Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383030653a3a2f34382d3438203d3e203532343638.roa
File:                     323830343a326237383a383030653a3a2f34382d3438203d3e203532343638.roa (raw, json)
Hash identifier:          i+YFArZTyYhG5TRr8tJMr4+Q9J2yunvyLmhjJSQETO0=
Subject key identifier:   6A:24:12:20:A8:CA:67:A0:12:20:75:94:78:8D:B7:7F:2E:31:B8:AC
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       320A7C90103F06A778CF7C2661124CB89C067188
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383030653a3a2f34382d3438203d3e203532343638.roa
Signing time:             Mon 10 Mar 2025 23:20:32 +0000
ROA not before:           Mon 10 Mar 2025 23:15:32 +0000
ROA not after:            Mon 09 Mar 2026 23:20:32 +0000
asID:                     52468
IP address blocks:        2804:2b78:800e::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:0a:7c:90:10:3f:06:a7:78:cf:7c:26:61:12:4c:b8:9c:06:71:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Mar 10 23:15:32 2025 GMT
            Not After : Mar  9 23:20:32 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d3:47:c9:e2:f5:56:09:be:99:0d:ea:8b:54:
                    e6:9e:01:a3:d8:9e:a1:2f:fa:cb:73:31:4b:36:5e:
                    14:90:b1:0d:1e:89:91:fb:d6:21:8f:6b:5c:8c:d4:
                    70:a8:48:05:39:02:2b:66:fb:25:c4:fc:44:de:f1:
                    50:83:86:0a:70:bd:ad:9c:a4:8d:79:1f:a7:7c:a6:
                    ba:8f:70:a3:7d:80:77:87:fd:be:96:ac:c5:c3:81:
                    10:b5:dd:b7:ac:40:39:da:15:bf:37:5e:f3:4e:f9:
                    dd:dc:9e:62:4e:11:82:3c:4e:92:66:d7:86:95:b8:
                    ba:88:92:ee:ee:16:60:aa:8e:e4:59:47:1d:17:dd:
                    ba:10:69:5a:0e:62:01:38:ab:57:26:db:ce:9e:99:
                    7b:94:08:ae:c7:3e:e6:cd:99:79:8b:e4:73:cd:3c:
                    32:82:30:96:86:56:60:c1:43:9a:07:a0:e6:48:f5:
                    87:07:49:17:9f:4e:64:82:97:92:c0:62:66:43:b7:
                    69:71:45:25:7b:80:52:7d:8b:60:4a:ee:6d:e6:eb:
                    0d:a3:2d:d2:a9:4c:e7:8b:8d:d4:51:a8:cd:ae:57:
                    54:17:d5:43:14:6c:0a:1a:82:12:88:a9:96:8d:57:
                    e2:f9:ba:7b:05:a0:45:c9:40:cf:3a:d2:a0:c4:3f:
                    6f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:24:12:20:A8:CA:67:A0:12:20:75:94:78:8D:B7:7F:2E:31:B8:AC
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383030653a3a2f34382d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b78:800e::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:2e:5c:b9:1d:28:55:cc:6a:4f:03:fc:aa:5f:c1:a4:4d:b4:
         6c:d5:08:5d:b1:32:a4:5b:b8:7b:66:03:09:55:25:a5:69:0d:
         0c:b7:ab:20:5d:68:4d:d4:e7:ab:78:69:7f:47:9e:90:4c:12:
         7c:4d:d0:ec:75:19:fe:fc:74:79:e5:32:21:76:61:20:59:0e:
         ba:65:87:30:87:e3:b4:61:df:7d:13:fa:38:25:1f:1c:62:be:
         c7:25:3c:ee:76:c3:6f:3a:95:26:d1:b4:54:a4:f1:43:ff:40:
         cd:ad:43:f4:dd:0b:33:61:2a:e0:f5:10:fe:ad:c7:e5:8b:86:
         08:60:ae:93:95:b1:a2:e9:ee:88:16:4a:af:95:c3:f6:cd:3a:
         aa:bb:c2:18:5c:65:46:db:1e:89:fc:3d:9c:0a:c8:1f:6b:60:
         bf:33:1e:ad:44:cf:ab:49:8a:8b:29:0b:19:43:ba:f5:a4:11:
         a2:a2:c7:07:6b:4d:78:f4:6c:73:5b:d2:10:a9:50:64:a8:a1:
         e0:ba:53:15:93:5e:ce:48:8a:f8:f2:c7:b7:9d:a4:34:3c:d5:
         4c:05:36:31:1d:f1:b4:e8:f6:dc:1a:ee:ab:5c:c5:90:9b:d3:
         eb:56:06:00:ca:22:ad:c2:e3:70:a7:2b:d3:7f:b6:ce:b8:58:
         ca:8c:a3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:26 2025 by rpki-client