Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/323830343a353737633a3a2f33332d3333203d3e20323638303638.roa
File:                     323830343a353737633a3a2f33332d3333203d3e20323638303638.roa (raw, json)
Hash identifier:          1yQHJ1CrblWY7NoUFPBhpqn0RFxEI4hPFV7m8xxoymI=
Subject key identifier:   53:C2:45:8A:90:C1:E9:01:93:0B:82:1A:C9:10:72:5F:78:7B:87:BB
Certificate issuer:       /CN=2109BE321BAA489853B95DD9EB2882D4F824F0F2
Certificate serial:       2FE0BCB9C0205323C608EA92C962D2379688C125
Authority key identifier: 21:09:BE:32:1B:AA:48:98:53:B9:5D:D9:EB:28:82:D4:F8:24:F0:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/323830343a353737633a3a2f33332d3333203d3e20323638303638.roa
Signing time:             Thu 06 Mar 2025 06:00:21 +0000
ROA not before:           Thu 06 Mar 2025 05:55:21 +0000
ROA not after:            Thu 05 Mar 2026 06:00:21 +0000
asID:                     268068
IP address blocks:        2804:577c::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:e0:bc:b9:c0:20:53:23:c6:08:ea:92:c9:62:d2:37:96:88:c1:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2109BE321BAA489853B95DD9EB2882D4F824F0F2
        Validity
            Not Before: Mar  6 05:55:21 2025 GMT
            Not After : Mar  5 06:00:21 2026 GMT
        Subject: CN=53C2458A90C1E901930B821AC910725F787B87BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:dd:16:23:61:1b:e8:1f:59:8a:ae:a1:1a:12:
                    d5:c2:19:5b:fa:03:8d:fd:47:96:15:85:7d:6b:df:
                    91:fe:0b:b9:a3:12:4e:75:f8:69:9e:92:ef:dc:f3:
                    7c:50:2e:29:ce:a1:85:33:4c:ae:35:50:fa:ea:3f:
                    32:00:25:00:43:94:22:8c:fd:4f:1a:f2:fc:d2:9a:
                    ba:ea:01:33:82:4e:24:53:df:50:0b:63:ff:2b:54:
                    f8:8a:7d:9b:56:b8:cf:af:7a:ca:25:47:45:8a:24:
                    b6:fd:9e:c2:f8:2b:90:c6:07:55:6d:fb:dc:32:14:
                    d5:10:a4:3e:b4:2d:25:68:26:3d:56:81:eb:f2:de:
                    d4:38:96:0e:78:d5:75:62:5c:ab:46:eb:d4:98:28:
                    0e:12:f6:47:8d:5d:6b:a9:e4:7e:b7:45:37:02:07:
                    de:f4:a3:45:92:aa:34:ea:69:6f:fb:b9:8d:dd:d3:
                    e3:da:10:e1:38:ce:0a:b6:29:19:9e:30:fd:e1:0e:
                    dd:da:e3:d2:ec:3c:50:a2:26:d5:6c:a0:18:c6:d7:
                    27:bc:54:bc:9a:2a:04:2c:68:db:cf:ac:26:a1:0e:
                    f7:98:c5:3b:7a:b6:49:0c:1c:d3:a3:21:19:92:94:
                    a4:70:97:3e:a9:a7:13:11:9d:33:73:f6:32:a3:67:
                    3c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C2:45:8A:90:C1:E9:01:93:0B:82:1A:C9:10:72:5F:78:7B:87:BB
            X509v3 Authority Key Identifier:
                keyid:21:09:BE:32:1B:AA:48:98:53:B9:5D:D9:EB:28:82:D4:F8:24:F0:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/323830343a353737633a3a2f33332d3333203d3e20323638303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:577c::/33

    Signature Algorithm: sha256WithRSAEncryption
         92:8e:d7:05:3d:e6:21:a7:9c:9d:7c:07:59:93:1e:c5:b0:bd:
         c5:43:c8:10:1c:27:da:4c:b9:87:be:c1:7c:e5:f0:3c:97:76:
         ff:90:d7:47:e5:8c:34:42:d7:35:c0:c3:bd:c5:1c:5f:8b:96:
         bc:95:eb:ab:de:2c:cf:9f:c6:fb:fa:a3:9c:7d:a6:40:5f:88:
         25:b1:bc:9f:1e:4d:a7:f7:2c:36:17:03:cb:2f:88:7c:21:cb:
         d6:f8:53:c0:db:cc:9f:a1:2b:28:19:7d:58:67:1c:c2:97:c3:
         33:17:53:ac:85:b4:c7:3e:54:63:43:98:7d:59:a5:3b:37:ab:
         29:28:35:64:8e:ec:55:e7:1c:5d:c9:ab:bf:db:7d:92:05:af:
         4d:5c:d1:02:d5:f4:b3:92:26:a5:e4:f6:c3:e6:df:86:91:f1:
         f0:2a:52:43:41:97:f8:7b:d5:14:6a:12:c9:de:b8:88:e2:5c:
         52:4e:52:f2:06:bc:d5:cb:6f:21:15:e8:d4:a2:60:5a:94:12:
         ce:d2:8e:62:01:e8:29:fe:4b:02:0a:f8:8c:44:d6:0e:8c:c6:
         c8:77:2b:70:f2:b7:c7:9b:6f:44:42:f0:ac:5b:58:44:aa:4b:
         4b:0a:88:d2:c0:c6:ce:33:ae:4a:4d:9b:c7:6c:45:1c:e1:6a:
         f7:47:21:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:33:10 2025 by rpki-client