Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ARdYVt7B73f18SozQGhva1FKbKyqRipjAW7TwvuGkfRa/1/323830343a333937303a3a2f33322d313238203d3e20323636303330.roa
File:                     323830343a333937303a3a2f33322d313238203d3e20323636303330.roa (raw, json)
Hash identifier:          uBC4sWuHHyhA2375m2xGEOFTRaOY1HMGCkI/HCn44BQ=
Subject key identifier:   E1:A8:91:FA:04:87:F8:F5:E6:8D:8B:57:54:8A:3C:96:64:37:9D:39
Certificate issuer:       /CN=8751E96659F5A7068467CDEEF4776A74DF917289
Certificate serial:       156D63CA5989644790222B6AE6F548F779950A06
Authority key identifier: 87:51:E9:66:59:F5:A7:06:84:67:CD:EE:F4:77:6A:74:DF:91:72:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8751E96659F5A7068467CDEEF4776A74DF917289.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ARdYVt7B73f18SozQGhva1FKbKyqRipjAW7TwvuGkfRa/1/323830343a333937303a3a2f33322d313238203d3e20323636303330.roa
Signing time:             Thu 06 Mar 2025 23:00:18 +0000
ROA not before:           Thu 06 Mar 2025 22:55:18 +0000
ROA not after:            Thu 05 Mar 2026 23:00:18 +0000
asID:                     266030
IP address blocks:        2804:3970::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:6d:63:ca:59:89:64:47:90:22:2b:6a:e6:f5:48:f7:79:95:0a:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8751E96659F5A7068467CDEEF4776A74DF917289
        Validity
            Not Before: Mar  6 22:55:18 2025 GMT
            Not After : Mar  5 23:00:18 2026 GMT
        Subject: CN=E1A891FA0487F8F5E68D8B57548A3C9664379D39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ac:2f:61:69:36:d8:ae:ca:c7:42:f3:cd:8e:
                    b9:6d:63:c8:f5:6e:a5:7a:7f:3d:9f:d4:8b:4e:5a:
                    64:36:c9:77:df:bf:0a:f5:77:0d:de:e0:3f:b4:96:
                    da:de:46:04:26:a1:0d:00:8d:36:ef:e4:ed:f8:cf:
                    10:53:a9:8d:7e:c4:70:06:93:a5:9a:78:23:e4:d0:
                    1b:ad:48:71:39:f0:42:be:f6:18:4c:4d:b4:94:ee:
                    bb:76:de:d9:58:d9:6a:30:58:62:19:0f:ee:d5:8f:
                    18:14:bf:22:1f:81:72:2e:f9:7f:5b:cf:a3:b8:22:
                    bf:a5:ed:19:f1:0d:a1:59:7a:a0:d8:a9:03:ca:b7:
                    2b:33:fb:6e:e7:ba:16:3f:2b:c9:29:e9:18:d6:dc:
                    4c:66:3e:40:02:3a:5a:3a:3c:9a:8a:a1:47:ed:6b:
                    54:c5:0e:c1:2f:9a:7b:67:ba:43:ed:3b:0d:8b:ef:
                    90:5c:d8:8c:d1:e0:f4:86:2e:29:ed:d6:03:4c:05:
                    cb:dd:78:d3:02:8a:ba:32:6e:a5:dd:eb:97:62:5a:
                    87:b5:c6:5e:2d:66:51:52:6a:ef:1b:cb:78:7c:76:
                    01:6a:9e:51:b8:8a:bb:26:55:2b:51:f8:e4:bd:34:
                    75:f1:bc:ec:02:45:e1:b1:df:ef:75:cb:8c:35:e3:
                    32:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A8:91:FA:04:87:F8:F5:E6:8D:8B:57:54:8A:3C:96:64:37:9D:39
            X509v3 Authority Key Identifier:
                keyid:87:51:E9:66:59:F5:A7:06:84:67:CD:EE:F4:77:6A:74:DF:91:72:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ARdYVt7B73f18SozQGhva1FKbKyqRipjAW7TwvuGkfRa/1/8751E96659F5A7068467CDEEF4776A74DF917289.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8751E96659F5A7068467CDEEF4776A74DF917289.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ARdYVt7B73f18SozQGhva1FKbKyqRipjAW7TwvuGkfRa/1/323830343a333937303a3a2f33322d313238203d3e20323636303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3970::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:dc:d0:f7:89:c5:8b:d5:ef:d2:09:c0:9e:df:82:0c:95:f1:
         e5:3b:7c:70:1d:27:f2:fc:ac:07:2e:ef:43:34:bb:84:91:ba:
         80:ea:fa:fa:08:7f:b0:0b:16:21:7e:24:15:4e:36:96:55:8e:
         25:44:16:f2:c2:96:3d:6f:4b:ee:80:1e:a7:e5:05:e9:82:12:
         6e:3f:70:de:59:0e:23:0c:bf:a3:92:2d:14:c4:aa:6a:fe:89:
         88:02:71:ac:fb:76:84:6b:14:5b:36:84:cf:d0:04:1a:2b:90:
         32:88:b9:59:94:6d:9c:2a:92:6e:c9:14:5a:06:e7:74:6b:f2:
         d1:34:09:55:a0:82:d1:28:1a:08:44:8d:35:9b:4d:0e:4b:0a:
         cf:d4:07:16:b7:29:d7:67:43:c5:90:bd:20:cc:75:76:b2:81:
         bb:36:41:86:dc:8a:39:1d:55:e9:3c:bc:3e:25:0f:8f:e2:4e:
         75:05:9c:8c:db:ce:7f:6c:c5:2c:ea:03:c3:5f:82:b5:7a:28:
         c0:ef:30:8f:f1:0a:d8:89:65:80:38:97:80:64:4a:8d:34:ad:
         23:1f:b0:68:f7:3d:f3:ec:30:1a:b9:bb:2e:8c:a8:03:fd:fa:
         75:34:71:ed:a2:35:32:a2:5b:71:a2:12:69:6c:69:2f:c1:82:
         ed:cb:9d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:28:07 2025 by rpki-client