Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/323830343a313765303a383030303a3a2f33332d3333203d3e20323633323536.roa
File:                     323830343a313765303a383030303a3a2f33332d3333203d3e20323633323536.roa (raw, json)
Hash identifier:          AB1sKxkW7n9sWukNz2LNwxIkedVdU+XeF2CAkzZaMPk=
Subject key identifier:   2C:B3:47:18:EB:93:7C:E3:E7:66:1D:B2:EF:3B:3F:3C:4F:23:24:0F
Certificate issuer:       /CN=0156B956215AE4C7F951D9FABA7689B0C1830680
Certificate serial:       64B54DCD26DEB5D9FC757BDBE371EEDBDE5FF655
Authority key identifier: 01:56:B9:56:21:5A:E4:C7:F9:51:D9:FA:BA:76:89:B0:C1:83:06:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0156B956215AE4C7F951D9FABA7689B0C1830680.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/323830343a313765303a383030303a3a2f33332d3333203d3e20323633323536.roa
Signing time:             Fri 23 May 2025 16:53:05 +0000
ROA not before:           Fri 23 May 2025 16:48:05 +0000
ROA not after:            Fri 22 May 2026 16:53:05 +0000
asID:                     263256
IP address blocks:        2804:17e0:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:b5:4d:cd:26:de:b5:d9:fc:75:7b:db:e3:71:ee:db:de:5f:f6:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0156B956215AE4C7F951D9FABA7689B0C1830680
        Validity
            Not Before: May 23 16:48:05 2025 GMT
            Not After : May 22 16:53:05 2026 GMT
        Subject: CN=2CB34718EB937CE3E7661DB2EF3B3F3C4F23240F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:da:4a:36:3c:ed:f9:23:d1:ba:ca:42:74:1f:
                    18:97:17:38:84:d6:ba:80:79:51:d6:5b:38:b8:7d:
                    c2:ec:4e:39:3e:ab:87:dd:a7:98:e5:10:b1:a6:c7:
                    73:df:d0:79:2d:29:dc:72:46:57:06:d9:94:61:59:
                    00:0f:93:00:e2:8b:a7:03:92:43:46:b4:85:ff:99:
                    65:d2:16:a0:5c:e6:99:61:27:bf:54:ce:f6:5a:2c:
                    03:29:21:b1:d1:c6:1c:eb:99:8a:d1:2c:35:a1:38:
                    ce:66:e6:53:4d:88:0a:3f:bb:e1:ca:e6:8f:76:bc:
                    40:f2:25:ff:7d:47:2f:5c:b4:a5:92:a8:60:63:bf:
                    2a:f1:96:e2:bb:e9:0d:d3:0c:7c:2d:2d:8b:7c:a2:
                    e8:0b:d8:c8:2a:55:95:0f:31:af:51:88:eb:01:70:
                    d5:09:19:e2:7a:c9:3a:6b:46:bc:d3:2f:20:f7:1c:
                    1d:40:ed:ee:4f:14:33:39:0a:5d:a2:93:94:66:47:
                    1e:8b:ce:17:44:4c:a5:d1:15:4e:a4:ae:1b:f1:ae:
                    b9:c3:8d:32:2f:b9:80:28:b2:48:a9:03:75:52:71:
                    49:67:3f:18:c5:7d:9f:dd:39:87:9b:a8:8e:fb:bf:
                    cd:55:47:41:84:78:dd:46:ed:e7:fd:cb:77:de:95:
                    bd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B3:47:18:EB:93:7C:E3:E7:66:1D:B2:EF:3B:3F:3C:4F:23:24:0F
            X509v3 Authority Key Identifier:
                keyid:01:56:B9:56:21:5A:E4:C7:F9:51:D9:FA:BA:76:89:B0:C1:83:06:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/0156B956215AE4C7F951D9FABA7689B0C1830680.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0156B956215AE4C7F951D9FABA7689B0C1830680.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/323830343a313765303a383030303a3a2f33332d3333203d3e20323633323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:17e0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         4e:98:75:67:10:9d:f1:de:fd:74:92:d4:98:25:59:94:77:2c:
         c5:08:97:6f:81:7a:75:66:4e:ae:8a:e5:9c:5e:c2:8f:c6:d0:
         f4:00:7a:21:2c:9b:34:40:1f:a2:1a:64:c1:4d:d1:9d:b6:a7:
         b8:9c:a4:76:c9:3d:f2:66:ac:80:cb:2a:1e:af:7c:87:7a:f1:
         d9:6e:c1:a7:88:aa:02:37:df:e5:f1:1f:7d:b5:ae:2a:7b:ce:
         73:73:dd:06:d0:12:de:65:38:a0:ac:aa:45:15:d3:17:72:97:
         b0:0f:3b:c5:a5:e3:68:37:1e:57:19:d1:02:e1:93:ec:6c:82:
         88:a3:2a:55:91:c8:64:92:55:fe:b0:76:81:60:26:19:af:70:
         3c:c3:bf:2a:a5:7f:00:46:1c:25:9b:2d:6d:9d:48:e9:65:d4:
         4a:b6:01:06:b8:06:e2:85:52:b1:85:38:5e:64:41:44:b5:42:
         5b:1d:9f:a1:8f:11:82:eb:fe:17:f2:f6:0a:a6:74:3c:c0:ec:
         5c:d4:fd:93:00:51:cc:7f:69:83:ec:15:92:56:d8:33:8c:b7:
         23:09:8b:c5:3c:63:99:41:7c:91:29:02:8d:6b:8e:07:72:07:
         ce:43:89:8f:4a:11:20:8e:d3:f8:6b:af:49:d6:5d:5f:1f:9f:
         bf:9e:44:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:56:07 2025 by rpki-client