Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a383030303a3a2f33342d3334203d3e20323633393430.roa
File:                     323830343a323831383a383030303a3a2f33342d3334203d3e20323633393430.roa (raw, json)
Hash identifier:          koBRWS/S9USkBp557wpPoVF9zBMrGiHYncv0RFRd5rw=
Subject key identifier:   A9:75:A6:CC:A2:FC:18:EA:B9:C9:22:3B:54:CC:6F:F4:87:E2:9D:DD
Certificate issuer:       /CN=A00894A4159E2748ED3F950641ECEA8A9D01128D
Certificate serial:       212CB00B6A36ED4EA341C84FE2C1E98A9E2EF760
Authority key identifier: A0:08:94:A4:15:9E:27:48:ED:3F:95:06:41:EC:EA:8A:9D:01:12:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A00894A4159E2748ED3F950641ECEA8A9D01128D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a383030303a3a2f33342d3334203d3e20323633393430.roa
Signing time:             Mon 10 Feb 2025 19:20:54 +0000
ROA not before:           Mon 10 Feb 2025 19:15:54 +0000
ROA not after:            Mon 09 Feb 2026 19:20:54 +0000
asID:                     263940
IP address blocks:        2804:2818:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:2c:b0:0b:6a:36:ed:4e:a3:41:c8:4f:e2:c1:e9:8a:9e:2e:f7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A00894A4159E2748ED3F950641ECEA8A9D01128D
        Validity
            Not Before: Feb 10 19:15:54 2025 GMT
            Not After : Feb  9 19:20:54 2026 GMT
        Subject: CN=A975A6CCA2FC18EAB9C9223B54CC6FF487E29DDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:88:b8:ec:a9:ed:af:6f:d7:18:06:d4:04:92:
                    65:79:08:4d:75:b0:db:4b:08:eb:e4:69:11:f8:4e:
                    53:97:7f:76:93:7d:5f:3e:d5:66:89:c4:de:d9:76:
                    fe:3c:54:0f:99:3f:46:c4:2b:8a:05:e5:64:fa:5b:
                    25:5f:fe:5e:e1:32:2b:de:23:fc:05:66:da:ad:30:
                    1d:d3:36:49:02:b9:84:2d:24:cb:0a:a6:85:0d:b2:
                    a3:6d:a6:2f:21:38:35:94:0e:3b:81:d8:7d:fb:03:
                    20:3a:e7:33:18:d4:f6:b4:0e:52:d1:a7:c3:a0:7f:
                    e1:82:90:c8:ed:89:43:42:19:03:1e:78:88:81:99:
                    5a:c6:41:18:d7:ad:2f:80:45:34:9f:0e:a3:80:c7:
                    66:d4:64:70:ad:a7:ea:ae:fa:45:a0:9b:6f:78:ce:
                    d8:f8:94:cb:e7:24:56:75:32:4e:8e:02:1c:ea:19:
                    fc:a9:dd:da:0f:81:47:53:24:f3:e3:b2:9c:9a:41:
                    4c:83:89:26:e8:ef:70:52:3e:f4:51:26:96:c6:74:
                    d5:31:6e:c5:96:94:96:4c:e0:b0:c9:3c:fc:0e:38:
                    52:0a:bb:b9:9c:d9:c6:fb:1d:ac:a0:5d:5c:24:df:
                    12:1c:9d:07:6e:ef:02:54:f4:52:45:56:91:b5:c0:
                    18:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:75:A6:CC:A2:FC:18:EA:B9:C9:22:3B:54:CC:6F:F4:87:E2:9D:DD
            X509v3 Authority Key Identifier:
                keyid:A0:08:94:A4:15:9E:27:48:ED:3F:95:06:41:EC:EA:8A:9D:01:12:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/A00894A4159E2748ED3F950641ECEA8A9D01128D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A00894A4159E2748ED3F950641ECEA8A9D01128D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a383030303a3a2f33342d3334203d3e20323633393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2818:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         42:a6:4c:dd:f5:44:b4:cb:3b:c8:37:b4:92:0a:0c:05:7b:9f:
         97:cf:98:99:0d:e0:7b:6f:88:33:7a:91:6d:1d:6b:c9:f6:16:
         bb:36:d2:ec:92:2d:8d:ae:ce:fa:b0:7e:44:aa:6e:17:87:e6:
         d1:5d:12:c9:0b:b0:d7:c0:db:b6:20:77:53:f3:37:60:a5:f9:
         2c:98:3c:81:71:ee:7e:61:19:32:c1:6e:1c:54:5a:80:3b:b5:
         4b:c6:a2:63:62:a5:ba:ed:2f:f7:b9:b0:f9:c2:70:fa:e7:fd:
         c4:df:60:e0:73:de:af:b0:21:90:c3:71:c3:e0:37:63:fc:b6:
         20:8e:0c:de:2f:1b:a3:ff:1c:df:71:ad:ea:0d:d9:e0:ae:ab:
         02:41:93:fd:23:2f:d4:9f:7f:56:e3:d1:b6:9d:e8:05:2d:1f:
         30:37:ce:75:08:e7:77:51:78:3d:c1:d8:48:14:13:0f:01:12:
         b8:68:e9:42:0f:a9:eb:a2:b7:3c:2d:17:31:f9:22:5d:ad:b7:
         a9:bf:b7:a4:82:cb:51:7d:b3:1b:14:d0:91:9a:1c:ec:89:28:
         88:8b:3f:e7:b9:e4:92:cd:ee:93:31:fe:bb:a4:91:52:01:cd:
         46:36:4e:cc:8d:f3:e4:d8:48:40:5e:e0:77:e5:a0:de:a6:cd:
         df:a4:03:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:23:43 2025 by rpki-client