Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CS9SkHvPoQ5CbbhCzLW49iwni9a1p9UPxAiMWHzMjwBV/1/323830343a376438383a3a2f33322d3336203d3e20323731353637.roa
File:                     323830343a376438383a3a2f33322d3336203d3e20323731353637.roa (raw, json)
Hash identifier:          f/RWki9lG2d8+nfINYAinhzt+/MS80DoPP1O4uiAkjA=
Subject key identifier:   66:54:0A:8B:47:25:0C:F2:A7:59:DA:0F:B5:90:90:13:76:E3:CE:9E
Certificate issuer:       /CN=7E39AD7329EE99AAF1350BE6B2DE00E2851CACA9
Certificate serial:       2D239505F34656DD1339F089EA64C3109CDD4EE9
Authority key identifier: 7E:39:AD:73:29:EE:99:AA:F1:35:0B:E6:B2:DE:00:E2:85:1C:AC:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E39AD7329EE99AAF1350BE6B2DE00E2851CACA9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CS9SkHvPoQ5CbbhCzLW49iwni9a1p9UPxAiMWHzMjwBV/1/323830343a376438383a3a2f33322d3336203d3e20323731353637.roa
Signing time:             Wed 05 Mar 2025 19:00:06 +0000
ROA not before:           Wed 05 Mar 2025 18:55:06 +0000
ROA not after:            Wed 04 Mar 2026 19:00:06 +0000
asID:                     271567
IP address blocks:        2804:7d88::/32 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:23:95:05:f3:46:56:dd:13:39:f0:89:ea:64:c3:10:9c:dd:4e:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E39AD7329EE99AAF1350BE6B2DE00E2851CACA9
        Validity
            Not Before: Mar  5 18:55:06 2025 GMT
            Not After : Mar  4 19:00:06 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:40:7a:d1:cb:70:14:a6:17:90:fc:2f:59:78:
                    85:9d:cd:d8:34:6d:d4:e9:8a:d5:43:70:3e:3d:30:
                    6d:d8:4e:36:0b:54:1c:f1:7b:8f:90:8e:79:43:b4:
                    1c:24:e6:c9:13:78:9d:a4:e0:4c:cc:c3:f0:75:9e:
                    ff:aa:6f:aa:dc:12:c5:c0:15:13:74:f5:80:99:f9:
                    59:21:a2:4a:23:04:3f:ae:c8:04:f0:24:e4:45:04:
                    bd:48:d2:9d:95:d4:e8:6c:01:a1:49:53:86:cd:4d:
                    7b:52:3f:da:bc:87:1d:f9:d6:5e:22:80:12:e3:fc:
                    48:3d:99:e0:5f:37:0c:f1:9a:4d:bf:bd:89:5e:e5:
                    2f:70:1f:dd:4f:66:5f:1c:d5:b6:27:41:8c:0e:aa:
                    3f:85:04:b8:96:c5:7c:ff:33:26:ee:c7:bd:e5:4b:
                    47:22:06:b4:99:9c:4e:b9:07:2d:c2:3c:83:04:59:
                    23:32:62:6e:51:bc:c4:47:a9:44:d7:c9:ab:c9:28:
                    f4:9f:88:0d:27:9c:48:7d:4a:66:f5:7c:07:35:c7:
                    92:c3:68:94:38:6e:80:f0:21:36:c4:22:c0:84:f3:
                    0a:da:13:a0:b1:23:2e:71:57:02:46:3e:d9:02:12:
                    4f:5f:9a:21:8c:0a:3d:23:6d:a4:1a:41:3a:4c:fe:
                    f5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:54:0A:8B:47:25:0C:F2:A7:59:DA:0F:B5:90:90:13:76:E3:CE:9E
            X509v3 Authority Key Identifier:
                keyid:7E:39:AD:73:29:EE:99:AA:F1:35:0B:E6:B2:DE:00:E2:85:1C:AC:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CS9SkHvPoQ5CbbhCzLW49iwni9a1p9UPxAiMWHzMjwBV/1/7E39AD7329EE99AAF1350BE6B2DE00E2851CACA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E39AD7329EE99AAF1350BE6B2DE00E2851CACA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CS9SkHvPoQ5CbbhCzLW49iwni9a1p9UPxAiMWHzMjwBV/1/323830343a376438383a3a2f33322d3336203d3e20323731353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d88::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:e4:4b:cb:4a:96:cf:35:c9:e0:63:62:76:06:fb:c0:01:2d:
         8b:a5:6a:26:04:c4:60:a9:f6:4d:6e:2b:70:c4:78:4b:a1:5d:
         6b:e8:cf:d8:19:fd:32:7a:c8:91:a8:46:d3:50:06:da:63:14:
         2f:a7:00:24:1d:f5:1c:53:c3:8d:cf:c9:16:8b:32:f8:ad:16:
         12:d7:80:54:47:92:d7:8d:34:a6:d1:e5:1f:a7:2b:f7:9e:9e:
         fe:51:60:f3:34:9a:05:f5:b9:08:71:6a:36:d6:5a:27:eb:0e:
         0e:eb:c6:9c:e2:9c:50:50:40:23:95:a7:47:fa:c3:6a:db:cb:
         85:26:94:57:82:fe:4e:b7:77:56:92:2d:e8:49:bc:32:70:06:
         5b:ea:6e:26:fb:f8:29:64:67:eb:7f:d2:cb:71:99:19:2f:f7:
         a1:97:73:1b:22:b4:31:1b:5c:79:78:b0:42:ff:93:9d:6a:20:
         73:30:77:a8:e3:d0:af:09:1d:93:99:5e:96:fd:3b:1c:5b:e2:
         0c:e5:c6:7c:9b:fc:97:be:a5:ff:66:5b:43:c7:40:5e:c6:4f:
         ba:60:fe:c2:65:57:38:16:d7:c3:a5:4d:cc:0d:f6:6f:d2:22:
         bf:64:e0:e4:5f:ff:44:f4:91:d2:81:a6:6c:06:8d:10:5e:c2:
         de:30:64:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:53:44 2025 by rpki-client