Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HcMZxhHCCRJE4XN97PrHdsoPAraZAasVKWamZN9AjFQL/0/323830343a343039633a3a2f33332d3333203d3e20323635393730.roa
File:                     323830343a343039633a3a2f33332d3333203d3e20323635393730.roa (raw, json)
Hash identifier:          Fhb9JVHWtkpGw2yIiJ1ju1V6HCpc56GOkWS5CU0+mW8=
Subject key identifier:   8A:AD:9B:97:84:3D:94:3E:42:2D:E7:1E:E9:E1:DD:39:57:69:58:15
Certificate issuer:       /CN=6F2F153A9301969DDA7875C6F9110B9C5273576E
Certificate serial:       33F5A7A97679C0C1A8896F444C336305DF43A062
Authority key identifier: 6F:2F:15:3A:93:01:96:9D:DA:78:75:C6:F9:11:0B:9C:52:73:57:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F2F153A9301969DDA7875C6F9110B9C5273576E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HcMZxhHCCRJE4XN97PrHdsoPAraZAasVKWamZN9AjFQL/0/323830343a343039633a3a2f33332d3333203d3e20323635393730.roa
Signing time:             Tue 11 Jan 2022 10:56:02 +0000
ROA not before:           Tue 11 Jan 2022 10:51:02 +0000
ROA not after:            Tue 10 Jan 2023 10:56:02 +0000
asID:                     265970
IP address blocks:        2804:409c::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:f5:a7:a9:76:79:c0:c1:a8:89:6f:44:4c:33:63:05:df:43:a0:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F2F153A9301969DDA7875C6F9110B9C5273576E
        Validity
            Not Before: Jan 11 10:51:02 2022 GMT
            Not After : Jan 10 10:56:02 2023 GMT
        Subject: CN=3082010A0282010100DCC0CE91C4464128D64B2FFCE25D8CE6074F7176CCE3C249E43EC59C7761A071FFA24BB78E62B4BA006496F2521B4E437384A627EDDCA5B53618C32EB41D784A2AA2A56C348577CB888F12BFC5BB7140F040E22B64CFDB4C058F7D6DE5FFCAD85CC2E9A1786E4D33E379930133E67CF3DE2F8BAD0EC6A5A0190A718CBCDB5E47544BCA9F38DEC16613142C0120AEE5D73AC951823CB9F6F32251D7C8E8095493A2A293FDBB08ED7C1B728F3DC4A3B5AD28670FE4BEA1B26C36FF539F90A3C8A7AE7B54ACE9CAFD50824578F649DF01394A7F2BC7C2418E9AB06C3E27419DB43A7BACFB9C8612CD58151DA6DA0C90F2DFF143B8BFBA93A55C4979647E507934890203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c0:ce:91:c4:46:41:28:d6:4b:2f:fc:e2:5d:
                    8c:e6:07:4f:71:76:cc:e3:c2:49:e4:3e:c5:9c:77:
                    61:a0:71:ff:a2:4b:b7:8e:62:b4:ba:00:64:96:f2:
                    52:1b:4e:43:73:84:a6:27:ed:dc:a5:b5:36:18:c3:
                    2e:b4:1d:78:4a:2a:a2:a5:6c:34:85:77:cb:88:8f:
                    12:bf:c5:bb:71:40:f0:40:e2:2b:64:cf:db:4c:05:
                    8f:7d:6d:e5:ff:ca:d8:5c:c2:e9:a1:78:6e:4d:33:
                    e3:79:93:01:33:e6:7c:f3:de:2f:8b:ad:0e:c6:a5:
                    a0:19:0a:71:8c:bc:db:5e:47:54:4b:ca:9f:38:de:
                    c1:66:13:14:2c:01:20:ae:e5:d7:3a:c9:51:82:3c:
                    b9:f6:f3:22:51:d7:c8:e8:09:54:93:a2:a2:93:fd:
                    bb:08:ed:7c:1b:72:8f:3d:c4:a3:b5:ad:28:67:0f:
                    e4:be:a1:b2:6c:36:ff:53:9f:90:a3:c8:a7:ae:7b:
                    54:ac:e9:ca:fd:50:82:45:78:f6:49:df:01:39:4a:
                    7f:2b:c7:c2:41:8e:9a:b0:6c:3e:27:41:9d:b4:3a:
                    7b:ac:fb:9c:86:12:cd:58:15:1d:a6:da:0c:90:f2:
                    df:f1:43:b8:bf:ba:93:a5:5c:49:79:64:7e:50:79:
                    34:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:AD:9B:97:84:3D:94:3E:42:2D:E7:1E:E9:E1:DD:39:57:69:58:15
            X509v3 Authority Key Identifier:
                keyid:6F:2F:15:3A:93:01:96:9D:DA:78:75:C6:F9:11:0B:9C:52:73:57:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HcMZxhHCCRJE4XN97PrHdsoPAraZAasVKWamZN9AjFQL/0/6F2F153A9301969DDA7875C6F9110B9C5273576E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F2F153A9301969DDA7875C6F9110B9C5273576E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HcMZxhHCCRJE4XN97PrHdsoPAraZAasVKWamZN9AjFQL/0/323830343a343039633a3a2f33332d3333203d3e20323635393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:409c::/33

    Signature Algorithm: sha256WithRSAEncryption
         22:11:e8:c9:ac:d8:74:c0:70:68:70:aa:a2:d0:96:cb:65:3b:
         92:72:b5:cd:60:4e:3d:99:c6:d5:7b:37:71:f9:f3:5d:77:10:
         a2:d4:91:52:57:45:1b:f1:9a:ee:00:63:c1:f4:20:2d:03:0f:
         07:19:6a:ec:01:09:0d:3b:21:ee:a8:ae:c5:e2:c0:fe:60:e6:
         7f:4f:19:26:b0:20:86:cb:65:28:a8:84:32:64:46:5b:74:2f:
         50:8b:92:56:13:1b:73:fc:d2:dd:71:ef:a5:9b:e3:9f:39:3d:
         ce:96:41:97:5c:69:65:44:2a:45:38:aa:e4:24:a9:4a:41:0d:
         6c:c9:bf:e4:c7:05:b2:c9:4e:8f:38:81:0f:85:2c:68:df:36:
         00:83:cd:9d:e1:ee:5d:fa:31:53:ec:68:ef:ca:e6:5c:af:5a:
         8d:8f:28:ed:75:74:25:d1:6f:53:df:86:14:ac:dd:19:7a:cd:
         c8:b3:17:82:8d:39:76:56:bb:7c:38:98:71:82:85:72:d3:58:
         44:72:61:a8:61:65:5f:dc:8c:b0:af:6e:0b:ee:fb:cd:04:38:
         f6:5b:35:41:4a:a4:f9:f6:e4:20:c0:e7:0b:54:39:cf:5c:cc:
         66:87:40:90:ed:1c:6e:66:65:1c:db:00:38:7c:5c:09:94:a0:
         dd:1c:2e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:56:32 2025 by rpki-client