Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/323830343a376238383a3a2f33322d313238203d3e20323731343337.roa
File:                     323830343a376238383a3a2f33322d313238203d3e20323731343337.roa (raw, json)
Hash identifier:          NO7UOVI/JJFDqy7Mshumdp/IXdtY6xYc/bpCP8TRZn0=
Subject key identifier:   18:44:0E:81:DD:5B:CC:15:0F:BB:AC:E2:48:5E:1D:EF:C3:95:93:AE
Certificate issuer:       /CN=F54A45C02B8BA402B904166FDD6AAC077CB8CAEF
Certificate serial:       22D5818F34D16EB2E3AB6480C66F8CFAFF588579
Authority key identifier: F5:4A:45:C0:2B:8B:A4:02:B9:04:16:6F:DD:6A:AC:07:7C:B8:CA:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F54A45C02B8BA402B904166FDD6AAC077CB8CAEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/323830343a376238383a3a2f33322d313238203d3e20323731343337.roa
Signing time:             Wed 29 Jan 2025 18:51:23 +0000
ROA not before:           Wed 29 Jan 2025 18:46:23 +0000
ROA not after:            Wed 28 Jan 2026 18:51:23 +0000
asID:                     271437
IP address blocks:        2804:7b88::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:d5:81:8f:34:d1:6e:b2:e3:ab:64:80:c6:6f:8c:fa:ff:58:85:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F54A45C02B8BA402B904166FDD6AAC077CB8CAEF
        Validity
            Not Before: Jan 29 18:46:23 2025 GMT
            Not After : Jan 28 18:51:23 2026 GMT
        Subject: CN=18440E81DD5BCC150FBBACE2485E1DEFC39593AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:24:0a:6e:be:f0:15:a9:55:c1:86:2a:11:47:
                    91:5c:9d:17:59:37:73:e4:d5:b7:3f:a8:8a:8e:e3:
                    3f:2f:b5:ab:d7:07:20:31:a3:16:95:f1:e8:6f:59:
                    01:14:e5:bb:62:34:7c:ad:00:4c:1a:a0:ab:a8:4c:
                    a5:24:c2:8a:7b:97:b7:8f:a0:ba:e8:ae:15:f3:70:
                    59:4c:3e:f2:f2:1e:9f:48:dc:68:a1:87:a5:cb:2f:
                    bb:10:52:44:08:38:ef:b3:5f:88:71:bc:04:88:ae:
                    45:ea:bd:84:45:87:91:be:dc:7c:0a:33:86:58:7b:
                    a7:80:4c:c4:81:87:ad:57:ea:43:4b:7b:51:1f:64:
                    52:14:0a:f8:3d:06:b9:a7:d9:35:bd:db:6e:91:50:
                    77:4d:7b:97:8c:7c:fc:61:2e:cd:88:fa:18:92:40:
                    32:bb:fd:cc:35:13:bc:7a:a5:fb:c8:ff:5c:17:a4:
                    af:76:c4:ff:e7:1c:2d:0d:8a:8c:07:c9:db:c0:37:
                    f5:88:d9:65:b0:f0:53:b3:65:68:df:d9:40:cb:fc:
                    09:9f:04:25:c9:83:e0:a5:e3:75:3f:6f:4a:ef:9b:
                    cd:b6:f9:ad:1c:bb:80:cd:fc:4b:d2:bd:b8:d5:a2:
                    ae:b9:08:e4:09:e8:d5:6a:66:01:5d:e2:e9:ec:fc:
                    5d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:44:0E:81:DD:5B:CC:15:0F:BB:AC:E2:48:5E:1D:EF:C3:95:93:AE
            X509v3 Authority Key Identifier:
                keyid:F5:4A:45:C0:2B:8B:A4:02:B9:04:16:6F:DD:6A:AC:07:7C:B8:CA:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/F54A45C02B8BA402B904166FDD6AAC077CB8CAEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F54A45C02B8BA402B904166FDD6AAC077CB8CAEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/323830343a376238383a3a2f33322d313238203d3e20323731343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b88::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:05:35:de:72:1e:14:ae:5e:29:a9:1d:12:8e:02:69:18:c3:
         3f:04:99:b7:41:43:75:87:02:be:96:43:1d:31:9a:61:7e:59:
         f6:43:26:2c:26:39:a7:66:c3:b7:84:73:78:30:4e:62:6d:f5:
         0f:42:b4:7a:3a:2a:a3:2d:ba:21:39:b5:7c:95:14:79:ab:12:
         12:51:0f:df:bd:dd:d6:92:a0:18:02:65:45:1d:0f:b5:c7:37:
         f4:72:81:01:64:8d:be:3a:65:81:48:6e:26:2b:5c:28:42:e2:
         7a:13:f7:40:b4:a2:70:66:b9:5d:83:83:9a:63:38:8e:52:e6:
         f5:1e:0a:ad:62:19:60:8a:08:62:b3:3a:8d:10:0c:d8:33:4a:
         97:df:fd:1d:9e:c0:19:0a:da:bf:55:08:47:2a:c9:58:b6:e0:
         de:99:f6:fc:97:6c:bb:c9:bc:74:f5:44:98:13:51:0f:58:26:
         6a:1d:8f:53:c5:88:4b:84:c6:e2:50:bf:22:a2:77:ce:a9:ec:
         f5:95:17:81:00:5c:4b:78:fd:bb:d8:62:4c:4c:5b:2b:71:95:
         2a:7c:a6:94:db:11:21:74:38:5a:ed:91:f2:5d:cc:f5:c4:96:
         d2:c4:b6:2a:e4:7c:9b:ef:5a:f2:3d:c9:f5:d6:64:77:3e:de:
         f6:97:e1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:55:40 2025 by rpki-client