Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cc1U13ZyteufJNZhWM1mLYCe2khiJNkHosdZnhq4AAMU/1/323830343a3736343a3a2f33322d3438203d3e203130373333.roa
File:                     323830343a3736343a3a2f33322d3438203d3e203130373333.roa (raw, json)
Hash identifier:          PFgBmY4q+0sjoLP8LLihex6Ew/hDjod5eXekNIRZVVk=
Subject key identifier:   81:15:A5:C0:B0:C3:53:30:9D:4C:B5:82:D0:C0:6C:2D:36:85:22:5E
Certificate issuer:       /CN=7DE6E0779DD8FBF98FE9AD24531A24F792D26451
Certificate serial:       64C4DD07E6A3F1A9385E6A2E2B7E1A64650C7034
Authority key identifier: 7D:E6:E0:77:9D:D8:FB:F9:8F:E9:AD:24:53:1A:24:F7:92:D2:64:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DE6E0779DD8FBF98FE9AD24531A24F792D26451.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cc1U13ZyteufJNZhWM1mLYCe2khiJNkHosdZnhq4AAMU/1/323830343a3736343a3a2f33322d3438203d3e203130373333.roa
Signing time:             Thu 06 Mar 2025 02:00:08 +0000
ROA not before:           Thu 06 Mar 2025 01:55:08 +0000
ROA not after:            Thu 05 Mar 2026 02:00:08 +0000
asID:                     10733
IP address blocks:        2804:764::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:c4:dd:07:e6:a3:f1:a9:38:5e:6a:2e:2b:7e:1a:64:65:0c:70:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DE6E0779DD8FBF98FE9AD24531A24F792D26451
        Validity
            Not Before: Mar  6 01:55:08 2025 GMT
            Not After : Mar  5 02:00:08 2026 GMT
        Subject: CN=8115A5C0B0C353309D4CB582D0C06C2D3685225E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:14:6e:41:a8:a0:c8:3a:e8:bc:35:79:95:bf:
                    e8:17:fc:63:09:30:8b:4f:9f:37:28:b3:34:e3:33:
                    cc:a1:97:52:bf:d7:5a:15:e6:9b:f9:ec:0a:0b:35:
                    31:e7:e5:be:ec:c5:df:8a:08:8c:f1:e0:3a:2f:47:
                    c6:cc:b0:66:4d:d7:8d:a7:8b:a0:26:e8:87:06:cf:
                    33:f8:21:ce:b4:97:8a:cc:63:ca:4b:79:26:50:c6:
                    a4:4e:9a:a9:c4:67:f0:54:87:fa:ac:4e:bf:25:90:
                    27:fe:87:84:3d:d4:53:c4:16:3c:7e:1b:06:21:3c:
                    a7:f6:d5:77:83:97:3a:da:c9:b4:d7:0e:29:67:97:
                    b6:77:96:6d:7c:bf:bd:5a:dc:79:c3:68:02:73:2b:
                    42:08:9a:05:56:9c:b6:96:1d:f8:5a:71:eb:fa:26:
                    90:4e:d6:a0:71:90:af:1e:e5:ac:0a:2e:89:f5:eb:
                    96:b9:e2:1e:b1:ab:65:70:dc:10:2e:d9:92:3b:43:
                    54:81:c1:10:09:e4:4b:c2:05:e1:47:b6:31:13:34:
                    77:3a:ea:90:fb:16:04:2f:e1:1b:31:c4:fb:99:f6:
                    a9:b4:85:20:b3:90:e7:61:d2:71:c1:6c:a3:8f:59:
                    8b:3f:0a:33:aa:3a:2c:e8:67:4f:de:32:83:ca:7f:
                    59:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:15:A5:C0:B0:C3:53:30:9D:4C:B5:82:D0:C0:6C:2D:36:85:22:5E
            X509v3 Authority Key Identifier:
                keyid:7D:E6:E0:77:9D:D8:FB:F9:8F:E9:AD:24:53:1A:24:F7:92:D2:64:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cc1U13ZyteufJNZhWM1mLYCe2khiJNkHosdZnhq4AAMU/1/7DE6E0779DD8FBF98FE9AD24531A24F792D26451.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DE6E0779DD8FBF98FE9AD24531A24F792D26451.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cc1U13ZyteufJNZhWM1mLYCe2khiJNkHosdZnhq4AAMU/1/323830343a3736343a3a2f33322d3438203d3e203130373333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:764::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:bd:5d:1e:88:76:1e:c6:1b:c4:ef:9c:13:fa:c1:1f:01:5d:
         c0:8a:0f:1b:c4:21:3a:05:7a:17:59:d9:aa:fe:21:31:53:21:
         cc:a0:f5:f2:e1:6d:01:a9:7d:6c:9d:34:4d:80:b2:d2:32:6b:
         7f:9e:b9:c8:b8:a9:cd:20:10:ae:4e:06:09:91:53:f3:e1:9b:
         7f:ac:30:58:eb:72:71:cb:42:8f:77:dc:b1:04:d5:b3:e5:cc:
         74:24:83:a4:e4:5b:a2:43:d9:0c:21:64:5d:2e:9d:84:74:37:
         30:02:24:1e:bc:b9:3e:5a:3d:d9:28:a6:40:98:7f:ea:96:05:
         6d:c8:a2:0c:5f:c5:50:78:32:22:d6:0b:da:b0:a3:1d:0e:d7:
         8c:70:7e:25:5a:87:0a:33:64:47:c6:d4:e2:0f:4a:9d:7b:67:
         bf:3a:2e:38:f9:73:82:c1:4d:3f:88:37:c3:9f:c4:33:18:a8:
         b6:b0:69:d0:e3:69:93:e8:21:29:03:51:6f:11:ca:d7:59:ea:
         12:4b:21:b5:02:64:84:54:84:29:96:d2:24:9e:f1:4c:39:ee:
         65:cc:00:71:27:98:85:63:19:8c:9f:a0:a3:d6:fb:93:8b:04:
         ff:e2:bf:5d:46:54:d6:1b:eb:f4:db:0d:7a:b4:f2:ac:e5:41:
         af:e5:a3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:13:31 2025 by rpki-client