Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/323830343a3736383a313030303a3a2f33362d3336203d3e203532393737.roa
File:                     323830343a3736383a313030303a3a2f33362d3336203d3e203532393737.roa (raw, json)
Hash identifier:          wDSOJoDduHBHqYHzwqWrUyr/j5p7lYV7AjBxjnXFJww=
Subject key identifier:   5B:BC:DA:C0:49:E8:62:0A:84:FA:E4:35:BD:71:59:AC:50:E9:9B:A0
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       53C709FA47B1021E78C81AA2D1DC5434732785A1
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/323830343a3736383a313030303a3a2f33362d3336203d3e203532393737.roa
Signing time:             Wed 05 Mar 2025 19:00:03 +0000
ROA not before:           Wed 05 Mar 2025 18:55:03 +0000
ROA not after:            Wed 04 Mar 2026 19:00:03 +0000
asID:                     52977
IP address blocks:        2804:768:1000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:c7:09:fa:47:b1:02:1e:78:c8:1a:a2:d1:dc:54:34:73:27:85:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Mar  5 18:55:03 2025 GMT
            Not After : Mar  4 19:00:03 2026 GMT
        Subject: CN=5BBCDAC049E8620A84FAE435BD7159AC50E99BA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0d:3f:2c:02:8e:b5:2a:6f:f8:90:43:15:5b:
                    65:ec:5b:e9:3f:e0:b5:69:09:d2:85:38:e4:49:76:
                    6f:79:1f:ef:4c:39:d2:99:3f:c4:f4:08:62:38:4d:
                    27:c0:b7:17:cf:8b:ef:23:69:ad:ba:50:9a:d1:9d:
                    88:49:af:1c:db:bf:a1:b6:6d:5f:e7:1c:d9:b0:89:
                    dd:e5:90:65:fb:a5:58:b0:fb:0a:cc:81:4f:09:c8:
                    1e:a6:c2:09:34:0e:8a:60:6b:28:a7:50:1a:8c:65:
                    d0:06:99:ad:df:9e:c1:de:15:c8:c1:9f:6e:61:34:
                    f2:1a:64:21:f0:35:f6:bd:f8:84:8d:f8:e6:c6:08:
                    d3:84:70:87:78:69:46:3d:90:58:e3:74:21:71:ab:
                    c4:3a:64:4c:36:4e:63:cf:f2:2d:f2:17:c5:c7:3c:
                    5a:3a:16:ca:54:07:16:e2:0e:d7:bc:b6:91:8a:c0:
                    04:18:a4:f4:36:ea:36:3c:c3:f2:be:14:1c:95:28:
                    5f:64:76:6c:3f:fc:29:4b:39:cc:2a:53:19:48:27:
                    96:90:e3:35:67:56:65:e7:fe:ef:d5:a9:3c:0e:e5:
                    60:e7:4a:51:2a:ab:be:39:da:0e:27:83:2f:ab:38:
                    00:34:a9:ba:d8:6b:9e:a0:81:3a:94:6b:af:e6:7a:
                    ee:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:BC:DA:C0:49:E8:62:0A:84:FA:E4:35:BD:71:59:AC:50:E9:9B:A0
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/323830343a3736383a313030303a3a2f33362d3336203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:768:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         d3:d9:ca:b6:8a:3c:28:26:8c:16:30:27:c2:f9:c6:8c:af:38:
         85:0a:e3:ec:64:16:65:f7:76:83:4f:df:4b:07:15:49:d0:94:
         8d:68:37:ef:db:b2:19:60:6f:5d:02:d9:0f:55:a1:38:23:7f:
         68:3d:d8:a0:7b:16:8f:90:f2:cd:58:cc:bb:42:20:8e:ea:3b:
         fe:0e:cb:3e:a4:af:89:d6:81:8b:f6:76:39:4a:8d:21:6b:17:
         93:da:29:80:75:a6:77:b3:51:48:c9:98:5c:50:aa:4e:08:6b:
         7b:95:68:54:71:f2:6b:be:0c:0b:33:47:b8:7c:fc:aa:1a:93:
         5e:91:b4:bc:6b:d3:9a:87:4b:37:25:ea:78:f6:29:4b:2f:4d:
         2e:6d:b2:7f:71:28:35:7c:82:e2:6f:7f:48:f3:08:67:4d:da:
         9e:3f:f0:71:d0:25:d2:ea:8d:e5:3b:0f:5b:7c:ef:f5:5f:ac:
         46:6f:8e:59:93:4c:fd:21:66:90:dd:ef:c7:d3:90:cf:de:1a:
         94:3d:e7:15:92:c0:f0:69:04:2c:e4:03:80:9a:de:92:92:65:
         af:28:42:d2:82:53:0d:ea:ff:e1:f6:55:a0:4a:24:f2:ca:24:
         8d:4e:02:38:eb:b1:4f:cc:e9:71:92:be:2c:b4:0f:26:d5:a5:
         2a:bf:05:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:02:33 2025 by rpki-client