Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/WD2UUbTdoXhbUHLkHmN1XJyJPS2QpwsAhD43Hqdy3hK/0/323830313a38303a3239303a3a2f34382d313238203d3e20323632353333.roa
File:                     323830313a38303a3239303a3a2f34382d313238203d3e20323632353333.roa (raw, json)
Hash identifier:          Jy9FJGdyFh5SCINgqrhBTSkYtiWV4ZAAtieLoMlmtks=
Subject key identifier:   99:F0:D3:70:3B:E0:99:C9:50:E1:6F:7B:2A:1B:9F:61:5C:C9:87:C9
Certificate issuer:       /CN=FD54BCDFAE2C1C2B733CD84345745FFBDD6EE70C
Certificate serial:       6AFD8C9C34DE05ADAA9AC5D01F7B84687FC6FE86
Authority key identifier: FD:54:BC:DF:AE:2C:1C:2B:73:3C:D8:43:45:74:5F:FB:DD:6E:E7:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD54BCDFAE2C1C2B733CD84345745FFBDD6EE70C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/WD2UUbTdoXhbUHLkHmN1XJyJPS2QpwsAhD43Hqdy3hK/0/323830313a38303a3239303a3a2f34382d313238203d3e20323632353333.roa
Signing time:             Fri 28 Feb 2025 20:22:59 +0000
ROA not before:           Fri 28 Feb 2025 20:17:59 +0000
ROA not after:            Fri 27 Feb 2026 20:22:59 +0000
asID:                     262533
IP address blocks:        2801:80:290::/48 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:fd:8c:9c:34:de:05:ad:aa:9a:c5:d0:1f:7b:84:68:7f:c6:fe:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD54BCDFAE2C1C2B733CD84345745FFBDD6EE70C
        Validity
            Not Before: Feb 28 20:17:59 2025 GMT
            Not After : Feb 27 20:22:59 2026 GMT
        Subject: CN=99F0D3703BE099C950E16F7B2A1B9F615CC987C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:19:91:66:fb:34:5e:34:f7:2f:30:51:a2:e2:
                    bf:f5:67:97:fb:c0:8f:33:0b:87:ad:9c:45:cd:40:
                    15:b2:65:73:39:1d:b7:42:28:4b:8b:38:bb:d6:2a:
                    4f:bb:d7:65:08:95:a6:d2:47:9b:79:a9:31:4f:1b:
                    45:d7:94:e8:08:59:46:e1:7b:9f:4e:9a:28:1d:3d:
                    e3:93:a5:1a:2d:b2:f8:bc:a6:3e:8d:63:2c:ba:fd:
                    03:bd:35:56:55:50:75:39:49:24:77:e0:58:c3:0c:
                    c9:9c:8c:04:ee:d8:b7:e2:70:f3:02:3d:94:10:4a:
                    29:19:5a:d7:6c:76:8b:f3:d3:79:39:28:83:04:c3:
                    28:1b:41:5d:a1:1b:9d:67:0e:61:86:a7:5c:af:b0:
                    fc:1e:6a:10:5d:17:69:f6:20:da:77:30:a5:57:e7:
                    e4:e7:17:ae:a4:42:3a:3a:f8:1c:05:23:41:39:69:
                    e6:c9:3b:31:2c:08:d7:51:16:d9:fe:0b:73:dc:d4:
                    aa:d6:c5:f4:bc:c0:7a:6b:65:94:e0:56:82:db:21:
                    ad:4e:aa:19:00:af:8b:68:27:90:0e:0a:0c:cf:21:
                    63:22:0d:1f:c8:b6:28:0a:a4:c8:36:cd:a7:dd:c8:
                    71:a7:87:c1:20:43:99:a0:7b:72:fa:bb:c6:48:e3:
                    27:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F0:D3:70:3B:E0:99:C9:50:E1:6F:7B:2A:1B:9F:61:5C:C9:87:C9
            X509v3 Authority Key Identifier:
                keyid:FD:54:BC:DF:AE:2C:1C:2B:73:3C:D8:43:45:74:5F:FB:DD:6E:E7:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/WD2UUbTdoXhbUHLkHmN1XJyJPS2QpwsAhD43Hqdy3hK/0/FD54BCDFAE2C1C2B733CD84345745FFBDD6EE70C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD54BCDFAE2C1C2B733CD84345745FFBDD6EE70C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/WD2UUbTdoXhbUHLkHmN1XJyJPS2QpwsAhD43Hqdy3hK/0/323830313a38303a3239303a3a2f34382d313238203d3e20323632353333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:290::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:16:c8:ce:4c:ec:78:88:42:7a:2b:61:24:74:c6:c4:30:10:
         55:e9:40:c7:8f:0c:3c:36:f4:87:80:55:e4:15:f2:e7:6c:75:
         61:0a:e1:2a:cf:58:4b:dc:17:35:ec:01:1f:81:69:4b:7a:91:
         9c:5f:fd:a9:78:5d:49:67:28:32:4b:c9:67:e4:f7:c6:4d:e8:
         09:c9:32:63:b7:ca:9a:cb:8c:30:a9:b8:7a:62:b3:62:ec:22:
         e5:96:5b:b2:1b:65:a9:b1:fc:a8:dc:e0:be:54:f1:c0:55:93:
         02:23:e9:20:d2:32:65:00:49:84:0d:9b:bf:64:61:03:ff:b5:
         56:79:2c:ef:1b:6d:8f:a0:1b:4a:82:85:0d:b5:9c:ef:93:be:
         52:d6:ea:e7:42:a7:d3:89:a4:fc:36:20:76:82:99:92:9a:b5:
         89:6c:fb:0b:e7:d8:da:50:b0:b1:06:d3:c3:84:82:4a:6d:ed:
         78:82:55:f9:43:2b:41:d8:eb:99:d7:c7:fc:af:02:26:4d:18:
         a8:5c:1f:21:66:46:90:fd:26:95:ef:5d:f8:37:c2:43:e6:19:
         c4:f5:c6:a3:fb:e6:02:68:50:3a:4f:b3:31:9a:41:7c:79:d8:
         30:85:de:8f:aa:28:8b:9a:20:92:0e:cd:ff:b3:14:c5:92:45:
         bc:97:f6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:24:35 2025 by rpki-client