Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a383030303a3a2f33342d3334203d3e20323635353030.roa
File:                     323830343a333531383a383030303a3a2f33342d3334203d3e20323635353030.roa (raw, json)
Hash identifier:          UnMZMIPSrTEIEYNzKPKGujd6W22l4WIiV7BcUxJyWrw=
Subject key identifier:   D0:34:FC:FC:0B:0D:4D:D3:37:8C:15:0A:49:23:1A:78:2E:4B:53:21
Certificate issuer:       /CN=A1E125638591A773701BFD72EE9FA738B6EAA454
Certificate serial:       17E94C972F4C9D8BC7851DC4646F67167D8ADA8E
Authority key identifier: A1:E1:25:63:85:91:A7:73:70:1B:FD:72:EE:9F:A7:38:B6:EA:A4:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E125638591A773701BFD72EE9FA738B6EAA454.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a383030303a3a2f33342d3334203d3e20323635353030.roa
Signing time:             Thu 26 Dec 2024 15:00:37 +0000
ROA not before:           Thu 26 Dec 2024 14:55:37 +0000
ROA not after:            Thu 25 Dec 2025 15:00:37 +0000
asID:                     265500
IP address blocks:        2804:3518:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:e9:4c:97:2f:4c:9d:8b:c7:85:1d:c4:64:6f:67:16:7d:8a:da:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1E125638591A773701BFD72EE9FA738B6EAA454
        Validity
            Not Before: Dec 26 14:55:37 2024 GMT
            Not After : Dec 25 15:00:37 2025 GMT
        Subject: CN=D034FCFC0B0D4DD3378C150A49231A782E4B5321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:88:2e:bc:a5:21:8c:fb:ed:68:a2:d9:89:69:
                    79:db:0d:51:99:ef:ff:cb:b3:95:81:c4:d2:67:d6:
                    a6:94:d7:11:75:2c:55:1a:82:4d:d3:4a:7f:7d:e4:
                    6a:30:1a:05:0f:f1:fd:15:80:fe:1d:f1:ac:d7:94:
                    f0:d1:32:66:e5:64:eb:ca:6c:e0:53:3e:4d:7f:1e:
                    df:9d:03:37:d4:c3:2b:43:b7:0c:63:78:84:3c:ef:
                    8a:e4:b4:bb:4b:25:c9:7a:5e:55:b7:65:ee:7e:e2:
                    03:a1:5f:3a:73:e5:3c:4e:ed:78:42:d3:a0:8d:19:
                    ed:af:8c:94:65:d6:11:43:dd:fa:83:b6:9b:ad:c8:
                    77:d1:5c:68:60:a6:5b:b8:89:fd:ef:e1:ca:95:ba:
                    05:14:ba:77:2a:87:90:8d:a1:9a:7a:3c:6f:05:49:
                    b7:35:e4:36:3b:f9:bb:95:a1:7f:bc:e7:d5:be:77:
                    54:29:3b:51:d6:01:64:61:ff:c5:89:73:af:2f:56:
                    f7:92:de:7d:a0:43:0c:52:c3:5f:82:d8:5c:79:66:
                    df:71:79:c5:9e:5f:62:a2:91:62:24:89:69:79:f4:
                    2f:b2:45:9a:62:1e:81:18:42:b7:f4:df:41:82:a7:
                    10:fb:a7:b8:92:3b:a7:59:f3:54:a4:19:a1:f6:83:
                    e9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:34:FC:FC:0B:0D:4D:D3:37:8C:15:0A:49:23:1A:78:2E:4B:53:21
            X509v3 Authority Key Identifier:
                keyid:A1:E1:25:63:85:91:A7:73:70:1B:FD:72:EE:9F:A7:38:B6:EA:A4:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/A1E125638591A773701BFD72EE9FA738B6EAA454.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E125638591A773701BFD72EE9FA738B6EAA454.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a383030303a3a2f33342d3334203d3e20323635353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3518:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         79:8a:89:01:67:9e:cf:c2:85:4c:78:13:b0:20:94:b8:68:3c:
         2b:f9:dd:c8:c1:e4:4d:ba:4c:4b:64:ca:bb:d8:26:8b:1a:af:
         3a:45:5b:83:9a:f9:5a:69:46:d4:e5:b5:12:47:53:a4:ee:1a:
         a8:00:cf:61:81:da:c1:ad:ce:35:72:1a:7e:79:f7:67:37:5f:
         fd:fb:8d:fb:79:7f:e8:12:3b:c8:83:bb:f2:91:92:a9:a7:50:
         d2:6c:29:6e:0a:fe:b6:08:91:aa:64:a1:23:a8:35:e0:15:f8:
         ca:37:bd:20:90:92:30:af:0d:e9:15:c1:81:f8:93:c7:ec:e3:
         f2:84:99:48:79:5f:7b:ce:98:1d:04:b1:78:f3:95:82:fb:3d:
         7e:43:ec:4d:e3:8e:b6:35:9b:17:36:2c:96:ac:d7:6e:5e:9d:
         09:ae:57:42:80:26:60:62:73:4a:d0:86:93:c0:de:87:13:df:
         5a:f1:f3:29:ba:e7:b3:43:21:31:c3:5b:3f:8f:a0:0a:63:c8:
         e3:ca:90:1e:89:04:c2:83:80:8f:07:f1:55:dc:aa:2a:51:99:
         de:1d:e3:17:4f:8d:3f:38:4f:97:07:d5:44:de:2a:64:8e:1d:
         e6:b8:75:bb:12:51:b2:09:b7:c3:ab:26:f8:0b:cc:df:68:31:
         04:95:8f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:13:58 2025 by rpki-client