Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/323830343a326462633a613430303a3a2f33382d3338203d3e20323635333030.roa
File:                     323830343a326462633a613430303a3a2f33382d3338203d3e20323635333030.roa (raw, json)
Hash identifier:          46JLsG04KSKkjQaKbw+I/HELfaUjDnmjntEEfSrxHyI=
Subject key identifier:   CD:02:36:94:71:6B:0B:2B:9A:71:56:03:E0:65:08:48:1F:97:A5:15
Certificate issuer:       /CN=FA878ADB9FDAB7635D897E861584C927DCBA2827
Certificate serial:       6D8211075E2FECF2FF8D187B2CE24AACA15D9688
Authority key identifier: FA:87:8A:DB:9F:DA:B7:63:5D:89:7E:86:15:84:C9:27:DC:BA:28:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA878ADB9FDAB7635D897E861584C927DCBA2827.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/323830343a326462633a613430303a3a2f33382d3338203d3e20323635333030.roa
Signing time:             Wed 18 Dec 2024 04:11:07 +0000
ROA not before:           Wed 18 Dec 2024 04:06:07 +0000
ROA not after:            Wed 17 Dec 2025 04:11:07 +0000
asID:                     265300
IP address blocks:        2804:2dbc:a400::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:82:11:07:5e:2f:ec:f2:ff:8d:18:7b:2c:e2:4a:ac:a1:5d:96:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA878ADB9FDAB7635D897E861584C927DCBA2827
        Validity
            Not Before: Dec 18 04:06:07 2024 GMT
            Not After : Dec 17 04:11:07 2025 GMT
        Subject: CN=CD023694716B0B2B9A715603E06508481F97A515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:09:1f:dd:40:d0:c8:fc:cd:7b:58:24:f0:86:
                    61:4a:1f:5c:e9:64:ad:73:82:4f:de:e1:ce:5a:7e:
                    45:2a:4c:e4:85:1c:3e:9b:70:8e:90:3b:44:68:76:
                    67:fc:16:f1:d0:8e:88:70:51:0f:ed:2c:35:c6:1b:
                    f2:c7:36:98:2a:d5:49:b2:aa:e1:da:76:0d:d6:e1:
                    ae:66:55:46:c7:f9:6a:f3:b5:f4:91:a8:d1:22:8a:
                    2d:30:52:82:4b:cf:01:5c:28:de:b9:21:e7:ac:e2:
                    99:24:67:8f:b2:4a:47:56:90:65:73:c5:8d:df:39:
                    4e:83:24:3b:b1:7d:33:27:7e:40:bc:80:3e:46:1b:
                    6a:81:91:95:d3:3e:b2:19:43:60:c5:6f:df:af:05:
                    ec:7c:d5:88:9d:5e:2d:0b:06:3e:63:e0:46:aa:a4:
                    d0:cb:01:9f:ac:ff:6c:97:96:c6:5e:1b:7b:00:2f:
                    5c:d2:e4:32:a8:eb:62:94:09:fc:ee:57:ca:7a:df:
                    2b:f3:96:c4:1f:f1:5e:4a:9c:0f:3a:1b:68:9d:bb:
                    a3:07:3d:cf:0c:e2:d1:ad:0d:3c:65:74:20:8b:6a:
                    c9:1d:ce:41:3c:b4:f0:f6:bb:02:ed:aa:12:f0:9c:
                    73:9d:63:79:32:0f:6e:fd:30:ec:66:c6:ff:da:f9:
                    d8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:02:36:94:71:6B:0B:2B:9A:71:56:03:E0:65:08:48:1F:97:A5:15
            X509v3 Authority Key Identifier:
                keyid:FA:87:8A:DB:9F:DA:B7:63:5D:89:7E:86:15:84:C9:27:DC:BA:28:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/FA878ADB9FDAB7635D897E861584C927DCBA2827.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA878ADB9FDAB7635D897E861584C927DCBA2827.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/323830343a326462633a613430303a3a2f33382d3338203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2dbc:a400::/38

    Signature Algorithm: sha256WithRSAEncryption
         a0:db:ae:75:1b:c5:60:de:f7:78:7f:98:f8:eb:5b:b5:1e:c3:
         73:29:e2:35:32:e8:e5:bc:f8:e1:1c:36:04:0e:8c:e8:06:99:
         04:c4:f2:41:55:12:97:d9:fc:b8:5a:37:36:06:98:0b:bd:8d:
         11:a6:9a:94:56:24:13:21:c2:71:fd:59:a1:99:32:46:81:4a:
         05:56:29:8b:95:6d:ef:55:ec:8e:71:94:d3:90:8d:e8:97:46:
         a6:ac:4c:49:1f:d8:17:b1:46:41:3c:b4:e4:62:a4:09:57:aa:
         ba:a2:c9:44:cc:8f:19:09:52:da:46:16:03:a3:48:fd:a0:c8:
         f9:02:57:04:f4:af:4d:ea:6f:ee:2e:a1:11:93:f9:f2:26:18:
         02:7d:4d:6f:5e:e5:b2:c7:17:33:02:52:fc:cc:10:d7:9d:65:
         34:a7:f0:bb:f7:7d:bb:73:a1:da:cd:22:a3:60:74:77:fc:c6:
         92:6e:11:a5:09:70:04:f5:27:b1:1b:22:75:71:8d:6f:7e:af:
         10:4a:79:d8:90:a8:ba:20:50:c2:22:4b:31:aa:a6:12:ad:58:
         93:39:5c:7d:03:a3:ea:89:13:b1:97:50:77:86:8c:b4:dc:31:
         30:cc:d8:0b:7a:ad:34:49:dd:2a:2f:33:51:b3:a8:4e:0f:b3:
         cc:7b:7a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:51:30 2025 by rpki-client