Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D9YdGA45H71ReSAdywWXT5MCJqGXk9LeGPjVrTtKwjEX/1/323830343a323838633a3a2f33322d3438203d3e20323633393638.roa
File:                     323830343a323838633a3a2f33322d3438203d3e20323633393638.roa (raw, json)
Hash identifier:          vLoURyXBSfIJ7ffW69fQNmOCJ56KaEmHuAJ/yzLW3ho=
Subject key identifier:   2B:9B:78:D6:AA:86:8E:E1:D9:B5:B2:62:AE:E6:F1:63:F7:42:00:9E
Certificate issuer:       /CN=FD75033BF4CEBF8CEC762295C0AE89B5A3946B7B
Certificate serial:       2D59FE87619966D4F1EF12F754C39F55B4A122E2
Authority key identifier: FD:75:03:3B:F4:CE:BF:8C:EC:76:22:95:C0:AE:89:B5:A3:94:6B:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD75033BF4CEBF8CEC762295C0AE89B5A3946B7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9YdGA45H71ReSAdywWXT5MCJqGXk9LeGPjVrTtKwjEX/1/323830343a323838633a3a2f33322d3438203d3e20323633393638.roa
Signing time:             Thu 06 Mar 2025 04:16:35 +0000
ROA not before:           Thu 06 Mar 2025 04:11:35 +0000
ROA not after:            Thu 05 Mar 2026 04:16:35 +0000
asID:                     263968
IP address blocks:        2804:288c::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:59:fe:87:61:99:66:d4:f1:ef:12:f7:54:c3:9f:55:b4:a1:22:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD75033BF4CEBF8CEC762295C0AE89B5A3946B7B
        Validity
            Not Before: Mar  6 04:11:35 2025 GMT
            Not After : Mar  5 04:16:35 2026 GMT
        Subject: CN=2B9B78D6AA868EE1D9B5B262AEE6F163F742009E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:15:0a:13:76:e4:81:ac:35:37:63:08:f3:d6:
                    77:ff:18:cc:57:9a:21:07:8a:7c:6b:35:dd:89:02:
                    52:d7:02:2a:87:f9:2c:a4:87:d2:e1:18:a0:e6:3c:
                    70:47:8d:8f:b8:76:56:e9:54:7b:f4:9e:42:5a:61:
                    68:e5:84:e7:6f:e9:89:ec:47:5b:28:ac:c5:d0:8b:
                    e2:b9:f9:73:43:c0:38:40:f3:ad:a4:96:03:ec:63:
                    29:b4:eb:0f:d6:f2:1c:61:f9:16:62:b6:cc:01:8d:
                    4d:17:1c:68:8d:da:68:14:3d:b6:44:ee:e2:7c:b3:
                    37:2a:cc:c9:a9:23:1b:e1:60:ab:45:98:7e:8b:40:
                    e6:7a:42:50:af:c8:1e:38:5c:60:69:0e:c4:5d:44:
                    83:ce:3a:45:ff:20:eb:53:79:ad:cc:85:3c:3c:1f:
                    c9:95:fe:49:c6:14:2a:62:9a:e2:bb:0b:cc:57:a2:
                    1b:69:28:00:b2:0b:f5:b0:50:d1:b3:30:2e:ca:e7:
                    fa:fa:52:95:2d:82:e9:aa:28:e8:a4:d1:95:b9:d4:
                    96:47:47:e8:34:1f:51:3e:0d:b5:7b:de:08:84:46:
                    aa:63:a4:a1:c5:d4:44:60:71:14:17:0e:1b:4f:7d:
                    12:d7:ee:db:d2:62:15:e6:89:8a:2c:81:d9:4d:cd:
                    cd:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:9B:78:D6:AA:86:8E:E1:D9:B5:B2:62:AE:E6:F1:63:F7:42:00:9E
            X509v3 Authority Key Identifier:
                keyid:FD:75:03:3B:F4:CE:BF:8C:EC:76:22:95:C0:AE:89:B5:A3:94:6B:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9YdGA45H71ReSAdywWXT5MCJqGXk9LeGPjVrTtKwjEX/1/FD75033BF4CEBF8CEC762295C0AE89B5A3946B7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD75033BF4CEBF8CEC762295C0AE89B5A3946B7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9YdGA45H71ReSAdywWXT5MCJqGXk9LeGPjVrTtKwjEX/1/323830343a323838633a3a2f33322d3438203d3e20323633393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:288c::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:32:d4:bc:79:f0:9f:ab:3f:a1:3e:87:51:ce:99:72:3a:c9:
         d8:74:6f:3c:d1:8f:7a:38:cf:5c:2f:a8:96:0a:22:f5:ad:c3:
         5b:a9:3b:5d:a6:5b:c0:98:fb:39:7c:25:85:6d:09:3d:6b:39:
         bc:50:1b:b8:91:df:06:46:1d:8f:8d:d4:1b:4d:b3:4b:c8:d7:
         cb:a1:bf:aa:7f:1a:27:5c:98:80:b5:89:68:72:9b:df:7d:c8:
         eb:65:9f:59:fc:40:dd:32:89:12:53:b3:55:22:29:d9:34:4b:
         7d:c7:36:9c:c7:d3:ca:9b:a3:81:9c:4c:48:8e:d1:07:c6:89:
         54:f2:f5:0c:cb:a7:a5:87:f5:08:2a:ce:9e:33:15:d1:bd:3d:
         b5:48:43:2c:ca:1d:99:0f:7a:df:b0:fe:89:8a:fa:dc:a9:f6:
         f4:03:7e:e8:b0:3f:b0:7d:9d:3d:28:7e:8b:de:fd:8b:49:f1:
         fe:26:f8:fa:cc:83:f3:9d:82:fe:1c:1b:02:2c:fc:f1:f9:12:
         fa:92:33:09:d1:23:fb:4c:e0:88:1a:7e:25:93:a1:ea:0a:6d:
         8b:2d:ad:60:d4:fb:8b:9d:f3:54:11:2e:fa:f2:69:dc:e6:db:
         33:ce:90:b8:4c:77:13:78:93:2b:d5:5c:94:6a:0e:f3:e8:eb:
         7b:86:74:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:39:30 2025 by rpki-client