Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/323830343a323038343a3a2f33362d3336203d3e20323634343936.roa
File:                     323830343a323038343a3a2f33362d3336203d3e20323634343936.roa (raw, json)
Hash identifier:          xjk4sRMuybWzV9L+1VFzwKnSHbVEgdI8Qg+ZGGf3iDE=
Subject key identifier:   48:6A:60:20:DB:26:AE:1C:AC:B1:6B:11:28:32:FC:E2:31:8F:9F:83
Certificate issuer:       /CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
Certificate serial:       79829B9620CC9FDE2E48FE03146C68B26BD75F78
Authority key identifier: 97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/323830343a323038343a3a2f33362d3336203d3e20323634343936.roa
Signing time:             Wed 26 Feb 2025 16:41:36 +0000
ROA not before:           Wed 26 Feb 2025 16:36:36 +0000
ROA not after:            Wed 25 Feb 2026 16:41:36 +0000
asID:                     264496
IP address blocks:        2804:2084::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:82:9b:96:20:cc:9f:de:2e:48:fe:03:14:6c:68:b2:6b:d7:5f:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
        Validity
            Not Before: Feb 26 16:36:36 2025 GMT
            Not After : Feb 25 16:41:36 2026 GMT
        Subject: CN=486A6020DB26AE1CACB16B112832FCE2318F9F83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f4:19:33:3a:22:38:d0:2f:51:3e:48:69:40:
                    15:37:bd:4b:75:00:c2:48:62:b9:03:4a:9d:fd:55:
                    ed:25:ff:14:45:6b:86:7e:0e:d4:c3:be:af:82:cd:
                    2c:1b:ea:e6:9e:05:49:5f:39:bc:04:63:83:22:e0:
                    05:a5:40:f5:4e:c3:6d:5d:26:d8:d3:05:cf:dd:63:
                    15:bd:0b:47:2b:48:43:e6:bc:0a:22:cc:2e:58:1f:
                    25:a8:da:23:73:98:87:61:f0:0e:ce:a6:2c:fe:9b:
                    49:7a:55:3b:d2:fe:40:b3:29:60:2f:31:2d:72:51:
                    d7:17:c0:08:fd:4a:40:a3:76:b3:51:c0:c6:6b:3d:
                    df:9f:16:a3:89:3e:9b:b0:bd:d6:f2:df:de:be:4b:
                    6d:9b:5e:f4:71:67:80:6a:06:d7:ee:30:50:7f:19:
                    d9:20:38:e1:1d:8f:0e:c2:58:7c:ef:7e:5b:33:5b:
                    11:d4:42:0a:07:8a:19:34:59:1d:a9:3e:a8:39:86:
                    46:c5:ca:68:f9:fb:20:7a:e5:1f:bd:81:94:f8:6c:
                    13:e2:4c:6c:65:9a:95:3c:d6:ad:e8:cf:ed:c2:d1:
                    c7:06:61:18:89:8a:68:ea:8c:ed:05:3a:20:0c:ea:
                    99:de:f6:da:68:69:cf:48:0e:76:db:29:10:6c:90:
                    03:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:6A:60:20:DB:26:AE:1C:AC:B1:6B:11:28:32:FC:E2:31:8F:9F:83
            X509v3 Authority Key Identifier:
                keyid:97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/323830343a323038343a3a2f33362d3336203d3e20323634343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2084::/36

    Signature Algorithm: sha256WithRSAEncryption
         2f:19:b6:8f:fa:af:e7:6f:64:48:12:43:b3:28:98:57:cc:e9:
         a8:0d:5c:2a:28:0a:bb:7e:9a:85:a6:d5:4f:00:b4:60:b4:03:
         1b:f1:90:18:fe:9c:f9:b8:83:4a:0d:d3:2d:e2:d2:cb:a8:33:
         c4:b3:74:a0:57:66:33:e6:d9:0b:fe:91:b9:b0:cb:71:3f:ba:
         73:fe:83:6f:2d:bb:69:91:d3:a1:4e:8f:66:5c:3e:4e:2a:ec:
         67:92:9e:5d:cb:29:6c:c7:ce:3f:74:0d:70:f6:b0:fd:dc:58:
         d2:48:c9:06:e0:53:50:3b:58:50:a9:53:83:ad:aa:a6:2c:e4:
         8e:10:18:18:23:ce:5c:45:0d:ea:60:8a:01:e7:6e:3f:6c:51:
         5e:fd:6c:d4:07:6f:71:22:c6:7c:2f:95:3c:5a:70:50:86:0e:
         34:9a:71:80:b0:7f:29:c9:00:27:07:4b:e7:d0:a6:a5:fd:8e:
         ae:7c:d3:73:f9:26:b8:34:17:a9:38:88:ec:11:46:2c:d1:15:
         00:53:fc:56:a9:fd:1e:d3:c2:c4:69:dd:01:18:fa:76:18:8c:
         af:e2:f6:e4:72:e6:4b:e2:fd:04:87:34:09:c5:37:3d:89:8e:
         6d:7b:a4:04:a9:2e:7d:dd:81:4b:37:0b:76:05:c2:a1:df:c5:
         49:df:cf:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:54:04 2025 by rpki-client