Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/323830343a326232633a3a2f33322d3332203d3e20323635313339.roa
File:                     323830343a326232633a3a2f33322d3332203d3e20323635313339.roa (raw, json)
Hash identifier:          DZEEcHNQI5YOV0FWE+5yPgmbW5mWmJExAS2/O2HL+5c=
Subject key identifier:   D5:F4:01:42:9F:78:E8:B6:B3:CA:96:ED:31:D6:34:99:1E:F5:F5:F2
Certificate issuer:       /CN=0098226F0372C9E599CF2BD5642AFEAFCFB872A1
Certificate serial:       312EF213FDFA49D40116D45672575560D8121A65
Authority key identifier: 00:98:22:6F:03:72:C9:E5:99:CF:2B:D5:64:2A:FE:AF:CF:B8:72:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0098226F0372C9E599CF2BD5642AFEAFCFB872A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/323830343a326232633a3a2f33322d3332203d3e20323635313339.roa
Signing time:             Mon 06 Jan 2025 15:28:26 +0000
ROA not before:           Mon 06 Jan 2025 15:23:26 +0000
ROA not after:            Mon 05 Jan 2026 15:28:26 +0000
asID:                     265139
IP address blocks:        2804:2b2c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:2e:f2:13:fd:fa:49:d4:01:16:d4:56:72:57:55:60:d8:12:1a:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0098226F0372C9E599CF2BD5642AFEAFCFB872A1
        Validity
            Not Before: Jan  6 15:23:26 2025 GMT
            Not After : Jan  5 15:28:26 2026 GMT
        Subject: CN=D5F401429F78E8B6B3CA96ED31D634991EF5F5F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:98:33:16:ef:47:87:28:6c:48:94:e9:95:ca:
                    96:e8:1f:3b:92:16:88:89:cc:7a:83:ce:46:39:c8:
                    a0:f5:1b:0c:2a:b3:4e:d2:c6:71:ac:c2:56:2d:68:
                    d9:12:19:39:23:c3:33:d2:5d:dd:6c:83:90:1c:5d:
                    da:3d:89:f9:24:21:19:40:b5:03:59:41:ef:e5:61:
                    f5:6b:6d:0e:69:91:61:49:e4:a5:59:d0:42:73:64:
                    e6:ad:3d:1f:64:59:05:28:87:10:49:96:f5:23:45:
                    68:c2:4c:da:33:cd:88:fd:76:e5:53:9c:c1:47:32:
                    80:8c:07:8c:7e:61:79:ae:d7:d3:d6:4d:81:2a:7a:
                    73:e0:21:f9:54:48:b6:05:28:b5:00:4d:30:32:a5:
                    a7:b4:e8:c9:d3:fb:cd:c5:12:35:b2:54:08:28:69:
                    93:30:3f:d4:d8:8e:66:f3:7d:50:2f:cb:ac:33:14:
                    5a:d5:f5:47:ae:25:d4:4e:6a:8c:08:f1:73:83:f0:
                    f8:3b:a2:dc:37:cb:71:24:a3:5f:81:fc:7c:96:9c:
                    0a:eb:94:6b:95:bd:a5:c8:cd:a5:47:ca:32:2c:e8:
                    20:fb:c0:21:f1:90:d0:13:8d:f6:ea:68:8f:87:f8:
                    fd:51:2f:81:1a:8c:07:e0:22:37:ac:bc:63:c3:92:
                    35:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F4:01:42:9F:78:E8:B6:B3:CA:96:ED:31:D6:34:99:1E:F5:F5:F2
            X509v3 Authority Key Identifier:
                keyid:00:98:22:6F:03:72:C9:E5:99:CF:2B:D5:64:2A:FE:AF:CF:B8:72:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/0098226F0372C9E599CF2BD5642AFEAFCFB872A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0098226F0372C9E599CF2BD5642AFEAFCFB872A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/323830343a326232633a3a2f33322d3332203d3e20323635313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:10:4d:6e:76:6d:1a:7c:3b:71:81:6e:3d:77:ac:d9:11:3c:
         a3:51:f1:58:ce:0b:3c:f0:e8:61:e4:2a:fa:8a:24:b1:fb:a3:
         14:a2:89:e8:69:05:3f:8c:11:f1:da:27:d6:da:13:bd:1b:1e:
         b2:88:ad:9a:28:52:9e:c2:db:16:6b:41:85:96:08:f9:01:f8:
         06:d0:c6:26:20:b8:42:c7:14:81:ac:7a:d8:3e:4f:45:04:ad:
         f8:21:33:48:ec:f2:a4:fd:14:e9:15:fa:91:b9:19:b8:e1:19:
         db:77:24:a3:98:31:33:ce:3b:c8:65:10:04:4a:b1:77:b4:18:
         ed:18:03:c8:2f:3a:bc:cf:f7:c7:36:cd:63:b9:61:51:0a:31:
         d7:1a:ec:91:d4:20:78:36:0c:4d:55:0f:5d:b3:3f:be:68:3f:
         dc:41:be:5c:b8:5a:5d:03:7b:9b:06:d2:53:79:14:a3:ef:38:
         ee:2f:27:07:46:7f:f5:17:69:c0:e2:1a:1d:12:f7:36:c8:9e:
         05:1a:37:62:3a:d7:b6:78:70:c1:74:ec:e1:17:1f:a7:9a:f7:
         1f:0b:31:01:b7:b2:90:87:36:9d:76:53:5c:21:69:b2:4c:d5:
         ef:dc:2c:cf:fd:51:09:41:2e:e9:7d:bd:d0:bf:84:aa:8d:e7:
         f3:8d:f6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:12:22 2025 by rpki-client