Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/323830343a373034343a383030303a3a2f33332d3333203d3e20323730373136.roa
File:                     323830343a373034343a383030303a3a2f33332d3333203d3e20323730373136.roa (raw, json)
Hash identifier:          c2BkIMRw30o0kkeimYJX6swI5jVA0SNtwu6evkMSsqc=
Subject key identifier:   93:72:B7:56:9F:44:49:9D:C1:94:6F:76:2B:60:FB:91:F5:AC:01:AB
Certificate issuer:       /CN=70F75C6F26DBC3FF3EC67EB249E38FBD8F00FE39
Certificate serial:       4A88363F02B2DC4669602297290B3C99EF50D20F
Authority key identifier: 70:F7:5C:6F:26:DB:C3:FF:3E:C6:7E:B2:49:E3:8F:BD:8F:00:FE:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70F75C6F26DBC3FF3EC67EB249E38FBD8F00FE39.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/323830343a373034343a383030303a3a2f33332d3333203d3e20323730373136.roa
Signing time:             Wed 19 Feb 2025 20:25:21 +0000
ROA not before:           Wed 19 Feb 2025 20:20:21 +0000
ROA not after:            Wed 18 Feb 2026 20:25:21 +0000
asID:                     270716
IP address blocks:        2804:7044:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:88:36:3f:02:b2:dc:46:69:60:22:97:29:0b:3c:99:ef:50:d2:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70F75C6F26DBC3FF3EC67EB249E38FBD8F00FE39
        Validity
            Not Before: Feb 19 20:20:21 2025 GMT
            Not After : Feb 18 20:25:21 2026 GMT
        Subject: CN=9372B7569F44499DC1946F762B60FB91F5AC01AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:07:e6:91:76:d8:d3:95:86:24:bb:be:4c:74:
                    29:23:e7:93:0f:5e:b5:b5:b1:d6:c2:22:2e:f9:ef:
                    fd:59:34:48:43:16:26:05:9c:a1:6a:03:41:18:37:
                    ef:50:6e:41:d6:94:7f:6e:97:5c:a1:5d:e8:87:69:
                    ef:af:34:26:b4:3c:93:5f:22:22:67:b8:0f:2a:46:
                    95:15:e8:94:38:5d:d9:5c:1d:f7:37:13:76:f5:75:
                    ea:bc:9e:ed:b9:03:c4:b1:42:3a:95:e9:b8:fa:73:
                    d0:f4:7e:a6:52:d4:06:53:30:6b:4a:84:7d:4c:0b:
                    e5:ce:c8:a5:13:11:49:34:5d:f4:2c:c1:81:8f:34:
                    90:0b:74:73:12:08:6d:cc:d4:0b:61:72:ae:ed:b6:
                    45:6b:1b:c9:7f:e6:d3:da:ec:be:e8:f0:9e:92:c9:
                    5f:e2:bd:6c:fa:19:5e:83:eb:1b:6b:f1:65:01:51:
                    a0:bd:a1:3a:da:07:0f:de:65:0b:b9:93:5d:30:56:
                    38:35:3c:0e:14:44:e9:02:ee:22:2e:88:ef:dd:41:
                    9a:49:c6:eb:6c:ac:28:62:f2:3d:67:eb:40:9d:d6:
                    59:4e:5b:15:13:96:8f:73:36:c8:03:0d:fc:7c:e8:
                    48:dc:52:22:31:f4:1f:22:ce:7a:3b:3a:99:68:6b:
                    52:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:72:B7:56:9F:44:49:9D:C1:94:6F:76:2B:60:FB:91:F5:AC:01:AB
            X509v3 Authority Key Identifier:
                keyid:70:F7:5C:6F:26:DB:C3:FF:3E:C6:7E:B2:49:E3:8F:BD:8F:00:FE:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/70F75C6F26DBC3FF3EC67EB249E38FBD8F00FE39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70F75C6F26DBC3FF3EC67EB249E38FBD8F00FE39.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/323830343a373034343a383030303a3a2f33332d3333203d3e20323730373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7044:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         6f:1b:ce:f7:2a:a8:d5:a1:1d:f3:58:53:33:44:a0:81:eb:f4:
         62:de:7a:50:11:88:5c:a0:89:0e:52:95:ae:38:ff:cf:af:76:
         27:24:df:b1:be:db:71:4f:57:aa:30:c4:d6:2c:c0:fa:8f:be:
         1c:62:db:c0:17:90:72:27:df:38:03:f2:78:ee:3d:4d:79:64:
         37:92:f0:57:a5:ae:42:a6:6b:3e:db:3e:45:87:67:3b:18:4f:
         bc:93:73:8a:5e:68:82:d2:0e:bd:d0:a9:86:47:c2:3e:5d:c5:
         95:e8:74:59:02:d5:09:c0:28:31:c1:7e:e8:57:3e:b0:db:be:
         6e:64:e8:a8:45:76:7c:ec:27:d7:39:b1:2d:b2:59:4d:b3:73:
         4b:46:19:15:fa:f0:4f:85:b7:73:a3:25:ec:fe:7e:c1:47:da:
         f2:93:ca:12:1d:9a:73:b2:33:89:e9:d2:18:78:8a:ca:6b:45:
         74:8f:de:f9:2b:96:d2:5f:a1:84:1e:fe:e6:70:db:62:4d:9f:
         26:7a:e4:3d:36:c2:07:76:5d:8d:d3:07:89:11:09:46:69:f7:
         cf:7a:ad:dc:ad:e1:bb:d6:80:42:85:b8:f6:58:f8:97:70:b5:
         0b:02:54:a2:3c:f2:ca:ab:52:09:d9:16:63:4c:40:dc:09:2e:
         c0:16:06:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:35:27 2025 by rpki-client