Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a3a2f33322d3332203d3e203533313038.roa
File:                     323830343a326237383a3a2f33322d3332203d3e203533313038.roa (raw, json)
Hash identifier:          btTrvJ85CSwFxxzZttKH7mZPN2Stez6z2cR5bPSgGlQ=
Subject key identifier:   28:07:86:28:62:B3:AD:B0:45:85:16:6B:8D:A3:67:DF:AB:99:EB:8E
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       3699E15229830E60AEABD2DE20E223DF89221BFB
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a3a2f33322d3332203d3e203533313038.roa
Signing time:             Thu 13 Feb 2025 19:59:10 +0000
ROA not before:           Thu 13 Feb 2025 19:54:10 +0000
ROA not after:            Thu 12 Feb 2026 19:59:10 +0000
asID:                     53108
IP address blocks:        2804:2b78::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:99:e1:52:29:83:0e:60:ae:ab:d2:de:20:e2:23:df:89:22:1b:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Feb 13 19:54:10 2025 GMT
            Not After : Feb 12 19:59:10 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:67:e2:e6:ed:0a:09:bb:4e:a4:fb:15:89:b8:
                    b0:e5:34:5c:09:d1:55:2b:ab:be:89:76:a1:c4:6f:
                    87:05:f2:7a:5e:7f:49:fc:07:d4:f9:bb:2e:1a:66:
                    0a:bb:8a:bb:2a:37:27:0b:3d:43:b6:d0:22:49:95:
                    b0:34:0a:99:e1:9f:2f:77:24:a6:b2:41:1e:a5:46:
                    96:8b:27:3e:8f:ab:bc:6f:e4:ab:b9:5d:e7:45:48:
                    f5:dd:e0:10:a2:a6:66:cd:c3:a2:1c:d7:71:62:3a:
                    60:34:27:40:a4:91:89:d1:ce:bb:c3:0b:6d:31:85:
                    5b:f5:8c:4b:42:db:6a:93:ec:60:74:6a:09:33:b8:
                    89:9a:23:3b:6b:99:8e:d0:46:11:0f:ad:f1:08:9b:
                    9f:ac:a3:78:a5:a8:5b:1d:1a:7b:4f:66:de:cc:a3:
                    87:99:7c:20:ca:03:e4:f2:5b:cf:d5:12:3e:9c:66:
                    94:28:c2:27:61:af:2a:86:84:66:75:7b:ce:1f:a8:
                    32:ea:f4:05:b1:ee:14:89:80:f4:37:82:69:23:9d:
                    d0:15:5f:7e:47:0c:7c:80:c6:8b:c4:8c:1f:ab:8b:
                    ad:80:15:a1:06:67:46:bb:8b:2d:74:60:d5:35:97:
                    17:81:c4:9a:fa:88:1a:5b:40:dd:22:13:99:f3:36:
                    40:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:07:86:28:62:B3:AD:B0:45:85:16:6B:8D:A3:67:DF:AB:99:EB:8E
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a3a2f33322d3332203d3e203533313038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b78::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:66:ad:46:03:4b:9b:3a:c2:62:0e:06:37:fc:f5:f3:8f:64:
         01:a0:23:c0:47:83:18:cf:55:9b:e0:83:48:e8:5d:b8:79:81:
         ae:5d:65:bb:9b:72:f3:91:df:9e:d9:a3:68:81:34:9e:07:f0:
         29:6b:e5:09:e6:55:06:2f:98:6f:9c:a1:07:bd:a8:5b:af:7e:
         af:e2:3b:c6:ae:55:2e:a8:47:ec:29:a7:7d:e8:9c:6c:fd:bc:
         14:35:e3:9d:af:6d:f4:16:7a:f1:31:43:ef:a1:21:ec:06:b4:
         da:95:e9:91:b9:58:07:49:25:df:b6:9f:7e:94:fb:46:eb:5b:
         60:de:06:e7:6d:15:86:84:1f:ba:cd:a9:a7:75:7a:d3:7a:11:
         63:fa:ae:cb:bc:7f:18:94:28:05:61:ea:92:ac:c1:56:ca:0e:
         1d:41:c3:be:89:61:0c:de:96:22:68:0c:76:38:35:fa:69:b0:
         d4:f7:41:50:13:ee:50:15:96:07:bf:d4:1d:85:89:8b:a2:82:
         03:a2:1e:c1:f7:36:e1:71:03:73:24:be:6a:6c:8c:b4:72:00:
         fa:d7:99:09:f0:66:77:15:ce:98:96:f7:e0:a2:db:b6:ea:50:
         44:27:24:dd:da:37:42:dd:cc:70:49:18:c1:94:df:0f:59:eb:
         df:d6:62:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:19:24 2025 by rpki-client