Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/323830343a383630343a3a2f33322d3332203d3e20323732363134.roa
File:                     323830343a383630343a3a2f33322d3332203d3e20323732363134.roa (raw, json)
Hash identifier:          UuJdu9oNRzQAzqGiZTO4vBqCVsMzpdiamCVuQEkL6sg=
Subject key identifier:   34:8D:E3:7B:B0:70:1E:A2:69:AE:51:A2:EB:48:DD:13:27:F2:34:44
Certificate issuer:       /CN=8AD497903AB3566443C9C794694A61EFE427FA7A
Certificate serial:       28FB29FCE1A95D44D2B2288FCF5A36FB4B92CADC
Authority key identifier: 8A:D4:97:90:3A:B3:56:64:43:C9:C7:94:69:4A:61:EF:E4:27:FA:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AD497903AB3566443C9C794694A61EFE427FA7A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/323830343a383630343a3a2f33322d3332203d3e20323732363134.roa
Signing time:             Thu 06 Mar 2025 06:00:22 +0000
ROA not before:           Thu 06 Mar 2025 05:55:22 +0000
ROA not after:            Thu 05 Mar 2026 06:00:22 +0000
asID:                     272614
IP address blocks:        2804:8604::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:fb:29:fc:e1:a9:5d:44:d2:b2:28:8f:cf:5a:36:fb:4b:92:ca:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AD497903AB3566443C9C794694A61EFE427FA7A
        Validity
            Not Before: Mar  6 05:55:22 2025 GMT
            Not After : Mar  5 06:00:22 2026 GMT
        Subject: CN=348DE37BB0701EA269AE51A2EB48DD1327F23444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8f:de:24:9c:de:c0:3f:ce:40:6f:ab:33:8b:
                    f4:c4:5c:00:90:6e:79:d0:5f:20:8d:76:4d:2b:4a:
                    da:c5:80:39:9c:49:4e:3b:46:32:df:e2:5b:e9:f8:
                    fd:d3:7e:47:a6:40:45:7e:09:00:e8:71:14:0c:d1:
                    2b:8b:d6:a3:4f:2a:bf:67:e8:2b:64:77:1b:7f:66:
                    41:c3:dc:95:ac:65:f2:1f:8b:4d:1a:09:a5:a1:8f:
                    ad:f1:23:a9:2e:cb:f9:d5:5d:3b:f3:18:de:85:be:
                    9a:7e:0b:5e:7f:e1:75:ad:19:a7:db:27:d6:05:ea:
                    88:11:c0:70:75:e1:e2:8c:6b:62:69:f5:23:fd:17:
                    3d:75:89:8b:f1:6b:99:c4:7a:f6:9f:ed:da:2a:b7:
                    da:bb:4c:bf:a5:24:23:54:33:b8:13:1a:4c:b0:23:
                    62:cf:95:e2:15:c4:4e:99:f7:7e:b4:0b:38:24:92:
                    62:73:9d:81:dc:a7:6a:bb:eb:d0:47:87:2e:39:1d:
                    94:d9:02:86:f2:3b:0a:c2:b2:fa:8b:3b:f6:5f:4a:
                    c5:bb:43:a9:36:e1:1f:cb:f1:e1:5b:cc:d8:39:53:
                    32:fd:4b:9a:0c:b1:cd:34:fb:db:d2:4c:c9:7a:73:
                    a2:b7:ce:fb:28:ee:17:97:33:8e:a6:e2:7d:05:1a:
                    5b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:8D:E3:7B:B0:70:1E:A2:69:AE:51:A2:EB:48:DD:13:27:F2:34:44
            X509v3 Authority Key Identifier:
                keyid:8A:D4:97:90:3A:B3:56:64:43:C9:C7:94:69:4A:61:EF:E4:27:FA:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AD497903AB3566443C9C794694A61EFE427FA7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/323830343a383630343a3a2f33322d3332203d3e20323732363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8604::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:61:c9:86:62:54:b4:b8:6f:ba:29:79:e6:f7:c0:b3:14:30:
         c8:09:df:67:cf:80:52:b3:06:2b:ac:bd:f3:39:2d:6c:cc:eb:
         88:6c:d6:ec:ec:a2:8c:8a:e4:6c:d0:7d:41:47:c8:56:31:fc:
         e9:e7:9c:b9:2f:03:f1:3a:d2:f0:7d:59:c9:71:4c:78:09:0d:
         8e:77:53:30:ab:73:69:72:7b:92:7e:f6:3a:1b:ba:d7:a2:c6:
         d2:71:25:8c:9d:6f:fb:2d:37:b5:a7:c0:8a:7e:95:00:bd:34:
         3b:04:31:09:a2:0d:f0:00:9c:9a:30:04:47:73:10:4d:bd:b5:
         8b:e9:87:95:90:d7:86:7e:97:0a:f0:67:a5:50:34:e5:32:ac:
         ed:29:6a:58:60:3b:ad:a8:35:2e:d5:6d:df:3f:0a:82:3e:6e:
         ac:17:7f:92:52:30:69:67:94:d1:7c:e1:40:7e:3d:e9:e2:f4:
         15:d2:27:3b:86:7d:3d:a1:28:1b:5f:5a:be:9c:e5:b0:6d:51:
         bb:20:a5:9a:89:7e:dd:41:55:f1:76:e2:76:90:0e:e9:5a:b2:
         5a:59:40:9d:21:37:16:7a:49:f4:e4:e0:2e:e3:5f:25:e4:19:
         eb:46:31:66:77:c6:6b:a5:8d:17:2a:43:e6:02:5f:91:9e:45:
         1e:5c:94:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:41:04 2025 by rpki-client