Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/323830343a333734343a3a2f33322d313238203d3e20323636343030.roa
File:                     323830343a333734343a3a2f33322d313238203d3e20323636343030.roa (raw, json)
Hash identifier:          40WaVP8Svoxs+qZKP+igdLA9rTsAwD+SLbjFEI4LGxs=
Subject key identifier:   48:EF:A0:33:F8:3A:D1:85:1B:8E:95:B4:71:66:1C:50:B3:7D:CF:B6
Certificate issuer:       /CN=A653D5055FC338B089E2C732382682788F082F11
Certificate serial:       783653DD2247EF8B15ACCF9CB6E116D0CC3E15DC
Authority key identifier: A6:53:D5:05:5F:C3:38:B0:89:E2:C7:32:38:26:82:78:8F:08:2F:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A653D5055FC338B089E2C732382682788F082F11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/323830343a333734343a3a2f33322d313238203d3e20323636343030.roa
Signing time:             Thu 06 Mar 2025 10:00:32 +0000
ROA not before:           Thu 06 Mar 2025 09:55:32 +0000
ROA not after:            Thu 05 Mar 2026 10:00:32 +0000
asID:                     266400
IP address blocks:        2804:3744::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:36:53:dd:22:47:ef:8b:15:ac:cf:9c:b6:e1:16:d0:cc:3e:15:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A653D5055FC338B089E2C732382682788F082F11
        Validity
            Not Before: Mar  6 09:55:32 2025 GMT
            Not After : Mar  5 10:00:32 2026 GMT
        Subject: CN=48EFA033F83AD1851B8E95B471661C50B37DCFB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f4:d1:e4:53:fd:d9:bc:67:47:e1:23:bc:e6:
                    3f:60:81:b3:c5:f1:d8:62:f8:8e:2f:7e:f4:55:5f:
                    36:90:d8:f2:2b:ca:25:c9:99:08:d4:09:0b:d2:00:
                    29:a6:3b:7d:83:84:61:db:db:04:e0:8a:ec:d2:07:
                    2e:cf:df:3d:dc:cc:65:fd:16:e8:1c:7b:e0:ed:e9:
                    2a:b3:da:13:21:ed:ac:e8:9d:46:80:42:1b:67:c4:
                    c7:fa:43:b9:90:3b:11:be:c0:0b:0b:4f:e1:db:dc:
                    8d:d7:d8:e0:e5:d5:da:2c:d6:88:68:68:25:ae:b8:
                    f0:fb:60:56:7a:64:64:bd:c6:d3:13:93:2a:a4:5f:
                    d2:23:8c:ee:1f:b6:39:41:9e:60:e0:4e:bf:ee:47:
                    e7:b5:47:67:88:d6:47:49:6c:de:af:e4:6c:90:82:
                    43:a2:ee:33:5e:da:66:7b:77:31:64:7e:19:f0:41:
                    6d:2a:7a:21:24:ad:9d:51:70:d7:cc:4e:ee:8b:d5:
                    3d:c4:28:cb:ce:89:88:f9:7b:68:0a:0d:77:17:6f:
                    d7:0b:e0:f7:e5:68:a5:ad:29:6b:0c:29:1e:01:21:
                    48:c7:d8:36:9e:ce:75:dc:07:c8:82:cb:90:6b:28:
                    8c:cc:be:c1:ab:21:1e:9a:53:2c:c1:1b:39:1f:4a:
                    6e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:EF:A0:33:F8:3A:D1:85:1B:8E:95:B4:71:66:1C:50:B3:7D:CF:B6
            X509v3 Authority Key Identifier:
                keyid:A6:53:D5:05:5F:C3:38:B0:89:E2:C7:32:38:26:82:78:8F:08:2F:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A653D5055FC338B089E2C732382682788F082F11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/323830343a333734343a3a2f33322d313238203d3e20323636343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3744::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:51:51:35:05:0e:13:11:ab:ca:5e:fc:7a:d2:71:91:ab:1a:
         cb:f1:19:66:a4:20:af:55:bb:73:d9:3a:af:38:79:29:b0:e9:
         85:db:cd:37:a1:6f:e1:c2:ab:aa:43:82:70:5c:65:79:6b:06:
         72:af:49:01:28:78:01:da:67:fd:e7:e2:58:cd:d4:87:65:f9:
         1c:53:d4:7e:2b:09:ae:7a:f2:14:64:08:c4:27:2a:77:88:40:
         45:66:cb:3d:fc:75:3f:61:18:48:9c:de:cb:4b:74:cd:39:de:
         d9:ea:1a:02:44:04:60:b6:f6:45:1e:b8:c9:c0:10:d4:4a:74:
         18:11:c0:1c:9f:f0:06:58:35:d4:ba:49:4b:99:bb:56:96:2f:
         23:f3:16:80:86:c3:90:44:e7:32:37:44:e8:6f:db:3f:de:81:
         3c:5c:82:74:bf:cb:9f:7a:a0:b4:cd:06:b3:ec:d4:5b:ef:41:
         bf:40:0b:b3:45:7a:d5:a0:34:b6:24:d0:52:28:b8:44:e5:7b:
         05:12:e9:29:dc:cf:69:95:8f:b7:d4:c4:fa:96:50:4a:04:bb:
         20:2f:68:3a:a6:39:4a:b6:a3:ef:38:dc:1e:15:7a:ed:df:e5:
         6a:6b:ae:49:26:a3:9b:ba:10:e1:d1:aa:bb:56:35:ca:02:63:
         53:d7:23:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:39:17 2025 by rpki-client