Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Atn78x485oJgsCPBMjcoQvTx6i7kp2eswPP9nr6sgNFn/0/323830343a393237303a3a2f33322d3332203d3e20323734373131.roa
File:                     323830343a393237303a3a2f33322d3332203d3e20323734373131.roa (raw, json)
Hash identifier:          2PN7PUCS9NUumqrZBcyERUifUYPq0wmGIiya2he10Mg=
Subject key identifier:   88:54:D4:1D:A0:55:0A:58:16:76:F5:A4:C8:E2:49:78:19:51:3F:AE
Certificate issuer:       /CN=E07AF29AE4DF3D3AF6644938C738942D662EA015
Certificate serial:       0BFAF25A1486016614D32F9C03FF80CB8E6B0C02
Authority key identifier: E0:7A:F2:9A:E4:DF:3D:3A:F6:64:49:38:C7:38:94:2D:66:2E:A0:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E07AF29AE4DF3D3AF6644938C738942D662EA015.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Atn78x485oJgsCPBMjcoQvTx6i7kp2eswPP9nr6sgNFn/0/323830343a393237303a3a2f33322d3332203d3e20323734373131.roa
Signing time:             Tue 01 Apr 2025 01:34:59 +0000
ROA not before:           Tue 01 Apr 2025 01:29:59 +0000
ROA not after:            Tue 31 Mar 2026 01:34:59 +0000
asID:                     274711
IP address blocks:        2804:9270::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:fa:f2:5a:14:86:01:66:14:d3:2f:9c:03:ff:80:cb:8e:6b:0c:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E07AF29AE4DF3D3AF6644938C738942D662EA015
        Validity
            Not Before: Apr  1 01:29:59 2025 GMT
            Not After : Mar 31 01:34:59 2026 GMT
        Subject: CN=8854D41DA0550A581676F5A4C8E2497819513FAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bd:19:9e:84:09:0d:eb:48:fa:10:60:71:d2:
                    ad:59:50:01:cd:54:8e:67:e1:ba:14:89:56:1a:eb:
                    12:0b:3c:9b:49:f9:98:9e:5b:08:c9:5e:eb:79:62:
                    8a:08:73:93:23:8f:83:cf:f2:97:54:2a:39:61:6b:
                    92:16:ca:64:a1:08:91:97:3f:f7:5e:a0:19:a7:5c:
                    da:f7:6d:15:19:64:38:5b:16:d3:f7:9c:27:33:7c:
                    d7:b3:28:0e:fa:89:8e:7a:5f:c5:ff:93:d7:87:6c:
                    66:7a:2c:6f:7a:82:5a:30:31:f8:37:15:c5:1f:f6:
                    d6:49:c8:3a:38:40:03:22:cb:3f:b2:54:23:c9:a5:
                    b9:2b:04:0d:4f:f2:76:f1:00:27:c2:58:34:67:1a:
                    1a:0e:d4:b5:2d:ec:d7:ba:75:71:70:03:c9:79:b1:
                    7d:46:f6:f0:d3:6a:a7:78:9c:f4:16:3d:27:b0:6a:
                    05:de:7c:e3:83:4f:ad:5d:55:2f:fc:68:46:a4:9d:
                    58:b6:20:8c:76:85:0e:54:6f:44:f2:3b:76:5f:92:
                    67:77:01:d0:a9:b8:b5:a2:da:5b:7c:87:01:18:28:
                    1e:9d:0d:0a:0b:82:d9:54:aa:bb:37:92:b0:f4:f4:
                    73:1d:2d:24:bc:99:3c:c7:3f:b6:b8:86:2d:55:ca:
                    f3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:54:D4:1D:A0:55:0A:58:16:76:F5:A4:C8:E2:49:78:19:51:3F:AE
            X509v3 Authority Key Identifier:
                keyid:E0:7A:F2:9A:E4:DF:3D:3A:F6:64:49:38:C7:38:94:2D:66:2E:A0:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Atn78x485oJgsCPBMjcoQvTx6i7kp2eswPP9nr6sgNFn/0/E07AF29AE4DF3D3AF6644938C738942D662EA015.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E07AF29AE4DF3D3AF6644938C738942D662EA015.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Atn78x485oJgsCPBMjcoQvTx6i7kp2eswPP9nr6sgNFn/0/323830343a393237303a3a2f33322d3332203d3e20323734373131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9270::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:b7:db:ef:1b:38:e2:67:a6:41:d4:a5:1d:ef:24:7b:f5:e4:
         bc:bb:ae:6a:a4:2f:ad:1d:b1:f7:17:7d:ce:f5:f7:01:6e:df:
         11:84:93:59:9d:b7:37:60:f7:8a:5d:3f:b3:7c:99:cd:02:a8:
         14:59:14:90:8c:da:d9:78:c7:fe:b9:6b:99:da:c7:a1:8e:5b:
         80:0f:10:b8:fa:81:a1:41:26:e8:b0:c9:5d:2d:fa:7f:34:9d:
         67:4a:07:f3:10:26:f6:82:8e:c3:33:79:59:f0:82:ea:b2:55:
         6f:20:74:a2:1a:81:bb:4b:5c:5a:f5:2c:fc:4b:aa:4b:58:c6:
         1b:a1:e8:f0:84:b7:fb:6b:44:f2:e0:b2:4e:7f:79:31:54:e6:
         ba:a5:da:d6:6c:8e:44:bf:16:50:ca:24:56:fe:5c:97:46:d9:
         2b:ed:9f:f4:55:b5:ae:ff:3a:4d:e6:35:d1:d9:18:3b:f2:c1:
         79:86:11:0f:ac:a7:c6:30:de:02:a5:f1:63:ec:e1:22:5c:ec:
         f6:f1:c5:13:2c:0a:5a:7b:da:fb:39:21:79:91:4b:8a:09:ae:
         34:61:ea:d8:29:c0:62:15:70:05:90:24:1c:e5:d7:7a:4a:23:
         50:dd:e8:89:23:52:d4:27:da:c3:e0:30:af:f9:67:ce:12:e6:
         64:bd:76:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 13:15:46 2025 by rpki-client