Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/3/323830343a386235633a383030303a3a2f33332d3333203d3e20323733373238.roa
File:                     323830343a386235633a383030303a3a2f33332d3333203d3e20323733373238.roa (raw, json)
Hash identifier:          LU+mCSJsvouUuXiWNadiTERIqRuzji/vL28nD0tGp/0=
Subject key identifier:   7D:01:84:B8:7F:9F:57:E9:12:5E:C5:98:94:20:5A:3C:9D:89:69:71
Certificate issuer:       /CN=49FFAF88F9E3352C5D66D4196264FC0F7B911B27
Certificate serial:       26CD87BF8EDEFD21EF16ACFE66F33927D13918BA
Authority key identifier: 49:FF:AF:88:F9:E3:35:2C:5D:66:D4:19:62:64:FC:0F:7B:91:1B:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49FFAF88F9E3352C5D66D4196264FC0F7B911B27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/3/323830343a386235633a383030303a3a2f33332d3333203d3e20323733373238.roa
Signing time:             Mon 02 Dec 2024 14:06:30 +0000
ROA not before:           Mon 02 Dec 2024 14:01:30 +0000
ROA not after:            Mon 01 Dec 2025 14:06:30 +0000
asID:                     273728
IP address blocks:        2804:8b5c:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:cd:87:bf:8e:de:fd:21:ef:16:ac:fe:66:f3:39:27:d1:39:18:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49FFAF88F9E3352C5D66D4196264FC0F7B911B27
        Validity
            Not Before: Dec  2 14:01:30 2024 GMT
            Not After : Dec  1 14:06:30 2025 GMT
        Subject: CN=7D0184B87F9F57E9125EC59894205A3C9D896971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d2:21:10:e8:96:53:ca:55:08:73:8d:f3:6b:
                    a4:4a:d4:3c:c6:4b:3c:7b:e0:e0:68:e9:30:43:1f:
                    28:c7:6a:b7:37:99:23:6d:4b:fe:2f:25:e7:ce:4a:
                    cb:b4:08:1f:0a:38:5e:4b:1f:2c:07:d1:b1:a8:cb:
                    32:fc:c9:c8:38:f5:e2:58:30:1f:b4:2b:7a:17:9b:
                    40:18:8f:3e:de:fb:f1:54:93:39:e1:67:8e:cb:d6:
                    ee:8f:e2:5e:59:74:9a:b5:a6:c1:b3:64:6a:77:aa:
                    5b:6a:62:a1:4c:e4:f4:bc:7c:b7:e2:a4:5f:0f:bd:
                    24:40:bf:a2:28:f6:60:d7:1a:29:eb:c7:ff:12:85:
                    07:e0:01:28:3d:53:6e:9c:8c:bc:d2:d6:3c:af:0e:
                    0e:26:9a:ff:3c:20:fe:70:69:b3:2f:1d:95:ec:bf:
                    60:a1:b7:4d:3d:fa:c1:2d:a9:1c:73:37:2b:8d:63:
                    aa:13:0f:8f:4b:4e:46:ac:fa:9f:89:b3:42:eb:5f:
                    67:de:a8:55:53:98:fa:45:db:b0:33:31:da:8e:a5:
                    36:10:f8:86:65:d9:52:8f:f6:43:96:40:87:cd:ea:
                    72:3e:ed:4a:fa:05:31:63:ee:5d:fa:3a:f0:a7:91:
                    50:e8:83:46:5d:3a:d4:09:29:03:00:37:4d:c0:60:
                    ae:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:01:84:B8:7F:9F:57:E9:12:5E:C5:98:94:20:5A:3C:9D:89:69:71
            X509v3 Authority Key Identifier:
                keyid:49:FF:AF:88:F9:E3:35:2C:5D:66:D4:19:62:64:FC:0F:7B:91:1B:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/3/49FFAF88F9E3352C5D66D4196264FC0F7B911B27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49FFAF88F9E3352C5D66D4196264FC0F7B911B27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/3/323830343a386235633a383030303a3a2f33332d3333203d3e20323733373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b5c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         6d:54:0d:b4:7a:a7:c0:8f:ab:b3:93:19:bf:64:53:3c:1d:37:
         2f:82:99:13:c3:9b:03:24:a9:1e:c5:86:49:22:4d:5a:40:8b:
         f6:29:27:ce:0c:41:c0:f1:e9:9a:d1:4b:c4:6c:14:14:3d:63:
         c6:d0:29:a1:bf:e7:e1:75:07:7c:50:3f:43:a5:69:4c:e9:13:
         47:1f:d2:e2:62:f3:ae:01:18:8d:5d:21:b8:44:d9:03:4a:5c:
         b7:e3:f6:52:8f:13:ad:43:b6:01:ab:c0:36:3f:d9:92:14:03:
         b7:09:cc:18:9f:2d:9f:79:19:52:2f:89:8c:9e:63:4e:a0:55:
         f9:df:7a:f3:a6:ed:4b:45:7a:82:76:32:13:ee:0b:c3:17:64:
         cf:2d:c7:29:47:81:29:e9:5b:c0:d6:2d:05:91:d0:bb:e3:8d:
         a8:92:1f:20:03:ee:c1:35:bd:7b:4a:96:5c:cd:56:45:5a:31:
         05:49:6d:8f:e4:44:af:b6:e2:54:2d:01:da:74:92:d3:df:64:
         b7:19:a8:af:8f:9b:9a:85:b3:5c:f0:8f:59:fb:37:b8:57:10:
         47:72:a0:0b:8e:25:f5:7f:9f:b9:98:b5:e8:e6:06:e0:60:99:
         44:93:fa:34:a5:bc:4c:29:a9:ae:d9:1f:09:0d:26:f6:07:52:
         74:53:e1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:12 2025 by rpki-client