Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C1ozXjpPjhjyM2R8SeRFGC8NTG8mLnpGtbPngX9MNxFS/0/323830343a386463383a3a2f33322d313238203d3e20323733333830.roa
File:                     323830343a386463383a3a2f33322d313238203d3e20323733333830.roa (raw, json)
Hash identifier:          PlofaURNoWZC+ZOr9DIdFHmdlHsugNYfqHKrK2/xnEQ=
Subject key identifier:   72:8A:71:AF:D7:F7:85:9E:24:AA:A2:FF:28:61:D9:92:31:39:82:CB
Certificate issuer:       /CN=9AA45195B4C3DD3FC59F8A256C1111D59F3D3207
Certificate serial:       33B0BD3E9FA85441553611EB0C8F954B7756DDE4
Authority key identifier: 9A:A4:51:95:B4:C3:DD:3F:C5:9F:8A:25:6C:11:11:D5:9F:3D:32:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AA45195B4C3DD3FC59F8A256C1111D59F3D3207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C1ozXjpPjhjyM2R8SeRFGC8NTG8mLnpGtbPngX9MNxFS/0/323830343a386463383a3a2f33322d313238203d3e20323733333830.roa
Signing time:             Wed 19 Mar 2025 21:56:03 +0000
ROA not before:           Wed 19 Mar 2025 21:51:03 +0000
ROA not after:            Wed 18 Mar 2026 21:56:03 +0000
asID:                     273380
IP address blocks:        2804:8dc8::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:b0:bd:3e:9f:a8:54:41:55:36:11:eb:0c:8f:95:4b:77:56:dd:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AA45195B4C3DD3FC59F8A256C1111D59F3D3207
        Validity
            Not Before: Mar 19 21:51:03 2025 GMT
            Not After : Mar 18 21:56:03 2026 GMT
        Subject: CN=728A71AFD7F7859E24AAA2FF2861D992313982CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:87:88:8a:c6:77:21:b8:a3:e7:65:bb:fa:9a:
                    78:70:f3:b1:60:f2:24:bd:4f:47:96:44:81:d4:f8:
                    22:76:6d:59:0c:aa:e0:2f:13:1d:76:c4:0d:79:47:
                    a6:6f:0d:a1:c0:1f:64:54:a9:e3:10:da:99:15:19:
                    3c:18:bf:8e:f3:b7:2c:a4:4a:46:eb:7d:18:f7:c4:
                    c7:d7:23:76:a0:a3:08:2c:ac:93:63:a7:51:47:cf:
                    18:e8:17:9f:f4:a8:7b:f4:c9:6f:97:34:f3:ea:d7:
                    04:71:67:e3:49:b6:77:e7:af:db:b1:2b:b0:ce:92:
                    fa:f9:a3:ab:65:fe:31:fa:4e:05:87:49:74:49:70:
                    ff:95:ed:51:4d:e1:4a:f4:9e:a8:d3:db:72:60:e3:
                    80:ea:41:6d:d1:37:cc:4e:cc:fe:98:27:71:75:d0:
                    06:86:43:91:7e:13:8b:b3:54:72:dc:04:9a:ee:c4:
                    88:9c:52:71:f4:5c:48:13:0c:a3:1c:37:91:6d:59:
                    a1:95:7d:99:ca:ad:a2:2a:85:54:64:67:04:f0:f0:
                    a1:d4:4b:e3:d2:98:6f:e8:8d:60:8a:43:6d:f9:d5:
                    9e:c2:f8:2f:8c:8e:a2:d1:10:2a:be:a7:a0:2f:cd:
                    e3:02:08:5f:10:49:42:f8:ce:93:7c:9b:bb:6a:6e:
                    69:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8A:71:AF:D7:F7:85:9E:24:AA:A2:FF:28:61:D9:92:31:39:82:CB
            X509v3 Authority Key Identifier:
                keyid:9A:A4:51:95:B4:C3:DD:3F:C5:9F:8A:25:6C:11:11:D5:9F:3D:32:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C1ozXjpPjhjyM2R8SeRFGC8NTG8mLnpGtbPngX9MNxFS/0/9AA45195B4C3DD3FC59F8A256C1111D59F3D3207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AA45195B4C3DD3FC59F8A256C1111D59F3D3207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C1ozXjpPjhjyM2R8SeRFGC8NTG8mLnpGtbPngX9MNxFS/0/323830343a386463383a3a2f33322d313238203d3e20323733333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8dc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:50:58:27:d2:f9:96:cc:47:e4:b5:e9:70:5b:7e:ea:52:5d:
         8d:a2:72:28:e4:27:6e:6f:e3:54:72:e9:8b:29:ef:d7:e1:c1:
         bd:2d:ba:34:73:d1:95:8c:e1:9a:0d:45:a3:0e:2a:81:9a:23:
         02:8e:0a:86:7e:a0:40:e1:43:95:ec:53:27:07:43:b0:ba:bd:
         bc:c5:9e:4a:62:fa:11:9a:80:4f:1e:d3:9e:4f:10:ba:4f:34:
         00:cb:d7:1d:ab:87:e1:b1:56:4c:4d:d1:f0:65:e9:0b:ae:6d:
         44:9f:e0:2b:b6:db:76:d9:97:3d:62:85:25:ef:02:cb:3f:c9:
         b1:93:d3:c9:3f:fc:e2:a6:5d:a6:82:55:1f:3c:0d:e7:85:ef:
         6c:2e:72:cd:c5:a0:ee:14:d4:cb:d6:8d:34:76:8f:ca:fb:77:
         1a:80:73:81:2f:45:98:08:49:25:94:0f:77:a0:48:78:b7:b5:
         19:28:60:68:07:00:b9:20:55:eb:a9:31:07:f1:6f:04:f2:40:
         4a:e0:f6:5a:58:0b:23:c7:df:93:4a:3a:0c:01:dd:12:33:a0:
         d2:58:83:c1:28:aa:0a:8e:ce:5b:3b:9c:ca:35:ad:66:34:fc:
         78:50:37:c9:6d:38:73:96:cd:f7:7e:7e:16:7a:71:b0:ea:cf:
         cb:3b:6a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:08:23 2025 by rpki-client