Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AoPFVyLjCn6KEcLrNWJaS9J91BzNrdLBfNioGr5gS5bF/0/323830343a383163633a633030303a3a2f33342d3334203d3e20323732343737.roa
File:                     323830343a383163633a633030303a3a2f33342d3334203d3e20323732343737.roa (raw, json)
Hash identifier:          /oEIUS75EaNFsyrZG1i35xlq0msD2k2R66EGE6lvZAw=
Subject key identifier:   85:09:5D:3F:91:DC:77:59:6E:31:27:23:A7:93:21:44:63:1A:50:19
Certificate issuer:       /CN=556D2DAE7192545362D8C8A06056F0853F9F623B
Certificate serial:       13F9A890FB1A4352B8C2DCE01071C203AAAF03AE
Authority key identifier: 55:6D:2D:AE:71:92:54:53:62:D8:C8:A0:60:56:F0:85:3F:9F:62:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/556D2DAE7192545362D8C8A06056F0853F9F623B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AoPFVyLjCn6KEcLrNWJaS9J91BzNrdLBfNioGr5gS5bF/0/323830343a383163633a633030303a3a2f33342d3334203d3e20323732343737.roa
Signing time:             Mon 27 Jan 2025 12:23:57 +0000
ROA not before:           Mon 27 Jan 2025 12:18:57 +0000
ROA not after:            Mon 26 Jan 2026 12:23:57 +0000
asID:                     272477
IP address blocks:        2804:81cc:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:f9:a8:90:fb:1a:43:52:b8:c2:dc:e0:10:71:c2:03:aa:af:03:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=556D2DAE7192545362D8C8A06056F0853F9F623B
        Validity
            Not Before: Jan 27 12:18:57 2025 GMT
            Not After : Jan 26 12:23:57 2026 GMT
        Subject: CN=85095D3F91DC77596E312723A7932144631A5019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f8:64:d2:b6:69:8c:9f:de:eb:74:9b:07:c8:
                    df:18:23:f3:3e:bf:b3:78:9c:8e:40:4e:fd:05:6b:
                    83:ad:53:81:50:55:3b:ed:2c:b2:92:49:16:65:86:
                    55:c5:fc:18:5e:66:9c:7c:95:53:9e:f8:bb:28:6c:
                    78:fa:cd:61:f8:2f:17:fe:b8:05:2a:d6:9a:c2:27:
                    ef:0f:0e:15:b1:05:14:fc:94:48:31:a7:42:cf:39:
                    e3:e1:46:a6:2c:9a:06:4f:a6:0b:9a:e4:bf:49:88:
                    62:c2:00:b1:0e:1f:6a:52:7e:f9:1f:27:da:27:94:
                    f9:91:de:ea:ec:4f:0c:e7:a8:80:d6:7c:92:12:0c:
                    6a:59:6b:4b:5d:f9:fd:ba:88:6d:54:e6:bd:dc:70:
                    69:9d:42:56:df:ce:3c:e9:71:0c:ee:b3:8b:3e:2f:
                    ee:ee:89:32:55:d0:66:85:5b:d9:ed:4e:fc:2f:92:
                    db:56:a2:d6:db:56:67:cd:bc:10:c9:c2:23:47:45:
                    6c:12:35:9a:1e:91:4f:79:3c:f2:2d:00:e1:d5:22:
                    a3:2e:92:62:d4:a2:77:ff:63:27:0e:f1:39:5d:b9:
                    d6:33:fa:66:53:90:60:c6:f2:f4:b9:56:8e:ff:65:
                    61:ba:2d:a6:b3:41:8c:12:76:ad:24:ee:c2:c6:f4:
                    e7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:09:5D:3F:91:DC:77:59:6E:31:27:23:A7:93:21:44:63:1A:50:19
            X509v3 Authority Key Identifier:
                keyid:55:6D:2D:AE:71:92:54:53:62:D8:C8:A0:60:56:F0:85:3F:9F:62:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AoPFVyLjCn6KEcLrNWJaS9J91BzNrdLBfNioGr5gS5bF/0/556D2DAE7192545362D8C8A06056F0853F9F623B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/556D2DAE7192545362D8C8A06056F0853F9F623B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoPFVyLjCn6KEcLrNWJaS9J91BzNrdLBfNioGr5gS5bF/0/323830343a383163633a633030303a3a2f33342d3334203d3e20323732343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:81cc:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         45:a9:83:26:83:54:5d:cd:59:d2:14:fb:e7:50:a6:6e:ba:9c:
         95:06:40:e8:1e:39:a1:a2:7d:56:86:35:16:3b:24:5e:87:1f:
         81:62:02:3a:22:71:3d:73:f3:71:75:f1:a1:be:2d:86:64:93:
         5a:43:df:cd:fc:c4:6d:f5:f4:77:31:8d:90:ec:be:66:75:81:
         8f:d4:00:c5:3a:70:fc:1e:df:bf:1d:30:f6:ee:27:d0:9d:05:
         b3:bd:b1:57:03:54:67:d2:97:4d:d4:b4:73:02:fe:a1:69:8c:
         4a:21:21:32:7d:58:8b:e7:0d:70:da:a6:3e:03:5a:37:e4:23:
         10:a1:01:6e:62:00:bf:7f:25:be:07:4e:42:14:04:5c:f4:2b:
         07:77:45:ad:44:ca:08:1a:a1:5a:96:92:48:93:4f:7b:f0:bf:
         a7:ef:ba:63:e5:8c:ce:5a:0a:85:cb:83:98:c0:e9:b4:91:fa:
         54:35:41:80:23:06:f2:ba:9a:f0:da:a6:c3:a2:00:9a:41:a7:
         7c:fc:9d:13:cb:44:f5:f6:49:12:ed:63:18:15:05:8c:db:76:
         ba:20:95:62:ac:27:ec:83:bb:b6:b0:01:c0:78:f5:8e:9f:a1:
         c9:de:04:24:1e:13:6f:84:98:c2:e9:2d:a3:c6:2b:7b:37:53:
         cf:9d:56:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:03:44 2025 by rpki-client