Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383031323a3a2f34382d3438203d3e203532343638.roa
File:                     323830343a326237383a383031323a3a2f34382d3438203d3e203532343638.roa (raw, json)
Hash identifier:          bF154uyuY1Gvct4EB8682q0itL6fltCiXtlrqLBC7EU=
Subject key identifier:   B4:F2:52:C9:70:23:1D:39:6C:10:A0:5B:68:FC:AF:A3:8B:EF:B1:B4
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       4BCC296E68B2B61383FB5B6523F3E585E13D1CB5
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383031323a3a2f34382d3438203d3e203532343638.roa
Signing time:             Fri 07 Mar 2025 20:41:32 +0000
ROA not before:           Fri 07 Mar 2025 20:36:32 +0000
ROA not after:            Fri 06 Mar 2026 20:41:32 +0000
asID:                     52468
IP address blocks:        2804:2b78:8012::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:cc:29:6e:68:b2:b6:13:83:fb:5b:65:23:f3:e5:85:e1:3d:1c:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Mar  7 20:36:32 2025 GMT
            Not After : Mar  6 20:41:32 2026 GMT
        Subject: CN=3082010A0282010100C0E1F6D1B90E1B6D6E2716F38DDC70FF646498AAE66DC7E02D17931C27EC798FD4A9699567AA49E629E6625D640E8BC4521080AF59CC7740AAA50B96395928049CE0EE057174F2A4604B68B1B7D289695EDDFE260C91BBF98449D3794319299006EAFB029C117D8F89C3D677E3A55B38DBA9636A518703E5A19A64A3102B956B9DE17F0666B6DB54F2DEBCD9C2F8A43D53DDAA7752CF3004211A692EE4529E46D12DB86B786D8799896CEA29BF19581C893517E1AEFEE14A4D78386EE23DBD0D2CE881660700D346D4DF1E805172A39068009F7E7890CB02F1E770E879C4BFA0AD5717F0293CF21708B4FD42AEE54CDA577409169B8B2660384E1F88EFE9334B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e1:f6:d1:b9:0e:1b:6d:6e:27:16:f3:8d:dc:
                    70:ff:64:64:98:aa:e6:6d:c7:e0:2d:17:93:1c:27:
                    ec:79:8f:d4:a9:69:95:67:aa:49:e6:29:e6:62:5d:
                    64:0e:8b:c4:52:10:80:af:59:cc:77:40:aa:a5:0b:
                    96:39:59:28:04:9c:e0:ee:05:71:74:f2:a4:60:4b:
                    68:b1:b7:d2:89:69:5e:dd:fe:26:0c:91:bb:f9:84:
                    49:d3:79:43:19:29:90:06:ea:fb:02:9c:11:7d:8f:
                    89:c3:d6:77:e3:a5:5b:38:db:a9:63:6a:51:87:03:
                    e5:a1:9a:64:a3:10:2b:95:6b:9d:e1:7f:06:66:b6:
                    db:54:f2:de:bc:d9:c2:f8:a4:3d:53:dd:aa:77:52:
                    cf:30:04:21:1a:69:2e:e4:52:9e:46:d1:2d:b8:6b:
                    78:6d:87:99:89:6c:ea:29:bf:19:58:1c:89:35:17:
                    e1:ae:fe:e1:4a:4d:78:38:6e:e2:3d:bd:0d:2c:e8:
                    81:66:07:00:d3:46:d4:df:1e:80:51:72:a3:90:68:
                    00:9f:7e:78:90:cb:02:f1:e7:70:e8:79:c4:bf:a0:
                    ad:57:17:f0:29:3c:f2:17:08:b4:fd:42:ae:e5:4c:
                    da:57:74:09:16:9b:8b:26:60:38:4e:1f:88:ef:e9:
                    33:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F2:52:C9:70:23:1D:39:6C:10:A0:5B:68:FC:AF:A3:8B:EF:B1:B4
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383031323a3a2f34382d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b78:8012::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:7b:b4:f5:72:10:7c:97:1c:cd:44:af:18:be:75:03:0f:e6:
         0f:5e:19:99:a1:52:d9:d9:27:72:4f:15:00:55:6a:2f:fa:29:
         ae:ce:e6:5b:59:94:b4:06:80:53:dc:c3:ce:60:6e:81:2b:b8:
         91:43:8f:35:24:29:51:ac:6a:ff:31:dc:db:55:00:b5:0b:db:
         b5:f2:a4:c2:7d:79:db:f9:31:1d:ca:5d:d9:bc:19:9a:ba:d1:
         04:e2:c2:fe:e9:bd:23:91:ea:da:fa:58:e7:a3:a2:83:ba:83:
         40:c1:86:89:fe:ff:34:dc:8a:0d:8a:c7:e6:43:6b:1b:bb:71:
         94:68:a6:4f:40:9a:05:b2:46:db:1f:40:84:61:ea:9f:41:32:
         80:38:a4:e3:24:cc:cc:ac:ef:45:9a:f1:14:4c:ba:7c:04:ac:
         24:af:4e:a7:b0:dc:b1:d2:9a:3f:3c:2b:b9:e5:12:7e:e8:32:
         03:63:47:df:80:b7:15:af:b9:c3:19:b3:52:18:17:8e:cb:ab:
         55:d5:bb:99:af:51:b0:58:e9:78:b1:0f:35:7e:bb:01:c3:8c:
         51:2c:b0:67:88:68:f2:66:8b:71:22:e5:a8:ad:f6:a7:50:6d:
         59:0d:19:e8:9f:0c:50:bd:f2:ff:77:17:fc:d1:9d:37:fb:11:
         7f:40:81:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:50:17 2025 by rpki-client