Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383031633a3a2f34382d3438203d3e203532343638.roa
File:                     323830343a326237383a383031633a3a2f34382d3438203d3e203532343638.roa (raw, json)
Hash identifier:          MnSTXmbqpCUdBNAU85sFYRWq4pLwzFz0Lu2jotsHlNY=
Subject key identifier:   0B:34:01:4A:8C:75:F0:23:15:5F:9B:85:41:D6:4D:87:F6:C6:0C:2C
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       23755D186AC8D5E8F037E19A0A73AC00F4B55163
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383031633a3a2f34382d3438203d3e203532343638.roa
Signing time:             Thu 13 Feb 2025 15:49:25 +0000
ROA not before:           Thu 13 Feb 2025 15:44:25 +0000
ROA not after:            Thu 12 Feb 2026 15:49:25 +0000
asID:                     52468
IP address blocks:        2804:2b78:801c::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:75:5d:18:6a:c8:d5:e8:f0:37:e1:9a:0a:73:ac:00:f4:b5:51:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Feb 13 15:44:25 2025 GMT
            Not After : Feb 12 15:49:25 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a0:c7:fd:2d:25:72:46:11:fc:0d:5e:7a:93:
                    75:f9:06:30:ba:3e:0d:45:5c:fc:7c:0d:30:14:0c:
                    47:8e:a0:0d:86:8a:75:41:6b:5d:74:01:53:7c:ce:
                    0d:26:bc:21:4c:45:12:97:80:76:4e:a2:68:a8:2a:
                    b7:78:11:6e:26:f1:6b:df:05:ff:b2:1c:a8:0c:22:
                    90:f3:81:e5:8d:87:c1:79:93:09:e6:91:b6:e4:f6:
                    b6:71:1f:89:80:08:0a:ba:19:46:6b:95:ec:ac:84:
                    4c:d4:74:0f:05:19:b7:39:04:27:08:99:8a:8d:dd:
                    62:1e:b7:dc:aa:a7:2b:eb:6f:27:11:cc:5d:9e:2a:
                    20:92:df:bc:0d:ab:5b:2b:3a:b8:13:c4:e6:b8:58:
                    84:c6:dc:5a:8a:a2:15:f1:5c:1b:ba:13:fa:dc:59:
                    7b:7a:62:19:71:68:dc:71:e9:bc:d6:42:0f:89:45:
                    bb:ef:11:1d:dd:2e:b4:61:09:51:ac:14:72:24:c6:
                    ae:5e:2e:93:2b:10:8f:71:fb:86:91:57:de:c4:3d:
                    01:ce:a3:b4:e9:70:96:ae:f9:76:a3:93:c0:ac:40:
                    e7:32:47:d8:b2:2d:81:42:f0:c6:f0:04:b4:b4:3a:
                    51:b9:08:67:5c:ef:34:54:48:1f:ea:13:80:99:1a:
                    90:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:34:01:4A:8C:75:F0:23:15:5F:9B:85:41:D6:4D:87:F6:C6:0C:2C
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383031633a3a2f34382d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b78:801c::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:b6:98:77:40:2a:96:06:a0:1e:c2:25:eb:b4:93:3f:63:e4:
         e7:75:80:e4:ea:b0:5d:8c:2d:3a:c6:b7:82:0f:02:f7:b0:c0:
         0f:bd:be:bd:cb:85:cc:17:a9:b7:17:43:ea:b1:07:fb:f8:92:
         28:06:5c:f6:5e:6b:33:64:e8:27:44:42:4a:e8:54:91:31:c9:
         b9:35:e3:27:7b:c0:86:70:ce:88:79:20:ec:54:18:6b:25:07:
         b2:10:66:1b:96:0f:0c:5d:c9:2b:1f:c3:a6:a5:a6:27:8d:8c:
         74:62:7d:0c:b9:50:2b:78:2a:68:b6:29:65:a5:59:03:e4:a8:
         8b:2d:9e:4d:f1:e9:9d:c6:49:3d:d6:d3:4e:4c:db:41:34:97:
         44:da:35:a2:a2:1e:17:2f:bd:f0:e1:d1:46:b0:bd:9f:63:25:
         c6:24:33:46:50:7f:4f:35:23:41:a5:bc:11:b4:54:1b:3a:31:
         52:5c:4a:f3:6d:53:0a:09:4a:bf:3f:53:47:1c:db:99:06:81:
         a3:74:ed:b4:46:c8:98:ff:f7:e4:c3:c1:21:ed:2f:95:93:da:
         b3:fe:2c:2c:ce:1a:38:c7:7b:be:7e:3a:4e:51:d4:43:29:4c:
         f3:2a:58:2b:a0:67:71:a1:6b:ab:88:bb:44:5f:fd:c0:d5:06:
         19:43:07:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:32 2025 by rpki-client