Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a3230303a3a2f34382d3438203d3e20323632363137.roa
File:                     323830343a3930633a3230303a3a2f34382d3438203d3e20323632363137.roa (raw, json)
Hash identifier:          j/JxB5j2VCNgFk/PAN55ykFkLmSMS5Tdxx9EHgVpfno=
Subject key identifier:   16:DB:6D:DD:18:C1:E3:64:30:8A:28:BB:F1:A3:2C:40:3D:73:23:0F
Certificate issuer:       /CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Certificate serial:       14ED090C4197FFDC46AD9D8C354C154AD20555A2
Authority key identifier: 00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a3230303a3a2f34382d3438203d3e20323632363137.roa
Signing time:             Wed 05 Mar 2025 20:36:10 +0000
ROA not before:           Wed 05 Mar 2025 20:31:10 +0000
ROA not after:            Wed 04 Mar 2026 20:36:10 +0000
asID:                     262617
IP address blocks:        2804:90c:200::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ed:09:0c:41:97:ff:dc:46:ad:9d:8c:35:4c:15:4a:d2:05:55:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00078D2B578982663EFE91FC4B5397C48403E2E4
        Validity
            Not Before: Mar  5 20:31:10 2025 GMT
            Not After : Mar  4 20:36:10 2026 GMT
        Subject: CN=16DB6DDD18C1E364308A28BBF1A32C403D73230F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a5:14:30:db:ea:f4:43:a4:4b:5e:8a:18:88:
                    17:3d:f6:45:4d:44:05:45:38:e0:db:c7:70:da:dc:
                    f5:77:24:34:4b:40:6a:53:d0:94:26:bf:d7:2a:1d:
                    72:b4:84:2a:e4:61:c7:54:f7:43:8f:26:43:af:26:
                    0d:09:a6:8a:c7:45:7f:ad:07:83:a7:b6:74:61:10:
                    72:fe:69:be:3a:b4:5b:dd:7e:d7:66:14:c2:96:5a:
                    89:53:08:f7:db:8f:19:66:0d:31:43:82:4c:70:51:
                    ea:77:2b:78:04:2d:f2:7e:25:f7:45:a6:71:2c:25:
                    40:8f:36:70:37:46:93:0e:39:0c:24:16:7b:ed:ad:
                    03:66:2e:22:72:ec:c1:51:1e:b0:ee:94:ac:eb:1b:
                    56:35:f5:c0:d7:4b:9a:c5:48:67:8b:7f:65:0c:8c:
                    97:f5:de:38:ba:ad:41:25:dc:2f:09:e4:88:5e:af:
                    7d:e1:41:9c:29:44:24:a5:4b:51:ee:a5:21:dc:1c:
                    23:13:84:5f:4a:b0:40:6f:a8:bb:5b:9b:d9:a4:18:
                    0d:11:a7:09:54:97:14:93:c0:5b:6b:a8:17:84:19:
                    3e:bf:bb:1f:b5:5b:7f:9d:00:78:f0:9a:66:cd:9a:
                    95:b1:98:9c:c4:4d:4c:a6:23:74:b6:fe:a7:0f:a2:
                    25:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:DB:6D:DD:18:C1:E3:64:30:8A:28:BB:F1:A3:2C:40:3D:73:23:0F
            X509v3 Authority Key Identifier:
                keyid:00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a3230303a3a2f34382d3438203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:90c:200::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:1a:87:b9:53:33:fa:76:82:af:49:30:83:42:af:67:77:c2:
         02:0e:2a:c5:9b:02:0b:9c:2d:bd:9a:67:6c:fd:fb:b5:19:98:
         a8:01:61:a0:03:0c:90:88:bc:f1:a6:66:98:fc:95:70:98:86:
         5f:f7:78:d4:e7:1e:d9:73:b7:d1:01:ab:38:bc:84:6b:3b:6c:
         72:92:72:04:b8:9d:f2:1b:f5:94:88:83:88:66:ea:24:52:8c:
         29:25:2e:04:4e:5f:54:3d:86:d3:1c:67:1a:f2:fa:fa:5c:cc:
         9a:37:42:01:a5:09:a1:6c:bf:90:8b:f7:55:87:47:fc:7f:a6:
         28:3b:59:c0:dc:6f:be:bf:15:ba:a2:72:0d:c9:f5:7e:d8:dd:
         ad:47:ff:12:51:08:bd:eb:d6:0e:92:e4:81:0d:72:2c:fe:e2:
         53:33:23:73:f4:7a:48:c8:68:36:d8:56:03:2a:3c:15:b9:6c:
         ce:93:22:e3:6b:13:ac:df:12:0d:0b:ff:a0:42:23:30:a5:6f:
         73:ee:e0:d9:90:5d:91:94:62:c1:62:ff:cc:b9:31:2a:56:ab:
         e4:b0:30:fc:32:a8:b4:89:16:6d:ab:62:db:7d:33:3a:4b:1a:
         b0:a6:a2:bb:d3:2e:f2:4d:15:0a:f2:cc:eb:63:b6:68:bd:79:
         ab:60:61:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:33:51 2025 by rpki-client