Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/3/323830343a6164633a3a2f33322d3335203d3e203532393237.roa
File:                     323830343a6164633a3a2f33322d3335203d3e203532393237.roa (raw, json)
Hash identifier:          eDx4BVH7DzY0eqCnpYUg+XwWovarycS0Itx8utueQWY=
Subject key identifier:   76:4C:9D:27:DA:31:37:5A:07:6B:95:26:60:91:84:B5:F1:B1:12:9D
Certificate issuer:       /CN=85F479D0628FB756E26AA406F0E8C072770444C8
Certificate serial:       493070A0C6B7A06BF20C1940C9F865A5916B74D5
Authority key identifier: 85:F4:79:D0:62:8F:B7:56:E2:6A:A4:06:F0:E8:C0:72:77:04:44:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85F479D0628FB756E26AA406F0E8C072770444C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/3/323830343a6164633a3a2f33322d3335203d3e203532393237.roa
Signing time:             Fri 07 Mar 2025 02:28:22 +0000
ROA not before:           Fri 07 Mar 2025 02:23:22 +0000
ROA not after:            Fri 06 Mar 2026 02:28:22 +0000
asID:                     52927
IP address blocks:        2804:adc::/32 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:30:70:a0:c6:b7:a0:6b:f2:0c:19:40:c9:f8:65:a5:91:6b:74:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85F479D0628FB756E26AA406F0E8C072770444C8
        Validity
            Not Before: Mar  7 02:23:22 2025 GMT
            Not After : Mar  6 02:28:22 2026 GMT
        Subject: CN=764C9D27DA31375A076B9526609184B5F1B1129D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:76:98:cc:62:35:33:4f:05:6f:4e:5c:64:d8:
                    64:dd:68:78:2c:7f:c1:19:fa:4a:12:55:38:7e:b9:
                    82:78:54:fa:8e:61:c7:12:7e:ec:d0:0e:9c:27:5d:
                    bb:a3:0b:9f:ef:c2:de:7f:ea:d1:79:43:09:52:21:
                    c4:b9:5f:6f:da:52:0b:10:1c:30:9b:8b:ba:04:56:
                    ce:1a:69:a0:91:19:71:a4:60:30:ad:89:6c:79:86:
                    f7:95:fa:38:d1:03:2b:30:cf:33:73:2b:4b:d8:b4:
                    8b:c9:5e:7a:b0:6c:e2:4e:82:0b:ce:39:ca:dd:4d:
                    cc:55:61:e9:19:f5:b1:d7:86:28:18:79:41:b6:e5:
                    24:41:bf:18:07:15:66:c0:02:d1:33:61:21:8f:1a:
                    5f:82:46:ae:a1:81:f0:b8:8d:8f:69:f5:0b:88:b2:
                    3e:aa:96:a8:d2:56:7e:12:1b:2d:53:ff:45:75:98:
                    48:21:71:30:0e:c6:66:8d:3e:14:68:81:fa:5f:92:
                    52:10:0a:59:8b:78:4f:f8:95:97:a0:6f:bc:10:c5:
                    2d:12:c7:0e:0b:15:eb:d0:d7:b8:a9:72:f4:f7:74:
                    f5:7a:92:ad:ec:c4:76:6d:a3:46:69:cd:46:8f:86:
                    30:9e:00:36:9e:47:69:4e:fc:e8:f3:08:68:19:6e:
                    6a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:4C:9D:27:DA:31:37:5A:07:6B:95:26:60:91:84:B5:F1:B1:12:9D
            X509v3 Authority Key Identifier:
                keyid:85:F4:79:D0:62:8F:B7:56:E2:6A:A4:06:F0:E8:C0:72:77:04:44:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/3/85F479D0628FB756E26AA406F0E8C072770444C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85F479D0628FB756E26AA406F0E8C072770444C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/3/323830343a6164633a3a2f33322d3335203d3e203532393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:adc::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:0d:32:a4:9a:69:cd:90:63:9c:05:97:38:3d:65:37:87:70:
         8d:de:d8:1e:4a:b3:7b:8e:ff:d3:c4:4c:57:d0:b7:5b:0b:ae:
         98:ef:77:fc:7a:d0:6e:92:91:23:e8:8c:81:5d:06:2b:51:31:
         e4:45:a3:b0:21:92:d7:c0:71:0c:05:d6:72:6d:c2:f7:cb:0f:
         b2:ca:0b:e8:03:ac:c7:4a:33:c1:42:2d:ba:e1:29:29:ea:bb:
         7f:a4:a8:67:14:d5:26:25:52:e0:c7:a6:8e:40:93:9a:2a:81:
         c6:ec:df:cc:7f:40:42:f1:dd:5c:e8:b9:f0:e6:69:b3:42:ec:
         05:d0:b8:1c:2c:51:de:ec:1d:2f:ce:d6:1a:7d:3a:67:a5:e9:
         69:60:d5:4e:9b:e6:df:7a:69:a4:96:2d:3f:f2:d6:9e:46:df:
         fb:c9:ae:18:7a:0a:44:8d:7d:63:0c:d3:a9:7d:a1:d8:bb:bb:
         62:31:48:1a:4d:fa:fa:c9:9c:c1:80:0b:d3:2a:27:6a:1e:89:
         ae:10:d0:17:b8:74:39:90:fb:b3:85:2d:ea:6b:ae:7c:a0:f4:
         98:18:61:06:cd:d7:c2:a4:25:6d:ba:5d:87:4f:3a:bf:c2:a5:
         b1:a1:7e:9e:77:0e:7a:d8:83:0b:a6:13:fc:c2:89:fd:88:cd:
         e8:5a:49:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:46:27 2025 by rpki-client