Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/323830343a343339383a3a2f33322d3438203d3e20323637353738.roa
File:                     323830343a343339383a3a2f33322d3438203d3e20323637353738.roa (raw, json)
Hash identifier:          J4zgwhLThquK3Kt/wr4koXWMmkUIBts4WDUmgKnb9f8=
Subject key identifier:   69:1F:76:27:F3:2A:12:A4:2B:C1:13:56:E0:12:89:1D:2B:77:3C:02
Certificate issuer:       /CN=1AF8EF98196B4BF9759D4778A8E265C6E12D3314
Certificate serial:       31CAA62D996F26BF7538E499B44C2334285AE9C5
Authority key identifier: 1A:F8:EF:98:19:6B:4B:F9:75:9D:47:78:A8:E2:65:C6:E1:2D:33:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AF8EF98196B4BF9759D4778A8E265C6E12D3314.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/323830343a343339383a3a2f33322d3438203d3e20323637353738.roa
Signing time:             Thu 27 Mar 2025 14:37:46 +0000
ROA not before:           Thu 27 Mar 2025 14:32:46 +0000
ROA not after:            Thu 26 Mar 2026 14:37:46 +0000
asID:                     267578
IP address blocks:        2804:4398::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:ca:a6:2d:99:6f:26:bf:75:38:e4:99:b4:4c:23:34:28:5a:e9:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AF8EF98196B4BF9759D4778A8E265C6E12D3314
        Validity
            Not Before: Mar 27 14:32:46 2025 GMT
            Not After : Mar 26 14:37:46 2026 GMT
        Subject: CN=691F7627F32A12A42BC11356E012891D2B773C02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:01:84:9b:44:36:d8:b4:7a:a8:a4:37:a5:fe:
                    91:d1:81:3e:98:9a:ae:9d:1a:ab:d5:e6:1f:ca:74:
                    02:6e:82:01:fc:79:70:75:29:1a:9c:bd:e0:9c:8a:
                    90:ae:83:6a:89:62:52:d7:f6:ae:3f:5a:2d:1c:6d:
                    69:f5:ba:3d:9a:e2:73:dd:d1:f6:68:f6:bf:ac:09:
                    bb:4b:57:ba:af:f9:f5:6c:61:91:06:15:80:5b:97:
                    43:81:0c:10:f6:59:54:a8:d5:7d:23:df:7e:cb:78:
                    73:a0:16:be:dd:4f:b7:26:75:34:f8:fa:6e:4b:c1:
                    c0:70:a2:5d:8a:3a:fb:1d:8b:2d:bc:36:de:cc:17:
                    f4:76:5d:46:48:61:5f:6d:49:86:3d:2d:f4:53:74:
                    eb:ab:8d:a6:54:db:fa:05:b3:70:c2:31:9c:88:d3:
                    f1:a8:61:26:96:4a:cd:52:79:8c:cb:32:61:22:ac:
                    0a:c1:59:92:e9:80:23:9e:3b:62:8c:87:1a:ce:ae:
                    c1:fd:fe:38:06:35:d8:a2:c9:c4:55:cb:d5:bc:79:
                    c2:8a:72:f3:73:c1:b1:0e:17:3f:d5:ac:9f:c5:17:
                    3d:28:4b:26:dc:59:f0:ba:4b:0e:50:5b:24:73:81:
                    b8:74:04:d3:3b:7c:2f:e0:3f:8a:85:d6:6f:e4:1c:
                    50:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:1F:76:27:F3:2A:12:A4:2B:C1:13:56:E0:12:89:1D:2B:77:3C:02
            X509v3 Authority Key Identifier:
                keyid:1A:F8:EF:98:19:6B:4B:F9:75:9D:47:78:A8:E2:65:C6:E1:2D:33:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/1AF8EF98196B4BF9759D4778A8E265C6E12D3314.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AF8EF98196B4BF9759D4778A8E265C6E12D3314.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/323830343a343339383a3a2f33322d3438203d3e20323637353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4398::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:b1:bd:58:bc:80:6a:78:d2:86:af:82:f2:ae:cb:e0:e2:86:
         6f:b6:25:dd:ea:d5:81:d6:c9:7a:87:51:df:22:62:a7:60:d4:
         be:57:6e:9f:0c:a0:de:b4:24:69:70:ad:4d:19:86:3c:83:0f:
         3b:36:e3:8b:29:d0:2a:6f:ce:a5:9d:33:f7:86:1a:ad:17:a8:
         64:d3:f3:84:7b:aa:48:35:e3:3b:d0:2f:71:1f:5b:72:65:82:
         e7:53:73:14:19:e5:f8:4d:92:39:6d:90:c3:1d:50:42:ef:2f:
         93:55:3d:e1:7e:ab:b1:21:a1:2e:92:8b:c6:52:09:ae:60:61:
         4a:be:fa:ba:36:ac:6b:9d:d6:48:49:4f:33:be:00:31:c7:0d:
         4d:7e:97:39:08:5c:4e:0a:61:8e:3e:d7:60:e8:cc:1e:e9:e9:
         53:37:c8:b2:3b:c0:0a:a9:b2:c8:36:f5:68:a7:f3:73:9b:46:
         1a:e4:32:a6:d5:56:d7:90:b2:e0:11:9c:58:8e:2c:69:7e:51:
         90:68:2f:93:23:05:8e:17:4b:18:61:54:32:db:fb:0a:f8:8f:
         92:6f:67:96:2e:a8:97:e9:8f:d0:dc:8b:ef:cb:f1:e2:41:58:
         0b:73:d2:17:b5:ac:55:41:da:b6:8f:f9:3f:ae:8b:3a:6c:37:
         3a:1a:d6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:39:25 2025 by rpki-client