Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTx2dB5PiTNWxBo5Y6Gsgv5DB5gRy3i8DJQYJWwLP1BZ/0/323830343a386434343a3a2f33322d313238203d3e20323733333436.roa
File:                     323830343a386434343a3a2f33322d313238203d3e20323733333436.roa (raw, json)
Hash identifier:          P2bXzTqONjSHP6lNo6Zqey4yDpJ2NrRdZHs0zqAnZxk=
Subject key identifier:   E7:21:26:43:FF:DE:7E:0E:42:B7:F6:7E:95:EB:05:07:2F:32:2F:B2
Certificate issuer:       /CN=36C70D54DDACCCE385198B3B82C67FCEE369B6D0
Certificate serial:       0DAE37165CC1E22D641D7747452F63BA71ECC2EA
Authority key identifier: 36:C7:0D:54:DD:AC:CC:E3:85:19:8B:3B:82:C6:7F:CE:E3:69:B6:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36C70D54DDACCCE385198B3B82C67FCEE369B6D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTx2dB5PiTNWxBo5Y6Gsgv5DB5gRy3i8DJQYJWwLP1BZ/0/323830343a386434343a3a2f33322d313238203d3e20323733333436.roa
Signing time:             Sat 22 Feb 2025 14:53:30 +0000
ROA not before:           Sat 22 Feb 2025 14:48:30 +0000
ROA not after:            Sat 21 Feb 2026 14:53:30 +0000
asID:                     273346
IP address blocks:        2804:8d44::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:ae:37:16:5c:c1:e2:2d:64:1d:77:47:45:2f:63:ba:71:ec:c2:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36C70D54DDACCCE385198B3B82C67FCEE369B6D0
        Validity
            Not Before: Feb 22 14:48:30 2025 GMT
            Not After : Feb 21 14:53:30 2026 GMT
        Subject: CN=E7212643FFDE7E0E42B7F67E95EB05072F322FB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a8:eb:85:d2:b9:2c:16:b7:b4:0f:e2:7d:56:
                    b2:83:c9:04:47:ea:e2:af:4d:a7:7e:75:4c:40:3b:
                    b7:97:b0:97:79:eb:bf:16:06:93:ef:28:ee:0f:04:
                    25:05:dc:b7:9d:19:63:1e:c0:dd:e7:66:fc:4d:7b:
                    59:af:04:2f:62:ae:db:e4:9d:18:aa:04:51:cd:5f:
                    e9:77:b3:4f:18:8e:8a:2b:3f:c3:a1:e8:8d:59:1e:
                    7e:5c:42:1d:18:05:3b:d6:ae:4f:7e:a6:48:f3:26:
                    af:8b:8f:a6:a3:8b:1c:7f:d4:eb:7d:ff:c4:5f:0a:
                    d3:18:db:01:93:f7:81:89:03:26:89:a7:52:9a:59:
                    e5:ad:a4:f5:07:81:40:55:02:6f:9f:61:3b:9f:ad:
                    0e:88:ee:1f:c5:0e:40:48:a1:af:bd:cf:34:e3:7b:
                    16:5f:56:ef:48:3f:28:62:97:bd:11:cd:ff:59:90:
                    06:92:6d:dc:d5:d7:bc:1e:7c:e6:1a:3a:23:8c:4f:
                    6a:41:12:97:ba:aa:e8:b6:4d:06:83:a9:4b:71:58:
                    7e:d8:8e:9b:78:3b:eb:58:01:06:ef:92:21:ea:3d:
                    57:96:47:29:e1:53:f5:99:91:4b:45:b3:a9:35:cf:
                    b5:19:09:2e:1a:ba:5b:c0:4d:d8:7b:60:e4:61:6c:
                    4c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:21:26:43:FF:DE:7E:0E:42:B7:F6:7E:95:EB:05:07:2F:32:2F:B2
            X509v3 Authority Key Identifier:
                keyid:36:C7:0D:54:DD:AC:CC:E3:85:19:8B:3B:82:C6:7F:CE:E3:69:B6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTx2dB5PiTNWxBo5Y6Gsgv5DB5gRy3i8DJQYJWwLP1BZ/0/36C70D54DDACCCE385198B3B82C67FCEE369B6D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36C70D54DDACCCE385198B3B82C67FCEE369B6D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTx2dB5PiTNWxBo5Y6Gsgv5DB5gRy3i8DJQYJWwLP1BZ/0/323830343a386434343a3a2f33322d313238203d3e20323733333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8d44::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:65:c2:90:43:4b:b8:8d:a2:6a:85:c4:ee:05:50:ef:ce:cc:
         b0:f2:8f:5b:e5:99:ca:3c:c7:ac:ab:f3:cb:32:8b:d0:fe:7d:
         b7:85:80:15:ad:7b:5e:f5:ba:77:68:f0:fd:c6:91:6d:45:fd:
         37:45:45:63:23:2e:d4:53:71:94:4f:96:cf:73:89:1a:f1:b2:
         ce:7c:cb:f2:38:f7:de:f2:19:f5:22:2e:8e:ea:73:08:da:c1:
         b1:18:93:b6:04:7f:3a:45:ac:4c:56:39:d6:2c:db:68:8a:67:
         23:e5:12:d4:b5:22:7d:d3:43:5a:65:07:30:d3:1a:84:49:4c:
         ab:5c:a5:fd:6d:15:f9:b9:96:ca:de:79:48:96:47:46:b8:07:
         2d:43:49:c6:ee:9f:e1:a3:b0:25:90:e0:50:b0:85:e6:71:2e:
         9a:16:cd:7c:c8:0c:91:d9:26:cc:d8:f5:22:d0:fc:65:7b:a5:
         ba:e7:79:9c:5b:66:6a:d5:a8:01:50:2a:c8:6c:1f:99:e2:a2:
         d5:cf:63:b5:7a:e5:e6:0d:de:df:82:85:d2:fd:08:f1:7b:b3:
         4d:77:83:1e:fe:ed:04:76:1e:f7:83:27:32:b8:06:62:6e:a4:
         99:e7:f6:88:74:6a:65:1a:00:8e:d4:e3:b0:01:e6:1c:e7:52:
         bd:73:66:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:45:33 2025 by rpki-client