Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/323830343a386166383a3a2f33332d3333203d3e20323733373034.roa
File:                     323830343a386166383a3a2f33332d3333203d3e20323733373034.roa (raw, json)
Hash identifier:          lVIEpj3cpdhSjw2FDVpASEphHraxx6GwtHsUNs3N4fA=
Subject key identifier:   C2:1C:80:60:19:19:E7:FB:56:3B:CF:E2:66:67:FF:9B:59:88:CF:61
Certificate issuer:       /CN=8DD8D738AA0EAA0C2D242A7BB2DF31E32A41B822
Certificate serial:       508138162119B7EB13C6C9428490AC3EB12F097E
Authority key identifier: 8D:D8:D7:38:AA:0E:AA:0C:2D:24:2A:7B:B2:DF:31:E3:2A:41:B8:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DD8D738AA0EAA0C2D242A7BB2DF31E32A41B822.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/323830343a386166383a3a2f33332d3333203d3e20323733373034.roa
Signing time:             Tue 18 Feb 2025 18:03:43 +0000
ROA not before:           Tue 18 Feb 2025 17:58:43 +0000
ROA not after:            Tue 17 Feb 2026 18:03:43 +0000
asID:                     273704
IP address blocks:        2804:8af8::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:81:38:16:21:19:b7:eb:13:c6:c9:42:84:90:ac:3e:b1:2f:09:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DD8D738AA0EAA0C2D242A7BB2DF31E32A41B822
        Validity
            Not Before: Feb 18 17:58:43 2025 GMT
            Not After : Feb 17 18:03:43 2026 GMT
        Subject: CN=C21C80601919E7FB563BCFE26667FF9B5988CF61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d1:af:c5:2c:44:25:8c:72:dc:38:40:2b:6f:
                    c9:64:a1:09:c0:89:db:ae:46:07:ee:6f:0b:29:d7:
                    a8:58:af:d3:3d:70:29:a8:db:ce:e9:40:d4:47:7e:
                    6f:cd:0f:8f:d3:e4:61:f4:1d:69:ea:be:29:a9:e3:
                    5b:3d:8c:1e:02:ab:6c:97:50:2b:63:d3:61:a3:6f:
                    fd:df:59:23:5b:99:a8:b5:4d:c3:46:05:cd:b5:d4:
                    af:3d:b6:57:22:6a:44:92:77:80:f8:89:f5:53:5f:
                    c8:ea:d5:03:a8:c2:85:8f:32:17:79:8f:26:37:cf:
                    b9:a0:3e:34:26:c5:1b:80:a3:ef:a2:88:e7:41:d9:
                    5d:05:52:5b:b6:0a:54:8f:fc:8a:78:db:ef:ad:51:
                    fa:57:da:b7:2b:db:53:3e:ca:2f:82:5a:b0:1d:28:
                    56:4f:2a:97:88:f6:d9:8a:02:08:b2:fa:4e:7a:a9:
                    83:ca:d0:66:98:c8:fa:2f:8f:a7:50:d0:e4:3d:39:
                    b0:96:e7:de:0f:c0:2c:15:79:b1:48:01:fd:dd:76:
                    fd:03:2b:73:aa:f9:5b:ac:84:8b:21:bd:b0:90:1a:
                    07:ab:fb:d7:63:0d:3d:11:95:6c:49:35:92:92:a7:
                    a6:69:b2:94:7d:8e:f6:24:c7:10:c5:65:c1:93:b9:
                    d8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:1C:80:60:19:19:E7:FB:56:3B:CF:E2:66:67:FF:9B:59:88:CF:61
            X509v3 Authority Key Identifier:
                keyid:8D:D8:D7:38:AA:0E:AA:0C:2D:24:2A:7B:B2:DF:31:E3:2A:41:B8:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/8DD8D738AA0EAA0C2D242A7BB2DF31E32A41B822.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DD8D738AA0EAA0C2D242A7BB2DF31E32A41B822.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/323830343a386166383a3a2f33332d3333203d3e20323733373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8af8::/33

    Signature Algorithm: sha256WithRSAEncryption
         95:29:ad:73:86:20:b3:56:34:84:83:ea:c6:22:fa:eb:ad:33:
         9c:18:98:7e:30:a2:27:b1:86:5a:5e:d7:b7:af:65:68:a6:8b:
         2f:c3:a3:11:38:39:26:e7:3c:f9:ec:02:9f:05:4d:92:03:be:
         6b:13:95:a1:7f:6d:93:4f:46:09:6e:6e:53:d6:45:8c:e1:83:
         1d:04:ab:9e:4f:a3:1b:ea:c1:ab:fc:31:ab:b4:91:8b:76:92:
         3d:19:f9:3f:dc:1e:80:6b:a4:46:03:62:3a:f3:f0:92:bb:19:
         03:e4:65:6b:3f:0c:8d:60:04:e5:89:8c:20:99:33:77:38:cf:
         bc:30:d5:29:75:71:c3:1d:05:68:c6:66:9c:b1:85:ee:66:f9:
         6b:48:b0:5c:31:44:c2:3a:e8:0f:65:6f:c1:80:3c:d0:b1:3f:
         ea:bf:1f:ce:9c:d5:db:8a:88:f0:78:62:33:7a:3b:5f:81:67:
         d4:33:2b:0f:eb:ac:0a:06:31:67:d8:f6:81:ec:63:9d:7b:06:
         19:46:02:e6:b2:12:4a:be:3a:5a:3b:a9:56:41:c4:c9:30:a7:
         36:8f:a1:42:19:e4:0f:a3:14:30:3c:bf:7d:af:21:f4:00:05:
         05:1d:f1:fc:d2:b4:25:1e:78:d3:14:47:92:f7:d3:64:56:96:
         3e:f6:c8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:43:35 2025 by rpki-client