Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/323830343a326462633a653030303a3a2f33382d3338203d3e20323635333030.roa
File:                     323830343a326462633a653030303a3a2f33382d3338203d3e20323635333030.roa (raw, json)
Hash identifier:          juLCeoq8okn8JbGezpwh2WMxII0yTWwaIL6SlrbXAPw=
Subject key identifier:   12:88:5B:64:99:EE:DB:6E:C4:E7:A3:FD:9A:AC:F6:AF:06:96:26:CD
Certificate issuer:       /CN=FA878ADB9FDAB7635D897E861584C927DCBA2827
Certificate serial:       2BE55277FF3D680D9F11E1B42920C84BDAA2CB77
Authority key identifier: FA:87:8A:DB:9F:DA:B7:63:5D:89:7E:86:15:84:C9:27:DC:BA:28:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA878ADB9FDAB7635D897E861584C927DCBA2827.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/323830343a326462633a653030303a3a2f33382d3338203d3e20323635333030.roa
Signing time:             Wed 18 Dec 2024 04:11:08 +0000
ROA not before:           Wed 18 Dec 2024 04:06:08 +0000
ROA not after:            Wed 17 Dec 2025 04:11:08 +0000
asID:                     265300
IP address blocks:        2804:2dbc:e000::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:e5:52:77:ff:3d:68:0d:9f:11:e1:b4:29:20:c8:4b:da:a2:cb:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA878ADB9FDAB7635D897E861584C927DCBA2827
        Validity
            Not Before: Dec 18 04:06:08 2024 GMT
            Not After : Dec 17 04:11:08 2025 GMT
        Subject: CN=12885B6499EEDB6EC4E7A3FD9AACF6AF069626CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6f:c0:44:e7:12:f4:e6:c3:48:08:8b:3b:61:
                    15:3a:b4:6a:45:9e:f4:dc:77:9c:b9:fd:bb:f6:48:
                    87:48:2b:78:e3:fc:2d:53:84:af:23:3d:59:9d:cc:
                    39:70:79:73:95:1b:64:0e:dc:bc:97:dc:10:11:a5:
                    f7:8e:75:4b:bc:fe:d3:e7:12:7e:2c:1a:2a:bb:45:
                    b5:00:e8:83:ab:84:5f:e6:2c:0a:d6:bb:7e:f6:26:
                    00:5c:e3:68:09:63:d8:91:af:f5:e2:ef:3c:69:e7:
                    cc:83:de:e4:7b:f1:86:8a:e3:d6:55:b8:8c:05:54:
                    a8:a7:24:0c:5c:38:7e:6e:cb:c4:3e:a5:63:a1:20:
                    e3:6b:c6:8d:44:d0:4e:ca:70:7e:0b:8e:b7:2f:f9:
                    1f:09:59:5c:6c:d5:48:fd:62:04:89:94:1f:1c:d6:
                    52:e8:7a:d1:a4:0b:f6:c9:f4:c1:15:00:d2:1c:8a:
                    3c:aa:2a:16:fe:42:cd:f2:9f:29:34:99:40:0c:be:
                    e6:85:2b:6c:d3:87:7a:1e:07:20:14:18:91:f9:2f:
                    39:5a:aa:78:f2:50:e9:a8:46:61:49:63:32:30:f7:
                    6e:f6:5a:c3:a1:c4:85:5a:90:53:5f:3a:ab:56:9c:
                    5f:2e:99:cf:fc:41:ff:0f:18:c5:69:8e:b0:14:e6:
                    10:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:88:5B:64:99:EE:DB:6E:C4:E7:A3:FD:9A:AC:F6:AF:06:96:26:CD
            X509v3 Authority Key Identifier:
                keyid:FA:87:8A:DB:9F:DA:B7:63:5D:89:7E:86:15:84:C9:27:DC:BA:28:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/FA878ADB9FDAB7635D897E861584C927DCBA2827.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA878ADB9FDAB7635D897E861584C927DCBA2827.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/323830343a326462633a653030303a3a2f33382d3338203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2dbc:e000::/38

    Signature Algorithm: sha256WithRSAEncryption
         83:ea:bf:bd:6a:70:92:c0:95:5f:d6:80:c5:14:5b:bd:d4:20:
         67:9b:4f:a1:a3:5c:a1:46:43:e6:2e:a0:c9:9c:4b:bf:06:06:
         c5:f1:a6:7f:c2:cf:c5:c7:47:c6:6a:33:6c:06:e1:e0:0c:5e:
         f2:5d:29:4b:e8:fc:6a:5e:83:09:36:4f:76:46:ab:9d:46:28:
         de:b6:81:fa:08:cb:f9:e0:2e:4b:53:78:b7:37:42:be:5d:62:
         26:af:18:43:2c:c1:6d:df:33:c9:35:32:1b:ef:f7:52:a9:ae:
         d3:06:aa:e1:74:91:ab:4b:ab:dc:5a:c0:aa:7a:c3:91:a9:4e:
         87:61:16:a7:1f:04:c7:64:51:44:21:0f:15:31:58:43:8c:69:
         aa:34:62:fd:33:80:09:26:2a:ea:44:77:d0:cd:2d:63:d5:05:
         db:b2:89:96:05:6c:ef:b0:a1:3b:3f:56:c1:f3:af:d6:e2:1e:
         c3:27:ac:6c:b5:a4:88:3e:7a:90:36:99:81:a3:f7:af:bd:0f:
         2c:1c:bb:c7:28:de:9a:36:06:cb:e9:b5:d8:df:11:44:66:59:
         57:8f:21:23:b4:94:2d:a6:6c:07:cb:1c:27:41:f5:48:32:0c:
         9d:e6:fa:ca:93:b3:67:59:9a:17:ac:52:5f:d6:5b:a3:7c:48:
         9f:b7:f8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:51:23 2025 by rpki-client