Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383030633a3a2f34382d3438203d3e203532343638.roa
File:                     323830343a326237383a383030633a3a2f34382d3438203d3e203532343638.roa (raw, json)
Hash identifier:          aF9MjZByBVit0LxjaAvavlBzB3SGEK1MOljkAVDSi90=
Subject key identifier:   E8:67:24:64:C4:36:34:E5:07:38:25:6E:DA:18:D7:61:3A:A7:09:7A
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       564D2A57782EAD64BB8DF3E9C0B355BB921C8A63
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383030633a3a2f34382d3438203d3e203532343638.roa
Signing time:             Mon 10 Mar 2025 23:20:20 +0000
ROA not before:           Mon 10 Mar 2025 23:15:20 +0000
ROA not after:            Mon 09 Mar 2026 23:20:20 +0000
asID:                     52468
IP address blocks:        2804:2b78:800c::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:4d:2a:57:78:2e:ad:64:bb:8d:f3:e9:c0:b3:55:bb:92:1c:8a:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Mar 10 23:15:20 2025 GMT
            Not After : Mar  9 23:20:20 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:24:61:ee:11:19:ad:f1:03:45:fc:bc:5b:59:
                    3c:87:a0:d3:53:47:21:05:6d:ac:b5:00:c0:78:4a:
                    bc:97:9e:af:f7:8e:27:51:9c:51:fb:77:94:c8:fb:
                    dc:1b:60:95:9b:69:63:d2:7b:eb:dc:10:b3:dd:2a:
                    01:9d:72:78:65:6a:27:08:92:74:b9:48:82:e4:ca:
                    53:b9:25:b2:01:e6:70:88:de:f5:80:28:1e:5c:b1:
                    a0:0f:01:3e:f2:ab:97:28:6c:b1:a7:fe:84:70:b9:
                    36:6a:bd:fa:de:92:ed:ca:33:36:b3:26:aa:18:0f:
                    ca:5d:cf:b6:b3:06:68:09:fa:a8:33:e8:93:6e:ea:
                    ac:c2:ff:5b:b3:6d:a8:62:5c:fb:ec:53:aa:12:a9:
                    8b:68:1b:ca:9a:a2:4e:db:e9:b0:98:2b:a5:58:4f:
                    33:8a:da:09:7e:2b:00:2b:f3:4e:0f:82:9b:52:21:
                    f5:66:8d:f6:99:77:67:95:e5:31:51:a4:e7:6f:8c:
                    64:fb:be:ac:47:c9:c0:b1:17:e1:a7:6c:9f:b8:2f:
                    ae:df:63:d0:7d:9a:e4:59:d9:13:37:4d:00:d2:b5:
                    a3:0a:7d:32:a2:d6:97:07:56:53:6e:e7:6d:2c:d9:
                    e6:64:89:c2:aa:75:d9:85:66:d4:e3:cb:f6:e2:b6:
                    ae:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:67:24:64:C4:36:34:E5:07:38:25:6E:DA:18:D7:61:3A:A7:09:7A
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383030633a3a2f34382d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b78:800c::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:19:d6:38:1b:1a:d1:7d:3b:f5:63:25:87:bf:9c:ac:ca:56:
         11:b9:ab:30:06:69:48:92:50:08:dc:88:0a:33:57:a7:59:22:
         28:e1:d8:61:a2:12:1f:7f:d8:ee:2b:ea:4f:01:d4:90:1b:cf:
         59:37:b5:9b:50:13:0c:fa:1d:8e:85:8f:8a:4f:36:3d:27:0a:
         53:d2:b7:cd:1c:3a:d5:ee:ed:b2:4f:a2:c5:a2:11:74:e4:43:
         93:b6:e2:d3:70:d7:8d:11:29:96:c3:dc:7d:c7:d8:78:cb:e3:
         cf:b1:79:49:6f:80:98:47:ce:ff:0e:64:2f:b2:ce:30:36:42:
         69:45:63:dc:fa:8e:5e:c3:d8:90:db:ac:0c:6a:1e:f2:f0:df:
         a8:ed:82:d1:8a:06:61:78:34:f4:02:cd:56:9f:91:2f:e8:1d:
         4d:4e:42:e7:f7:a9:d9:22:9a:07:8e:28:7e:93:4c:5c:f4:b5:
         1a:f3:5d:97:65:1c:52:80:b3:08:1a:d9:05:8c:07:92:66:94:
         44:91:d9:2f:09:2d:76:c3:ce:3a:46:07:59:6c:bd:7b:b2:c6:
         f8:48:72:ef:83:4e:4e:34:ae:8d:d0:e3:66:e5:e0:c7:3b:71:
         0b:c8:9e:61:64:8a:de:c2:06:8a:24:70:a2:b0:17:bb:06:c9:
         f5:0a:e3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:24 2025 by rpki-client