Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a3130343a3a2f34382d3438203d3e20323632363137.roa
File:                     323830343a3930633a3130343a3a2f34382d3438203d3e20323632363137.roa (raw, json)
Hash identifier:          6+9pd9Qvx52IUeAXZdELMFKMEj3FUDpS3K3wsdEY7X0=
Subject key identifier:   C6:F7:10:86:C7:B2:DC:EF:36:3B:77:A9:C6:ED:2E:E3:38:1E:8F:B7
Certificate issuer:       /CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Certificate serial:       30B3C3CA3F0AD96658E909115BE61E3D42FC8926
Authority key identifier: 00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a3130343a3a2f34382d3438203d3e20323632363137.roa
Signing time:             Wed 05 Mar 2025 20:35:56 +0000
ROA not before:           Wed 05 Mar 2025 20:30:56 +0000
ROA not after:            Wed 04 Mar 2026 20:35:56 +0000
asID:                     262617
IP address blocks:        2804:90c:104::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:b3:c3:ca:3f:0a:d9:66:58:e9:09:11:5b:e6:1e:3d:42:fc:89:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00078D2B578982663EFE91FC4B5397C48403E2E4
        Validity
            Not Before: Mar  5 20:30:56 2025 GMT
            Not After : Mar  4 20:35:56 2026 GMT
        Subject: CN=C6F71086C7B2DCEF363B77A9C6ED2EE3381E8FB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:83:82:0b:fd:8b:ea:ea:ea:e2:43:6d:5f:7c:
                    cc:b4:b8:bf:2f:ed:aa:9e:cc:f7:54:84:93:2e:69:
                    cc:c1:11:db:ef:99:0b:c6:87:cf:00:34:c7:b7:f4:
                    32:ef:04:1f:62:57:71:d3:4b:ff:b1:e6:32:dc:93:
                    2d:c2:dd:45:de:25:a7:38:d9:97:7b:2f:0f:82:5c:
                    e3:32:6b:00:39:61:a1:28:c5:86:0c:ee:65:f4:c5:
                    74:b0:00:dd:00:cf:f3:16:c0:cd:72:59:6c:79:d2:
                    c0:98:e0:f6:06:b1:55:10:d4:07:f9:f3:4b:3e:b6:
                    46:f0:77:e1:7b:bf:be:84:ce:26:d9:90:5f:f9:cf:
                    64:fe:9d:e1:b7:6a:01:53:e8:d4:ab:c4:9a:21:25:
                    34:d6:61:b4:c7:1d:c6:c4:d0:a4:3f:ca:a7:3a:9d:
                    c7:bc:16:fe:72:eb:af:41:d7:a8:c4:2b:23:c6:cf:
                    91:ce:94:cf:4d:d6:f2:4a:26:06:dc:4c:04:40:20:
                    c3:67:4c:ef:04:8c:4f:53:84:f1:ec:be:ed:17:e5:
                    b0:d8:14:ca:de:9b:2a:73:79:57:17:64:64:9c:68:
                    f8:f5:93:e3:b7:4f:84:af:02:52:b4:63:49:67:8f:
                    bf:c0:4a:8e:ec:00:ed:d0:5c:70:3e:18:16:f9:37:
                    71:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F7:10:86:C7:B2:DC:EF:36:3B:77:A9:C6:ED:2E:E3:38:1E:8F:B7
            X509v3 Authority Key Identifier:
                keyid:00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a3130343a3a2f34382d3438203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:90c:104::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:1e:bf:b6:e3:af:df:d2:1d:b0:c4:92:ee:83:e6:21:ed:5b:
         2a:56:e5:f5:1c:46:7f:ac:c8:7c:a3:f0:06:1b:e7:69:3b:87:
         dc:34:1d:e3:af:19:31:4e:a4:25:bd:3c:52:c9:ec:17:37:eb:
         eb:d1:49:f9:03:74:b4:10:44:29:5e:a8:5c:9a:6d:d0:33:bc:
         7b:20:1f:4d:2e:3f:1e:3f:bf:55:50:6a:80:05:a3:84:b0:54:
         cc:a8:80:5c:22:6e:db:9c:2a:ab:88:99:9a:97:ac:20:5e:68:
         4e:5f:a8:4f:1c:0a:df:b3:05:c6:70:15:2c:6c:76:0b:64:e5:
         54:71:e9:60:00:da:c7:a5:8e:de:19:73:89:0f:b2:59:d5:f2:
         e8:d6:e6:75:67:27:6c:a5:e3:c4:f6:89:07:2f:3c:a7:ad:63:
         97:b6:91:a2:ce:8b:9f:72:f5:12:75:74:bc:58:1f:d4:cd:6d:
         7e:bf:15:5f:5c:ab:fa:a3:98:cd:04:41:a2:ac:d5:f8:4f:8f:
         f2:e5:6e:68:e2:c4:17:c8:1d:34:2b:5b:0b:4d:c1:29:b8:39:
         d8:3d:b8:79:88:c2:66:5e:7e:cb:6e:32:f1:0d:f8:4c:db:ed:
         e5:f2:99:01:39:33:9b:52:12:ce:83:2e:9b:b3:87:1d:12:10:
         84:d1:65:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:22:18 2025 by rpki-client