Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/323830343a366566383a313a3a2f34382d3438203d3e20323730363330.roa
File:                     323830343a366566383a313a3a2f34382d3438203d3e20323730363330.roa (raw, json)
Hash identifier:          eI5APIjIOW3bdofxuwPMpF7MEF552gSBa5PfwNnBg/w=
Subject key identifier:   08:C5:13:A5:F5:41:C0:87:9C:68:AF:A4:1F:73:CD:32:BC:F8:B0:B7
Certificate issuer:       /CN=F7FDF8A9EE071B0475D890E4E63DFDC5219615DB
Certificate serial:       2B115A16AF6D7B8A71CEBDDDB8B9778B17A23304
Authority key identifier: F7:FD:F8:A9:EE:07:1B:04:75:D8:90:E4:E6:3D:FD:C5:21:96:15:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7FDF8A9EE071B0475D890E4E63DFDC5219615DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/323830343a366566383a313a3a2f34382d3438203d3e20323730363330.roa
Signing time:             Tue 25 Mar 2025 20:18:22 +0000
ROA not before:           Tue 25 Mar 2025 20:13:22 +0000
ROA not after:            Tue 24 Mar 2026 20:18:22 +0000
asID:                     270630
IP address blocks:        2804:6ef8:1::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:11:5a:16:af:6d:7b:8a:71:ce:bd:dd:b8:b9:77:8b:17:a2:33:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7FDF8A9EE071B0475D890E4E63DFDC5219615DB
        Validity
            Not Before: Mar 25 20:13:22 2025 GMT
            Not After : Mar 24 20:18:22 2026 GMT
        Subject: CN=08C513A5F541C0879C68AFA41F73CD32BCF8B0B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:21:76:53:90:f4:4e:d0:b1:25:f0:c9:e6:eb:
                    c0:6f:4f:fd:79:6f:1d:31:f2:e9:ed:79:79:ad:1e:
                    cb:98:37:58:f2:70:33:e5:d2:9c:14:f4:d4:7d:86:
                    7a:2b:49:9a:b9:73:6a:11:51:41:b1:10:51:cc:ff:
                    c8:72:72:1a:f9:c2:de:9c:4e:f8:f6:46:fd:eb:74:
                    e6:0f:88:8f:91:ef:01:31:8e:a7:7a:83:50:ee:00:
                    72:04:d4:ca:f0:4b:12:5a:dc:d4:75:a1:61:93:bf:
                    3d:bd:b6:31:83:fe:7b:b0:23:f7:64:b7:00:c1:0f:
                    1b:27:7d:4c:2f:af:2c:e4:14:26:5b:6a:70:04:63:
                    82:44:50:1d:d7:4f:fd:13:60:27:52:41:1e:6c:89:
                    8c:9f:29:06:1d:39:d8:7c:7c:3d:0d:6a:1e:9e:29:
                    39:bb:25:1d:7a:5e:47:91:ad:c7:83:09:f1:74:b3:
                    7e:7c:b6:c2:ee:24:b5:95:55:2e:3e:a4:52:0e:a7:
                    a7:9a:06:b5:f1:2f:c7:eb:e5:63:1e:ac:82:2f:4f:
                    bb:8a:ad:8a:b3:1e:a4:12:ae:c3:81:ff:fc:2f:23:
                    49:48:c5:ca:81:73:0b:c7:af:fc:05:70:a9:bd:a5:
                    1c:4a:c0:01:59:8f:af:c0:3a:7d:20:a6:7d:21:80:
                    f8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C5:13:A5:F5:41:C0:87:9C:68:AF:A4:1F:73:CD:32:BC:F8:B0:B7
            X509v3 Authority Key Identifier:
                keyid:F7:FD:F8:A9:EE:07:1B:04:75:D8:90:E4:E6:3D:FD:C5:21:96:15:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/F7FDF8A9EE071B0475D890E4E63DFDC5219615DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7FDF8A9EE071B0475D890E4E63DFDC5219615DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/323830343a366566383a313a3a2f34382d3438203d3e20323730363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ef8:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         b6:49:0c:ae:69:80:e8:fc:5d:3c:07:44:aa:19:2a:b7:7a:0d:
         3c:ba:de:9c:40:6d:78:b6:ba:ed:17:e2:f7:c5:bd:ab:9a:1c:
         80:7d:ea:ca:1c:cd:d2:9d:c1:f7:f4:c1:d3:3a:d1:8c:e3:eb:
         d9:db:ee:87:dd:91:db:64:45:32:29:5f:11:68:89:13:09:4a:
         6f:d9:bb:36:62:dd:37:46:ea:48:cd:d4:16:a2:ee:12:73:0b:
         57:43:22:18:0d:6b:a3:0f:b2:c2:ee:12:b8:da:8c:4b:fa:31:
         83:f6:db:bb:5c:2f:50:57:bd:77:25:c5:73:e0:5f:a7:1d:cf:
         a4:64:3d:18:31:54:39:f5:93:7c:f4:52:9a:a2:1f:90:fd:b3:
         76:30:ec:e8:82:4c:42:b4:20:50:bb:e0:13:45:20:e4:89:9e:
         77:0f:ae:59:eb:7c:c4:f0:27:4b:6b:12:08:a9:70:17:a9:d8:
         6a:d3:a5:53:72:02:53:aa:ef:a3:b0:fb:7d:64:19:93:ff:9e:
         1d:06:7b:16:00:dc:35:2b:7c:81:bc:b1:20:91:ec:0b:b9:c0:
         7a:3f:d0:4b:13:d8:b6:52:d9:22:0d:52:5c:01:d1:b4:c9:66:
         ca:69:c7:2f:f5:40:03:f4:97:9f:41:eb:a3:40:1b:94:6b:18:
         b6:d3:5b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:27:52 2025 by rpki-client