Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a313a3a2f34382d3438203d3e20323632363137.roa
File:                     323830343a3930633a313a3a2f34382d3438203d3e20323632363137.roa (raw, json)
Hash identifier:          33ZshPW3ry6qACLxoOt/LcgyNJBvPOKNB9aXgOF6d/U=
Subject key identifier:   11:E5:74:BD:D1:DE:F7:20:E3:37:0B:92:9F:A7:F1:7C:8A:06:2A:C8
Certificate issuer:       /CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Certificate serial:       53DABCB73FCE843D875718228CBF6774DD6DA9CF
Authority key identifier: 00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a313a3a2f34382d3438203d3e20323632363137.roa
Signing time:             Wed 05 Mar 2025 20:35:58 +0000
ROA not before:           Wed 05 Mar 2025 20:30:58 +0000
ROA not after:            Wed 04 Mar 2026 20:35:58 +0000
asID:                     262617
IP address blocks:        2804:90c:1::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:da:bc:b7:3f:ce:84:3d:87:57:18:22:8c:bf:67:74:dd:6d:a9:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00078D2B578982663EFE91FC4B5397C48403E2E4
        Validity
            Not Before: Mar  5 20:30:58 2025 GMT
            Not After : Mar  4 20:35:58 2026 GMT
        Subject: CN=11E574BDD1DEF720E3370B929FA7F17C8A062AC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f6:90:19:88:7b:e2:ea:52:c8:62:26:e3:c6:
                    f7:ab:21:9b:0e:8c:50:d0:ac:e1:82:9c:eb:e2:95:
                    e2:f3:d4:bd:98:0e:1d:81:e0:ab:41:ae:a6:90:19:
                    29:69:8c:c9:82:07:1b:1e:7d:68:ca:f1:b4:92:35:
                    4e:0e:65:94:be:43:7b:86:38:ed:7a:88:a5:43:9d:
                    15:dc:12:46:50:2b:5b:03:51:0a:fc:c7:f3:8a:46:
                    d6:b2:5e:00:12:61:a9:3a:fc:2d:7f:3e:7c:b1:f5:
                    ed:75:2c:b0:f6:d5:9d:7c:d8:cc:6e:f4:e4:a3:dd:
                    3e:f1:d2:51:0b:48:54:09:48:4e:a5:29:51:5d:a4:
                    4d:ff:6a:67:c8:bb:04:ef:66:e0:aa:46:78:86:fc:
                    70:36:c9:b8:04:fb:b1:f0:7a:56:b3:c8:4f:40:9d:
                    a1:c1:24:84:b2:96:db:85:4e:de:f8:1f:04:4e:fb:
                    64:c5:74:4a:00:8d:6e:9f:0f:73:cc:ca:53:4a:a4:
                    a5:ea:02:0a:ea:57:14:c7:dc:d1:17:a5:db:b9:39:
                    16:ed:8a:0b:b8:38:52:8a:f7:bd:bf:ac:ac:21:ab:
                    81:23:45:3a:9c:02:bb:3b:5c:f5:3c:08:36:29:97:
                    05:25:4b:8f:29:42:ff:45:46:7a:dc:c0:f8:1b:95:
                    dc:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E5:74:BD:D1:DE:F7:20:E3:37:0B:92:9F:A7:F1:7C:8A:06:2A:C8
            X509v3 Authority Key Identifier:
                keyid:00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a313a3a2f34382d3438203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:90c:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:cd:56:46:a9:5a:41:f9:54:58:1d:70:ef:1b:0b:83:a6:66:
         6a:9d:d7:4f:d8:c0:89:9f:20:e0:82:ad:60:de:d4:e8:18:57:
         63:24:28:37:28:7d:96:aa:5e:10:9c:24:bf:b7:97:75:81:45:
         ac:bf:ab:f5:24:94:cb:87:8e:f0:0b:6b:0b:60:1d:3e:30:9e:
         91:a0:7c:72:d1:10:9c:0c:33:39:cc:d1:7c:86:ed:cf:bd:d4:
         e1:d3:88:9e:87:77:21:f1:73:3d:11:d4:d0:7a:3f:19:d7:60:
         2d:3a:f9:a4:8d:32:c2:06:49:15:d9:72:5b:85:ba:8a:8a:dd:
         96:1c:bf:c3:fc:29:94:dc:48:07:c8:27:fd:19:86:0b:4c:63:
         f2:26:be:03:fb:e4:89:ca:22:18:74:46:5f:77:fe:48:55:ff:
         53:8f:9a:7f:fe:ae:21:63:5b:12:7c:9f:df:e4:21:ce:69:7a:
         ce:5e:b3:1e:09:8c:90:c6:47:d6:9b:67:93:9b:ba:9d:b1:b4:
         2e:20:1a:ea:2b:a7:ea:0b:32:3a:39:03:9c:f6:c8:9b:cd:92:
         76:dd:09:0e:02:0d:27:da:73:a7:6a:b3:db:b4:bf:bc:7c:e3:
         3a:62:70:da:26:f6:af:a8:f0:cb:5c:fa:f9:e5:c3:29:e3:df:
         76:bf:c6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:08:23 2025 by rpki-client