Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/323830343a346439383a3a2f33322d3438203d3e20323638323037.roa
File:                     323830343a346439383a3a2f33322d3438203d3e20323638323037.roa (raw, json)
Hash identifier:          lrBacjxmcoLFavZBP78cs0ATyPawKuDJxL2FgSj4ebs=
Subject key identifier:   05:03:41:76:98:C5:90:13:99:AC:9B:28:B0:2E:86:E3:DD:29:F0:5A
Certificate issuer:       /CN=22CBA337E0370365B681D563898357F37A7D4D97
Certificate serial:       08FF6803FE9D58E879FC7AD794E52DC4E00106FB
Authority key identifier: 22:CB:A3:37:E0:37:03:65:B6:81:D5:63:89:83:57:F3:7A:7D:4D:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22CBA337E0370365B681D563898357F37A7D4D97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/323830343a346439383a3a2f33322d3438203d3e20323638323037.roa
Signing time:             Thu 29 May 2025 14:38:09 +0000
ROA not before:           Thu 29 May 2025 14:33:09 +0000
ROA not after:            Thu 28 May 2026 14:38:09 +0000
asID:                     268207
IP address blocks:        2804:4d98::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ff:68:03:fe:9d:58:e8:79:fc:7a:d7:94:e5:2d:c4:e0:01:06:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22CBA337E0370365B681D563898357F37A7D4D97
        Validity
            Not Before: May 29 14:33:09 2025 GMT
            Not After : May 28 14:38:09 2026 GMT
        Subject: CN=0503417698C5901399AC9B28B02E86E3DD29F05A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4e:e3:c3:2a:41:1c:78:b5:a2:9e:7e:0d:1b:
                    07:33:8c:ba:fc:15:ed:df:e0:a4:0a:2e:b1:7a:8c:
                    a1:12:d7:5b:eb:2b:fe:d0:ed:71:e6:c2:a6:db:85:
                    c1:c0:cc:e6:f5:6a:c4:d5:06:e3:4a:a1:91:17:ed:
                    9b:b5:9a:79:07:78:50:bb:a1:48:bb:86:93:f9:b4:
                    28:7d:6d:99:bb:0d:74:0e:64:fb:fa:3f:70:57:65:
                    ac:5d:4d:f5:7b:67:b9:6e:58:79:a6:b8:04:1b:29:
                    e5:5e:4a:a0:70:df:60:8c:29:bc:a2:25:4c:90:7d:
                    1a:41:a0:d4:85:c4:18:10:77:79:4d:0d:d0:1d:59:
                    6c:d5:12:0a:eb:2f:1f:c6:3d:6c:6e:69:6e:98:d3:
                    90:c4:d3:19:07:57:60:63:4f:46:ed:8a:05:fc:4f:
                    61:16:2f:55:94:27:6d:a0:a2:bb:63:5d:26:3e:f7:
                    9b:93:fd:9b:e1:90:0f:cc:bd:f9:34:07:e7:79:a7:
                    fd:16:47:22:8c:00:6d:6a:4f:ab:20:a9:2d:23:7e:
                    95:0e:88:9f:90:20:a5:b9:60:95:37:f8:d7:6b:42:
                    14:68:46:aa:09:94:eb:26:19:fc:65:cc:f4:0b:bf:
                    e7:65:ad:7b:c0:ee:0f:bf:5e:9e:0f:d8:0b:8e:cf:
                    17:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:03:41:76:98:C5:90:13:99:AC:9B:28:B0:2E:86:E3:DD:29:F0:5A
            X509v3 Authority Key Identifier:
                keyid:22:CB:A3:37:E0:37:03:65:B6:81:D5:63:89:83:57:F3:7A:7D:4D:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/22CBA337E0370365B681D563898357F37A7D4D97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22CBA337E0370365B681D563898357F37A7D4D97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/323830343a346439383a3a2f33322d3438203d3e20323638323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d98::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:6c:1a:09:bf:37:9a:e3:67:9e:22:73:b8:f5:07:60:8e:9c:
         a3:92:b3:80:d7:e5:59:a2:bd:f8:5f:48:8c:05:67:f4:ac:e0:
         ea:cb:21:98:5b:f6:5e:4a:13:cf:b0:7b:3c:19:7e:c3:ca:5c:
         49:50:ea:21:5a:1a:cb:f0:0d:55:43:1a:25:b0:e0:79:f5:f1:
         e4:09:e9:2a:d5:14:cd:17:ba:30:58:9b:61:18:9f:94:73:6f:
         9c:f5:4e:a5:41:3b:2a:b9:1e:75:61:92:2c:e0:20:d6:e5:f4:
         df:0a:25:d7:39:a6:82:d4:94:cf:69:60:da:f0:5d:38:d6:28:
         06:d8:21:21:86:61:19:9c:e5:d3:90:c7:a9:7d:80:be:23:c1:
         2e:eb:0a:89:51:6d:24:ca:09:73:56:38:f8:95:e8:9f:ce:93:
         da:bf:b4:c6:f1:f1:b4:d5:eb:21:0c:a6:36:60:a4:b7:de:3e:
         87:24:3b:eb:e0:4f:1b:2e:42:9c:c3:23:8d:0d:68:50:6f:b3:
         88:f9:53:d7:35:5f:4f:56:5c:de:55:01:e8:b1:d5:cc:16:17:
         f7:ba:86:99:a5:5f:58:6d:b1:db:13:89:e4:eb:ab:86:8e:6d:
         f0:fe:ee:d1:f5:38:7f:a1:6d:65:30:70:f3:28:79:5a:64:5c:
         91:48:eb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 10:55:57 2025 by rpki-client