Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/323830343a333561383a3a2f33322d313238203d3e20323636323939.roa
File:                     323830343a333561383a3a2f33322d313238203d3e20323636323939.roa (raw, json)
Hash identifier:          IsVLxgwYDi8pNm8S0DzwD9QJhFe0QyknmCg1ewqOeJQ=
Subject key identifier:   A5:EA:63:E8:99:B0:14:94:9B:09:1F:88:0D:8F:8D:26:EB:D2:0C:C9
Certificate issuer:       /CN=31CF12552C0272C451E1EE12244E03BDDD6B2CA1
Certificate serial:       696DCE63A18F73564163FE0556A437374FEB2DBF
Authority key identifier: 31:CF:12:55:2C:02:72:C4:51:E1:EE:12:24:4E:03:BD:DD:6B:2C:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/323830343a333561383a3a2f33322d313238203d3e20323636323939.roa
Signing time:             Thu 06 Mar 2025 22:44:58 +0000
ROA not before:           Thu 06 Mar 2025 22:39:58 +0000
ROA not after:            Thu 05 Mar 2026 22:44:58 +0000
asID:                     266299
IP address blocks:        2804:35a8::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:6d:ce:63:a1:8f:73:56:41:63:fe:05:56:a4:37:37:4f:eb:2d:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31CF12552C0272C451E1EE12244E03BDDD6B2CA1
        Validity
            Not Before: Mar  6 22:39:58 2025 GMT
            Not After : Mar  5 22:44:58 2026 GMT
        Subject: CN=A5EA63E899B014949B091F880D8F8D26EBD20CC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:97:41:4b:fb:19:a7:67:c2:c4:39:c4:7f:49:
                    3e:a6:ad:ef:27:fe:cd:f5:03:f5:19:9d:80:90:10:
                    82:c4:96:c4:58:0d:95:5c:ff:d6:8c:18:7c:1a:1e:
                    2b:ec:75:34:42:db:25:52:1b:10:46:24:01:93:5c:
                    80:bc:b0:6d:bd:9a:ce:aa:a8:4e:d0:6f:f4:f8:39:
                    12:d8:aa:12:cf:5c:6c:7a:ba:60:fd:56:93:96:ab:
                    60:c6:7d:af:7d:d2:8c:31:04:24:88:85:b3:57:ae:
                    07:8e:cf:9d:65:4d:73:ef:51:5b:13:b4:db:0d:1d:
                    ec:0b:aa:8f:98:c0:02:68:53:df:9e:05:20:06:54:
                    99:b5:e6:3b:06:e9:50:4e:4e:03:89:56:83:f0:81:
                    c6:04:39:da:34:61:a5:d0:36:38:b3:40:02:75:f6:
                    cb:28:d5:2d:aa:e1:e4:6f:7e:89:91:f8:22:52:38:
                    21:02:de:0b:01:e0:4c:ae:e2:e7:06:42:34:31:6c:
                    6f:f1:dc:0f:0a:ae:d8:41:71:12:6d:4e:71:a0:f1:
                    d3:58:3d:1e:5d:3a:9e:60:8b:32:02:d9:34:3e:e1:
                    91:cf:17:96:c2:45:0a:95:74:1c:82:4f:d9:4b:98:
                    a3:ef:ea:7e:eb:fc:35:5b:bf:26:3c:f8:2e:18:f2:
                    86:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:EA:63:E8:99:B0:14:94:9B:09:1F:88:0D:8F:8D:26:EB:D2:0C:C9
            X509v3 Authority Key Identifier:
                keyid:31:CF:12:55:2C:02:72:C4:51:E1:EE:12:24:4E:03:BD:DD:6B:2C:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/323830343a333561383a3a2f33322d313238203d3e20323636323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:35a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:94:72:1d:55:ac:af:b3:80:35:27:6b:30:3a:f1:7c:82:d6:
         29:f7:e2:4f:51:76:0a:7c:8d:d0:16:ca:a5:83:b8:ae:d7:f4:
         7a:ea:07:9d:9e:99:79:c2:78:7f:1b:7c:93:af:af:b8:31:f4:
         19:95:1f:82:d5:51:93:c5:64:37:5b:e0:ad:44:f1:56:52:e7:
         fd:50:14:2c:af:aa:a9:e7:0e:31:0d:32:0e:b9:56:68:2c:56:
         6b:f7:61:69:62:db:4b:37:89:8e:3e:9c:40:0a:4f:c0:78:c4:
         ce:a8:e8:a4:75:8c:0c:e1:fd:80:10:00:a5:e3:3a:15:9a:56:
         d5:0a:de:96:65:ae:77:28:fc:95:77:cf:3c:d6:1d:e1:18:09:
         7f:88:48:a8:e3:23:3f:33:e1:eb:6e:53:4c:4a:12:7a:37:e5:
         68:bc:d7:f4:5c:dd:99:0e:53:8b:c3:d2:81:11:79:88:da:b8:
         0f:71:5c:a1:4d:39:44:cc:eb:b9:9d:14:d1:7a:42:d7:f7:39:
         8f:c3:5f:10:a8:cb:ee:76:6f:74:92:40:af:7c:36:82:77:79:
         44:65:81:7d:d3:db:c6:c8:21:30:43:a7:f2:c1:40:75:1a:1a:
         18:4d:a7:f4:55:58:7f:5b:e1:1a:af:2d:4b:e5:8c:f5:e6:bc:
         91:77:41:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:30:47 2025 by rpki-client