Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/323830343a336137383a3a2f33322d3438203d3e20323636303931.roa
File:                     323830343a336137383a3a2f33322d3438203d3e20323636303931.roa (raw, json)
Hash identifier:          hTMjYKeXC/M6OdDXuJYg47J8XfGr4MytiTOYk9kboqU=
Subject key identifier:   4C:98:97:EF:A1:61:38:10:F3:E0:E6:9A:E8:8D:91:5D:40:68:59:2C
Certificate issuer:       /CN=D272B79940440721190429AABBA45B0BB5589F3E
Certificate serial:       523BA54A3F120C961161A6CAC90D328AA804F89D
Authority key identifier: D2:72:B7:99:40:44:07:21:19:04:29:AA:BB:A4:5B:0B:B5:58:9F:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D272B79940440721190429AABBA45B0BB5589F3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/323830343a336137383a3a2f33322d3438203d3e20323636303931.roa
Signing time:             Mon 27 Jan 2025 12:50:02 +0000
ROA not before:           Mon 27 Jan 2025 12:45:02 +0000
ROA not after:            Mon 26 Jan 2026 12:50:02 +0000
asID:                     266091
IP address blocks:        2804:3a78::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:3b:a5:4a:3f:12:0c:96:11:61:a6:ca:c9:0d:32:8a:a8:04:f8:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D272B79940440721190429AABBA45B0BB5589F3E
        Validity
            Not Before: Jan 27 12:45:02 2025 GMT
            Not After : Jan 26 12:50:02 2026 GMT
        Subject: CN=4C9897EFA1613810F3E0E69AE88D915D4068592C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2b:21:d9:ba:39:48:84:44:e4:4a:ab:3e:76:
                    92:25:aa:fa:22:16:e0:f8:11:a8:25:46:21:b3:33:
                    d1:bc:32:7a:9f:ff:39:ff:8b:a8:44:53:2c:74:2c:
                    52:a9:99:c9:ed:c5:e8:40:3f:fd:13:62:c5:bb:7d:
                    7e:e7:13:af:dd:a0:0a:de:3d:b2:84:62:31:f0:93:
                    69:73:1b:e2:c1:55:ac:c4:e8:88:ce:fa:32:2e:7c:
                    4e:45:53:56:03:a8:84:4c:2c:18:62:d6:e8:87:00:
                    8b:fc:17:16:e5:df:86:87:7d:4b:70:d1:60:0f:f9:
                    18:be:84:ed:83:ad:9b:40:f2:5b:58:e3:8f:78:92:
                    4d:3f:63:12:17:b6:2f:9b:17:e1:8d:ca:9c:96:98:
                    9d:b5:46:93:42:0d:63:48:ff:63:7d:9a:3e:3a:bd:
                    3c:e1:ee:2a:95:20:7a:b6:fb:95:ec:8e:3b:9e:53:
                    e0:1b:90:da:c3:29:7a:b1:e8:c2:6d:51:3f:7c:1c:
                    c4:10:9b:09:74:aa:15:8c:8e:35:f7:15:13:2f:6e:
                    1b:37:72:02:f0:cd:46:6d:e8:f6:fb:c8:ee:3f:67:
                    fa:36:02:d7:1b:f9:9a:27:0d:ef:35:68:5a:d5:84:
                    75:91:3e:a2:81:32:bf:85:d7:3b:aa:5f:15:6d:44:
                    e9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:98:97:EF:A1:61:38:10:F3:E0:E6:9A:E8:8D:91:5D:40:68:59:2C
            X509v3 Authority Key Identifier:
                keyid:D2:72:B7:99:40:44:07:21:19:04:29:AA:BB:A4:5B:0B:B5:58:9F:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/D272B79940440721190429AABBA45B0BB5589F3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D272B79940440721190429AABBA45B0BB5589F3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/323830343a336137383a3a2f33322d3438203d3e20323636303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a78::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:6c:1e:1a:fc:63:47:81:08:a5:07:f5:46:cb:de:31:5f:68:
         14:74:bd:07:c7:ea:40:c8:2a:7c:33:2d:76:e5:7b:12:5f:a7:
         39:70:89:31:a1:3d:35:19:ee:17:4f:f0:70:02:2f:06:ca:e7:
         c2:a3:71:57:4d:f4:5a:e5:47:45:08:25:e0:34:ea:a7:fd:8f:
         c9:81:4d:db:48:f2:30:56:c0:95:53:17:88:31:53:3e:3c:ae:
         00:f1:8e:74:ed:15:9a:2e:30:14:d0:15:f1:77:1e:dc:38:48:
         d4:62:f7:c4:98:fb:dd:6b:93:a7:bb:bd:56:cf:d6:ca:97:5a:
         a6:92:48:7b:5b:14:0f:6e:66:a9:c9:da:37:24:36:c6:eb:b2:
         f4:9e:53:51:90:0b:e9:1d:43:0e:eb:34:fb:8c:bb:f2:f6:e5:
         b4:df:67:57:c7:32:88:91:ed:8a:c8:77:05:69:2e:c9:70:18:
         de:87:5d:90:17:54:b7:82:9a:85:08:10:d3:4c:a5:13:f8:6a:
         54:0c:45:ad:43:ee:e2:d9:f3:60:ef:fd:f5:78:00:73:e8:33:
         95:f7:84:cb:17:07:f5:63:a9:ab:c7:f7:47:e9:55:c4:50:48:
         64:d9:97:dc:5f:ef:72:33:e7:47:b7:0e:3b:7f:00:24:dc:40:
         3d:3b:56:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:04:43 2025 by rpki-client