Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a3a2f34382d3438203d3e20323632363137.roa
File:                     323830343a3930633a3a2f34382d3438203d3e20323632363137.roa (raw, json)
Hash identifier:          8lBB5R3lpg4rATuYNOpWPQHSlQ4Xm3zX5Uudiis+tQs=
Subject key identifier:   E5:42:FD:88:D3:CE:47:9E:F3:32:71:08:0F:57:4E:56:93:2E:8D:EA
Certificate issuer:       /CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Certificate serial:       56BA49682AEF4E8A0615D0959D4C31AA9356F1AB
Authority key identifier: 00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a3a2f34382d3438203d3e20323632363137.roa
Signing time:             Wed 05 Mar 2025 20:36:01 +0000
ROA not before:           Wed 05 Mar 2025 20:31:01 +0000
ROA not after:            Wed 04 Mar 2026 20:36:01 +0000
asID:                     262617
IP address blocks:        2804:90c::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:ba:49:68:2a:ef:4e:8a:06:15:d0:95:9d:4c:31:aa:93:56:f1:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00078D2B578982663EFE91FC4B5397C48403E2E4
        Validity
            Not Before: Mar  5 20:31:01 2025 GMT
            Not After : Mar  4 20:36:01 2026 GMT
        Subject: CN=E542FD88D3CE479EF33271080F574E56932E8DEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:da:8f:31:c0:8e:cc:a3:55:5d:63:c2:a1:27:
                    da:f0:49:42:8f:4f:3f:05:61:ce:33:66:17:e5:a7:
                    83:c1:cb:88:4e:5f:10:f0:87:ea:b5:98:e8:ac:0d:
                    f7:00:63:99:c3:7e:86:6d:e9:3d:ce:09:39:11:10:
                    4a:65:a1:c2:e3:7d:d6:f2:77:6e:ed:15:ac:39:66:
                    1b:e9:b1:e2:9d:73:c2:f4:b0:7e:90:06:6b:48:d9:
                    52:7a:d5:9b:1a:9a:29:5b:6b:4a:97:d9:50:6e:18:
                    2c:aa:2b:57:f8:37:ab:c1:90:48:13:11:76:7b:c0:
                    56:dd:11:d6:dc:6e:fe:d2:43:7b:3b:a9:db:6b:ab:
                    d7:28:8f:e4:34:6a:9d:89:13:b9:77:b2:8c:e2:f3:
                    65:c8:8a:c1:2c:20:9c:cc:25:80:50:54:0d:ee:70:
                    39:61:65:31:7b:85:8d:66:bf:aa:f5:33:cc:b5:b6:
                    4b:0d:d7:f9:15:1f:ab:38:3a:c0:50:80:80:a0:14:
                    fa:e2:cc:35:b2:0c:6b:f8:58:26:80:61:d1:6c:6b:
                    bb:a1:0c:5a:be:9c:9f:ff:66:2d:8b:90:e9:31:ee:
                    db:48:f6:d6:14:b5:41:59:ff:7e:24:3d:7b:1e:6d:
                    8d:50:fb:f4:b1:1f:a9:4a:89:89:b8:52:b4:a5:de:
                    ca:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:42:FD:88:D3:CE:47:9E:F3:32:71:08:0F:57:4E:56:93:2E:8D:EA
            X509v3 Authority Key Identifier:
                keyid:00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a3a2f34382d3438203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:90c::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:46:73:c2:89:f6:1c:e3:59:52:1e:fd:5f:fb:a5:74:1b:e8:
         e0:92:56:d8:8d:e5:21:3b:f9:6b:c5:18:8e:ba:87:cb:1c:dc:
         7c:31:0c:55:13:b6:2b:fd:bc:31:86:38:c2:7d:6f:12:5e:ef:
         37:43:16:61:de:d2:55:5a:83:02:dd:55:3f:f9:9e:4c:08:61:
         b4:02:41:fe:6b:85:a7:91:f4:6c:d0:21:29:89:83:4c:56:91:
         88:44:e5:3a:04:10:75:3e:bd:cb:37:44:5b:27:c0:4b:78:63:
         cf:b4:06:5b:df:f2:c4:fc:03:19:5a:02:4b:e0:4c:58:c1:b8:
         9d:c9:03:90:ae:3d:2b:ca:71:79:c7:44:c0:03:e1:a2:2e:e9:
         83:e0:95:95:a0:64:a3:a3:b6:05:97:62:c2:c6:ca:38:60:40:
         f6:4d:dc:5c:19:24:28:e5:7c:14:f7:14:5a:c4:8e:5e:13:a6:
         6c:12:90:27:9a:b2:14:a8:f5:28:5c:89:db:31:63:1a:5c:f9:
         e5:b4:dc:5f:26:82:7d:05:12:53:2d:4f:df:09:1b:cc:bf:92:
         ef:39:ba:d9:8c:73:ba:5f:e2:0f:e9:aa:68:55:e6:8b:98:13:
         69:9a:5f:d7:25:66:8c:a3:e2:20:be:9e:e3:48:90:2f:8d:83:
         50:ab:09:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:15:13 2025 by rpki-client