Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a3230303a3a2f34302d3430203d3e20323633353431.roa
File:                     323830343a313339383a3230303a3a2f34302d3430203d3e20323633353431.roa (raw, json)
Hash identifier:          N0P0oNA70bBb0jffsS2mAVkJqP7TepVesJf8FTbsE+8=
Subject key identifier:   ED:A5:7C:24:31:07:85:21:F1:81:5E:11:37:2B:FD:4C:8D:B4:57:36
Certificate issuer:       /CN=DFA5F9058A3FC234221062FC10FD9D6253F81867
Certificate serial:       05DEDFDC6B91962ADFA070BFB09EA96286CB03A0
Authority key identifier: DF:A5:F9:05:8A:3F:C2:34:22:10:62:FC:10:FD:9D:62:53:F8:18:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFA5F9058A3FC234221062FC10FD9D6253F81867.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a3230303a3a2f34302d3430203d3e20323633353431.roa
Signing time:             Thu 09 Jan 2025 14:06:41 +0000
ROA not before:           Thu 09 Jan 2025 14:01:41 +0000
ROA not after:            Thu 08 Jan 2026 14:06:41 +0000
asID:                     263541
IP address blocks:        2804:1398:200::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:de:df:dc:6b:91:96:2a:df:a0:70:bf:b0:9e:a9:62:86:cb:03:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFA5F9058A3FC234221062FC10FD9D6253F81867
        Validity
            Not Before: Jan  9 14:01:41 2025 GMT
            Not After : Jan  8 14:06:41 2026 GMT
        Subject: CN=EDA57C2431078521F1815E11372BFD4C8DB45736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ff:fa:de:33:83:91:49:19:39:43:a3:2a:e1:
                    3c:45:4e:d2:de:c1:06:82:9a:48:5f:7f:0c:23:d4:
                    51:91:ea:75:24:f7:5e:4c:8f:d9:47:0c:2b:72:a0:
                    52:50:d8:79:c3:d0:0f:9f:f8:30:49:76:15:90:f6:
                    3f:6e:29:5d:6f:cf:ff:5f:77:ce:4f:4b:cd:fc:a5:
                    55:7e:55:1f:25:2c:82:b5:91:1d:37:eb:33:1c:93:
                    a3:03:33:27:d0:2b:1a:f9:c6:86:4d:13:9a:7c:c3:
                    cb:60:fd:46:e3:86:05:5a:3c:05:5a:39:7f:0d:09:
                    95:3c:b3:2a:a8:c1:b4:0c:85:df:1f:37:62:59:5e:
                    d6:25:02:71:56:cd:9b:4d:79:da:3d:4e:b4:5c:9d:
                    f9:17:c3:fe:a4:25:5b:bf:a1:49:0e:56:ed:dc:e9:
                    91:72:51:58:ef:71:a0:11:84:93:dc:47:79:94:cd:
                    bc:bc:39:fb:02:4c:91:c3:bd:2f:2b:37:b9:b7:00:
                    87:21:81:26:46:c3:f6:4d:ec:bd:b0:df:45:55:99:
                    52:b7:5e:0b:b3:18:da:13:04:6f:be:f5:02:e5:44:
                    b7:21:1c:4b:ba:d5:aa:bb:b5:01:3d:0f:59:a8:7f:
                    a8:59:e3:17:68:a7:b0:d4:f8:9f:84:b2:87:83:56:
                    39:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A5:7C:24:31:07:85:21:F1:81:5E:11:37:2B:FD:4C:8D:B4:57:36
            X509v3 Authority Key Identifier:
                keyid:DF:A5:F9:05:8A:3F:C2:34:22:10:62:FC:10:FD:9D:62:53:F8:18:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/DFA5F9058A3FC234221062FC10FD9D6253F81867.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFA5F9058A3FC234221062FC10FD9D6253F81867.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a3230303a3a2f34302d3430203d3e20323633353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1398:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         3e:28:bf:36:f5:62:1b:d1:31:6f:dc:05:a4:d7:7c:f9:a3:92:
         e9:ee:2f:0b:89:8e:a5:a9:9f:47:60:e0:0c:49:d6:f3:98:01:
         45:50:5a:9f:ba:3d:d4:52:37:55:bc:08:91:04:fb:05:f3:28:
         c8:f8:aa:76:3e:cc:33:22:50:6c:8c:2b:0c:73:51:19:f9:68:
         6f:8e:24:b8:93:03:3b:e5:76:a7:52:10:1c:34:4f:72:eb:f8:
         3b:bf:8b:a4:9b:4a:c7:f7:ea:ed:dc:b4:82:62:b8:c8:92:62:
         18:da:be:cc:17:52:a3:3c:a8:9c:00:f4:54:16:31:db:88:eb:
         62:a0:57:e6:b0:98:32:95:02:85:a6:b2:85:7c:f2:e5:93:2e:
         64:fd:a2:67:a0:80:25:a2:2f:3e:4e:b7:c0:24:8c:be:66:a1:
         57:db:84:5f:ed:c2:d8:15:d3:4d:a1:8a:b1:30:23:8e:16:58:
         14:a1:46:72:a0:b0:64:17:cf:8c:22:f3:a0:cb:5b:49:dd:7a:
         cb:45:55:88:98:ac:1f:5a:45:17:90:7e:22:3d:ed:b1:4c:9b:
         ae:e2:f4:35:68:d2:ea:de:a1:cb:62:5b:62:0f:c6:df:a3:11:
         c3:6d:22:75:70:2e:e9:13:06:ce:9a:51:41:ba:2c:0f:8c:df:
         16:ab:4d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:49:42 2025 by rpki-client