Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dmfx4fBPDCfv2W5Voj2j49NL5X4saTXdv6EZKJJE8jK6/1/323830343a386365343a3a2f33322d313238203d3e20323733333231.roa
File:                     323830343a386365343a3a2f33322d313238203d3e20323733333231.roa (raw, json)
Hash identifier:          /qVNO9UTdbYPZP9P+sqzFbEslyU6c9Z7pk9eMxHXdbg=
Subject key identifier:   87:58:10:94:32:8B:7E:1A:06:50:44:6C:8A:A4:BB:83:5A:A5:B5:FA
Certificate issuer:       /CN=7CEDCD9593A5E7CA526559FAF067452EEAC12B83
Certificate serial:       0DF401784B9D1949B32898409F06FEBADF6E3412
Authority key identifier: 7C:ED:CD:95:93:A5:E7:CA:52:65:59:FA:F0:67:45:2E:EA:C1:2B:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CEDCD9593A5E7CA526559FAF067452EEAC12B83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dmfx4fBPDCfv2W5Voj2j49NL5X4saTXdv6EZKJJE8jK6/1/323830343a386365343a3a2f33322d313238203d3e20323733333231.roa
Signing time:             Thu 06 Mar 2025 07:50:25 +0000
ROA not before:           Thu 06 Mar 2025 07:45:25 +0000
ROA not after:            Thu 05 Mar 2026 07:50:25 +0000
asID:                     273321
IP address blocks:        2804:8ce4::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:f4:01:78:4b:9d:19:49:b3:28:98:40:9f:06:fe:ba:df:6e:34:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CEDCD9593A5E7CA526559FAF067452EEAC12B83
        Validity
            Not Before: Mar  6 07:45:25 2025 GMT
            Not After : Mar  5 07:50:25 2026 GMT
        Subject: CN=87581094328B7E1A0650446C8AA4BB835AA5B5FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:55:f3:84:15:eb:c5:96:89:76:cd:f0:f4:3c:
                    4d:3b:70:f8:5f:95:dd:ea:8e:05:fc:59:ef:54:5e:
                    6b:e3:3b:f1:f3:75:88:b5:ec:0d:a3:a3:34:83:26:
                    ef:6e:37:cc:81:84:46:b4:59:c5:1e:13:da:7b:d1:
                    1f:bc:8e:97:bd:a2:7d:bf:5d:3a:a5:e2:e9:16:94:
                    38:0d:b9:9e:6e:97:2c:5d:23:3c:0d:da:38:e9:82:
                    af:65:44:22:dd:af:7e:da:00:84:44:f8:5f:81:dc:
                    62:f4:52:15:74:26:b6:a6:45:99:c1:bf:be:82:74:
                    39:d0:ee:fc:ad:fd:6d:79:fd:78:ea:ad:1b:af:cc:
                    9f:1f:b6:73:1e:37:5c:65:0f:65:be:97:08:3a:db:
                    e3:e4:0d:e8:27:34:f9:b3:01:57:b0:46:91:5f:f2:
                    62:83:81:a5:09:b1:e4:fb:08:7d:ed:64:39:f1:6e:
                    73:7f:45:fd:29:76:2e:94:27:1b:8f:ed:80:4f:5f:
                    c6:01:82:52:30:21:af:67:d7:c4:1f:2b:4c:51:24:
                    ce:a0:81:94:51:de:28:90:57:ad:24:b7:6c:41:29:
                    c5:1a:33:bf:92:a7:af:ce:f5:47:53:4d:c0:32:f8:
                    53:77:3b:fd:42:d9:98:fa:22:c1:29:62:ac:43:31:
                    49:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:58:10:94:32:8B:7E:1A:06:50:44:6C:8A:A4:BB:83:5A:A5:B5:FA
            X509v3 Authority Key Identifier:
                keyid:7C:ED:CD:95:93:A5:E7:CA:52:65:59:FA:F0:67:45:2E:EA:C1:2B:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dmfx4fBPDCfv2W5Voj2j49NL5X4saTXdv6EZKJJE8jK6/1/7CEDCD9593A5E7CA526559FAF067452EEAC12B83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CEDCD9593A5E7CA526559FAF067452EEAC12B83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dmfx4fBPDCfv2W5Voj2j49NL5X4saTXdv6EZKJJE8jK6/1/323830343a386365343a3a2f33322d313238203d3e20323733333231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ce4::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:5e:f4:d0:25:d9:19:47:83:32:c7:d5:f4:04:91:55:cb:21:
         2d:f8:fe:f8:52:09:1c:e4:61:5a:73:76:e9:ba:59:92:4a:2c:
         5b:60:4e:6f:d4:f0:c5:e4:46:7f:0a:1a:90:7a:7b:67:8e:64:
         4d:37:bb:e3:ec:45:1f:22:09:72:60:5a:87:23:56:0d:2d:64:
         d8:b7:d5:c4:0b:c1:ce:52:76:de:cd:aa:6b:f9:e1:1e:76:b0:
         f0:bc:18:87:13:41:ed:45:50:be:61:45:a0:03:53:c1:3d:46:
         b1:d0:97:3f:1f:ec:7c:a6:17:3f:bf:51:5a:f6:35:41:8b:d4:
         2a:56:ec:b2:75:09:84:45:d9:dc:b2:64:41:6d:70:78:90:a6:
         98:1f:eb:43:00:11:a1:f9:c6:dc:bb:b0:3d:cf:7f:bd:e3:9e:
         7c:05:a4:dd:45:f0:ed:a8:40:0c:73:1b:09:88:9c:1d:3f:24:
         80:67:32:8e:14:b0:9c:ad:a4:4d:e5:c9:e8:56:41:c6:3b:67:
         13:b7:1f:33:e9:03:b5:9c:93:71:3b:f9:cf:3b:0e:c5:65:f6:
         f3:41:f2:9b:72:e4:de:80:b1:24:58:6d:f6:13:f8:41:dd:3e:
         42:88:d0:5c:90:93:90:45:9e:d2:80:58:56:17:6f:e7:36:b1:
         0b:0b:b8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:45:57 2025 by rpki-client