0b:98:be:83:39:c3:61:6a:ff:d5:33:
                    d5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:4D:8C:F1:C3:D3:49:A6:AF:FE:D7:26:9E:36:35:A5:05:B5:59:45
            X509v3 Authority Key Identifier:
                keyid:7E:DE:5A:1D:4A:EC:36:DA:89:7F:AB:54:08:29:FF:A1:5F:10:16:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/1/7EDE5A1D4AEC36DA897FAB540829FFA15F101665.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EDE5A1D4AEC36DA897FAB540829FFA15F101665.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/1/323830343a3939343a3a2f33322d3332203d3e203238313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:994::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:cf:3f:b2:a2:79:2c:05:80:12:8c:14:de:c7:86:1f:53:0c:
         a0:17:cc:0e:31:2f:56:fd:a5:71:99:3e:16:26:2f:4a:43:a7:
         5c:df:1c:8a:5c:ce:cd:a7:a3:49:35:65:c8:2e:43:45:fc:6e:
         ed:76:9d:01:d3:19:eb:63:52:bb:0b:6c:d4:fe:34:9e:e8:88:
         7b:07:1f:4d:44:59:69:ff:0e:a0:22:43:6f:1b:ec:8e:b8:8a:
         63:7b:d7:ad:8e:00:ff:ef:8d:53:a8:99:ef:10:54:39:4a:d6:
         d1:25:92:21:fe:24:11:04:d3:1d:9e:0f:7f:f9:35:18:b7:a8:
         f8:1a:ac:e7:d6:cc:fc:27:2d:7d:bd:53:72:d4:d5:b0:c9:3d:
         4f:d0:28:9f:30:1e:41:0e:ca:d4:b9:db:15:07:7e:08:48:48:
         c3:c5:f5:05:09:8f:0b:e6:ef:fe:71:d8:e1:33:dd:f7:09:5a:
         6f:80:6a:cf:5a:f7:97:e4:43:4d:87:4e:98:3b:4e:26:f5:a5:
         b8:ac:01:a0:b5:35:c0:26:6e:91:0d:42:49:1a:97:3e:3e:9b:
         72:a8:b0:af:72:c3:21:40:b2:ad:db:20:2c:a2:fd:cc:0e:8a:
         ed:92:c1:70:24:f7:6b:3c:ca:5e:f4:a6:c9:a7:32:b3:42:de:
         66:fb:27:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:34:26 2025 by rpki-client