Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B4RF99GTSkE4YuY7hFCjtyysoLAUUuJCNvhvDrdBYXue/1/323830343a326164383a3a2f33322d313238203d3e20323635313232.roa
File:                     323830343a326164383a3a2f33322d313238203d3e20323635313232.roa (raw, json)
Hash identifier:          RLxxD1M8+HGfLdaLcsQFTt+1PJAM8S5wxa4+CivfJmI=
Subject key identifier:   AA:30:EC:E8:3A:56:5D:B7:81:A3:B3:3A:2D:38:DE:CD:94:88:84:CA
Certificate issuer:       /CN=77220C997C68A28EC6D54317D0A76DDDDA1B99FD
Certificate serial:       794D469B7C916D56B7A8AB001A227F7C63D6A91C
Authority key identifier: 77:22:0C:99:7C:68:A2:8E:C6:D5:43:17:D0:A7:6D:DD:DA:1B:99:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77220C997C68A28EC6D54317D0A76DDDDA1B99FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4RF99GTSkE4YuY7hFCjtyysoLAUUuJCNvhvDrdBYXue/1/323830343a326164383a3a2f33322d313238203d3e20323635313232.roa
Signing time:             Thu 06 Mar 2025 15:07:49 +0000
ROA not before:           Thu 06 Mar 2025 15:02:49 +0000
ROA not after:            Thu 05 Mar 2026 15:07:49 +0000
asID:                     265122
IP address blocks:        2804:2ad8::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:4d:46:9b:7c:91:6d:56:b7:a8:ab:00:1a:22:7f:7c:63:d6:a9:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77220C997C68A28EC6D54317D0A76DDDDA1B99FD
        Validity
            Not Before: Mar  6 15:02:49 2025 GMT
            Not After : Mar  5 15:07:49 2026 GMT
        Subject: CN=AA30ECE83A565DB781A3B33A2D38DECD948884CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f8:d4:61:d4:ca:54:ab:07:7c:a1:f7:42:ab:
                    59:62:73:9c:2b:1e:57:f8:b2:e3:1e:b4:59:d3:15:
                    49:6f:aa:ef:bc:d2:ca:75:b8:3f:2f:03:19:13:70:
                    a7:4e:0d:95:37:79:68:e3:16:b5:5b:a7:27:e3:d9:
                    02:22:d5:11:42:5c:46:6c:b9:1a:ff:f7:b3:9c:a3:
                    af:37:a9:73:65:c3:c8:b4:e6:4d:97:71:1a:d8:50:
                    1c:fe:d2:d7:aa:c3:ed:cd:6d:ee:92:87:83:25:f9:
                    2f:64:a1:cd:74:f2:cf:15:32:8c:97:7e:64:68:f7:
                    a9:bc:99:6c:19:51:24:f6:b9:c8:75:10:8f:3b:32:
                    d3:52:7c:5e:1d:54:bb:ae:e9:07:76:4a:b9:da:c1:
                    5e:67:3f:c7:ed:9d:c3:85:4f:5a:63:e9:ad:67:78:
                    06:d7:30:ff:e6:c4:c0:78:29:31:cb:a4:11:6f:8b:
                    87:d8:4d:8e:65:69:79:fd:1c:9c:c2:a8:ca:5a:0e:
                    b5:94:72:9b:8a:93:13:85:49:fb:c9:ff:17:0b:96:
                    92:44:b0:37:e9:d3:0d:43:d1:9d:1f:08:ab:60:aa:
                    38:57:0c:b1:9f:03:08:41:65:e8:cd:48:65:c0:d5:
                    b7:44:ae:42:15:c0:a8:7c:28:f6:53:8d:54:1d:91:
                    e7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:30:EC:E8:3A:56:5D:B7:81:A3:B3:3A:2D:38:DE:CD:94:88:84:CA
            X509v3 Authority Key Identifier:
                keyid:77:22:0C:99:7C:68:A2:8E:C6:D5:43:17:D0:A7:6D:DD:DA:1B:99:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4RF99GTSkE4YuY7hFCjtyysoLAUUuJCNvhvDrdBYXue/1/77220C997C68A28EC6D54317D0A76DDDDA1B99FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77220C997C68A28EC6D54317D0A76DDDDA1B99FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4RF99GTSkE4YuY7hFCjtyysoLAUUuJCNvhvDrdBYXue/1/323830343a326164383a3a2f33322d313238203d3e20323635313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ad8::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:a6:ec:9d:68:87:4b:e7:c7:5b:d2:43:1d:b3:e6:11:5f:e6:
         50:85:bb:b6:c4:e4:6a:03:8c:2a:85:5f:0a:b2:39:c3:da:45:
         92:94:71:4b:0d:4a:17:22:cf:b6:eb:7e:23:68:12:d5:f7:ce:
         bd:ea:bf:2e:45:fe:8e:f3:61:37:2a:58:a6:df:3c:9c:02:b5:
         51:24:a4:0f:50:46:fc:5a:3e:b3:56:68:12:ab:45:f9:25:d5:
         13:1f:c9:da:70:86:dc:5f:82:71:3b:42:f2:fc:47:c8:f4:05:
         da:94:c6:24:aa:c5:4d:33:20:ba:49:aa:14:c9:b6:7b:59:5b:
         09:b9:38:fd:21:32:d8:28:e2:59:59:3c:5f:ec:b2:37:30:42:
         59:d8:5b:9b:b2:1d:a8:52:69:9d:8c:88:22:ed:9c:4b:66:7b:
         62:0f:d8:e4:23:25:5a:89:f1:73:9d:2f:16:ca:68:62:c0:fa:
         ba:13:03:bb:a2:31:0b:e9:52:2e:1f:cc:38:3b:1b:68:dc:40:
         40:08:82:cb:0c:14:8e:fc:1d:25:55:96:1a:a3:f3:df:63:c4:
         55:64:1d:5a:eb:8d:47:55:81:20:ac:4c:ba:11:e7:f8:f8:df:
         ec:32:9f:bd:6f:08:b2:3b:e8:01:f2:0a:33:6b:61:77:df:26:
         0d:41:52:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 16:42:14 2025 by rpki-client