Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/1/323830343a386235633a383030303a3a2f33332d3333203d3e20323733373238.roa
File:                     323830343a386235633a383030303a3a2f33332d3333203d3e20323733373238.roa (raw, json)
Hash identifier:          XQFLq+1BIzVqXtqOekyDKm3LssUodawRWFW01J3KXQ0=
Subject key identifier:   F0:4A:BD:83:D5:87:8D:4A:7B:4E:90:A3:0B:33:D0:BF:FB:04:C8:C6
Certificate issuer:       /CN=45064E98AD1F67D459052A6DF5771103DB536EFC
Certificate serial:       4C71C05BBB90252E341754E75D391FDF8624890A
Authority key identifier: 45:06:4E:98:AD:1F:67:D4:59:05:2A:6D:F5:77:11:03:DB:53:6E:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45064E98AD1F67D459052A6DF5771103DB536EFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/1/323830343a386235633a383030303a3a2f33332d3333203d3e20323733373238.roa
Signing time:             Wed 30 Jul 2025 21:19:11 +0000
ROA not before:           Wed 30 Jul 2025 21:14:11 +0000
ROA not after:            Wed 29 Jul 2026 21:19:11 +0000
asID:                     273728
IP address blocks:        2804:8b5c:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:71:c0:5b:bb:90:25:2e:34:17:54:e7:5d:39:1f:df:86:24:89:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45064E98AD1F67D459052A6DF5771103DB536EFC
        Validity
            Not Before: Jul 30 21:14:11 2025 GMT
            Not After : Jul 29 21:19:11 2026 GMT
        Subject: CN=F04ABD83D5878D4A7B4E90A30B33D0BFFB04C8C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:83:87:ff:01:50:4a:5c:d6:84:24:9e:ff:8c:
                    f8:f8:c3:d3:14:c7:a9:a8:15:87:01:b8:b6:e7:38:
                    6f:75:a1:c8:0e:0f:ca:4b:13:6b:43:01:aa:9f:8a:
                    f4:3f:2e:bb:48:12:57:cb:7c:2b:d9:89:fd:43:46:
                    34:a2:1c:71:ff:70:fb:e1:97:64:0e:2d:6d:5f:3c:
                    c3:21:77:c0:66:f8:c8:3f:bf:db:82:8d:b0:b2:16:
                    7e:01:63:71:4f:19:32:82:3e:2f:26:d6:14:24:73:
                    c1:09:44:3d:ec:1e:c0:e9:9b:af:74:ec:11:ca:24:
                    bc:a6:d8:4b:b7:90:4e:4d:fe:26:54:0c:7a:4c:62:
                    17:45:e0:d5:02:cb:98:e7:04:9c:00:3a:34:d0:50:
                    fd:0a:9c:7e:1f:a9:70:72:6a:a5:72:24:27:e4:98:
                    85:21:38:3a:95:a8:40:8b:b2:a0:40:65:ef:f2:26:
                    02:3c:93:0e:57:86:8e:d7:fc:55:36:ff:68:20:52:
                    9a:5c:74:67:bb:7f:4b:6c:aa:35:ec:e7:16:bb:c1:
                    1d:c8:e0:db:db:f1:17:81:d9:92:ca:95:8b:ca:bf:
                    45:bb:0d:b8:d3:ba:3e:9a:41:5c:6c:9a:3e:ff:e6:
                    f2:ea:ba:78:7b:fb:18:3f:da:68:11:00:81:74:1d:
                    a6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:4A:BD:83:D5:87:8D:4A:7B:4E:90:A3:0B:33:D0:BF:FB:04:C8:C6
            X509v3 Authority Key Identifier:
                keyid:45:06:4E:98:AD:1F:67:D4:59:05:2A:6D:F5:77:11:03:DB:53:6E:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/1/45064E98AD1F67D459052A6DF5771103DB536EFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45064E98AD1F67D459052A6DF5771103DB536EFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/1/323830343a386235633a383030303a3a2f33332d3333203d3e20323733373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b5c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         48:76:df:d0:2e:b0:14:c5:4c:a6:af:d3:23:c1:13:d2:10:d9:
         c0:42:41:87:ce:77:c7:1b:b3:c0:77:67:e8:b3:de:3f:3d:2e:
         14:2a:81:6f:12:bf:92:75:53:49:10:af:ab:ee:41:7e:86:c2:
         81:78:18:8c:d5:74:59:5d:b9:18:e2:a3:3c:2d:09:c1:bd:07:
         8a:69:8d:51:05:8c:5b:c2:33:64:86:51:2c:32:3b:9d:53:80:
         3c:37:6d:b5:91:f9:e0:f4:d8:79:57:64:05:d8:17:4f:9d:51:
         d7:e6:b1:ff:bb:53:aa:20:f9:a4:63:16:5c:e6:31:09:4f:7e:
         eb:b5:36:b1:b6:f9:02:f8:ac:af:79:9b:92:45:fb:a9:91:45:
         54:36:a5:e1:10:3d:a1:7d:e2:85:15:fb:9f:0b:41:08:1b:c9:
         14:69:eb:76:37:ee:b0:68:25:de:e9:3a:45:3b:33:47:85:e7:
         d5:74:aa:bb:6a:c9:95:4b:5a:2c:c2:fe:45:ae:45:88:e3:b5:
         45:35:06:27:a1:97:f0:9c:96:93:07:b1:c3:91:e9:14:fc:0d:
         85:17:7b:e4:a2:05:78:ce:61:e0:3c:60:ce:8b:c7:d4:b3:5d:
         70:15:fb:65:51:28:cf:1f:6d:29:c3:4d:d4:7f:85:50:83:70:
         3d:00:95:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 03:04:09 2025 by rpki-client