Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a3135343a3a2f34382d3438203d3e20323632363137.roa
File:                     323830343a3930633a3135343a3a2f34382d3438203d3e20323632363137.roa (raw, json)
Hash identifier:          8Mj7pC9H5/bc8GRZZ1uxnC7kVBqSq67h166qCSoMeB0=
Subject key identifier:   51:BA:4F:4B:6A:F7:21:78:24:25:B3:6C:3D:89:B9:FA:08:69:C5:1E
Certificate issuer:       /CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Certificate serial:       4C6947BEFF3492AFA62D5E8172B8B0064AF04401
Authority key identifier: 00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a3135343a3a2f34382d3438203d3e20323632363137.roa
Signing time:             Tue 18 Mar 2025 20:32:52 +0000
ROA not before:           Tue 18 Mar 2025 20:27:52 +0000
ROA not after:            Tue 17 Mar 2026 20:32:52 +0000
asID:                     262617
IP address blocks:        2804:90c:154::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:69:47:be:ff:34:92:af:a6:2d:5e:81:72:b8:b0:06:4a:f0:44:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00078D2B578982663EFE91FC4B5397C48403E2E4
        Validity
            Not Before: Mar 18 20:27:52 2025 GMT
            Not After : Mar 17 20:32:52 2026 GMT
        Subject: CN=51BA4F4B6AF721782425B36C3D89B9FA0869C51E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e3:5c:33:3f:07:47:21:23:f1:73:2d:62:62:
                    59:a9:5a:85:9e:72:e5:4a:95:be:00:3d:2e:55:8a:
                    e1:6a:a8:0f:a8:86:75:54:f7:a2:32:1c:0e:a6:81:
                    ff:b0:f6:2d:f8:c7:6c:ac:6d:a8:da:81:50:4a:b7:
                    76:c6:23:92:6d:fa:92:9e:4b:e0:8e:10:c1:ac:58:
                    a2:6a:c0:66:60:37:34:cf:d9:cc:dc:67:20:26:f6:
                    67:73:ed:fe:ad:96:a8:6f:87:b4:03:de:d4:d3:07:
                    66:05:73:6d:6f:05:50:69:a2:17:2b:d8:2c:bb:6c:
                    66:47:6a:63:e2:81:74:b6:72:f9:1c:3c:53:3e:4c:
                    84:e2:a5:c2:6c:9b:ff:a5:bc:5f:fa:f1:21:78:84:
                    01:2f:32:8f:bc:e9:9f:8a:dd:bd:24:14:03:b3:db:
                    c2:c3:66:77:1a:cf:7f:13:98:9e:ca:90:0f:50:b6:
                    61:67:ff:c4:d1:db:39:f9:7f:56:21:52:0f:45:d8:
                    cc:fe:95:9e:7c:ae:50:93:8d:d5:2d:4c:b6:08:37:
                    04:6e:c2:f2:ef:b8:d9:1c:69:99:a2:66:8a:2c:64:
                    ff:1c:56:04:b1:16:90:31:fd:f0:5f:c0:63:1e:04:
                    9b:12:e1:37:05:b9:f5:2d:81:d7:d2:04:6a:3b:97:
                    2d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:BA:4F:4B:6A:F7:21:78:24:25:B3:6C:3D:89:B9:FA:08:69:C5:1E
            X509v3 Authority Key Identifier:
                keyid:00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a3135343a3a2f34382d3438203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:90c:154::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:a5:6e:e6:e6:e2:32:e5:f4:52:bb:4c:9b:b1:2f:14:e6:27:
         13:56:b0:f5:5c:ef:a3:66:e6:28:6b:88:a3:d3:78:c7:91:b5:
         f7:29:6f:a1:51:0d:5f:ae:47:d8:6a:0f:e2:cd:4d:27:c0:89:
         77:48:1b:8a:19:0f:19:1f:44:5d:79:e9:73:55:e1:35:4c:5e:
         2b:a4:45:11:de:2e:1c:ba:52:a5:15:6c:43:55:b9:49:30:fd:
         71:45:03:c4:fd:6f:58:03:0f:b8:88:9c:fa:1b:d8:b3:25:19:
         be:ed:86:5a:cd:52:84:65:34:51:e3:95:54:0f:ea:6e:a3:05:
         bb:9d:35:62:c2:73:1d:ef:32:c7:e6:3a:21:2f:65:d1:cc:3f:
         ed:15:ff:06:9c:0f:09:52:3c:15:39:85:05:b3:5d:b9:7a:c5:
         74:6c:2e:a8:23:da:a3:1a:f3:76:9e:5e:c8:c7:3f:ca:86:9a:
         cf:b8:3f:1a:5c:39:90:67:f5:f3:ef:92:05:69:a2:6b:2e:14:
         10:c5:67:96:d5:47:5c:67:4f:ad:6f:76:82:a9:10:10:9f:33:
         b5:c0:9d:f9:18:2e:ae:e1:9e:96:b1:4c:bf:48:73:b3:9f:56:
         a1:e5:f7:a3:b9:0d:4a:7a:48:75:48:c4:26:a1:39:2e:94:d3:
         b9:6f:c6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:29:20 2025 by rpki-client