Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/323830343a333963343a3a2f33332d3333203d3e20323636303439.roa
File:                     323830343a333963343a3a2f33332d3333203d3e20323636303439.roa (raw, json)
Hash identifier:          xrV4QUfi78IyBMXzGLxrcdUYot7fqckTsqS/irA9Jzo=
Subject key identifier:   8A:E8:C7:A7:A2:E3:F2:20:41:4E:33:72:3A:04:10:C5:44:E8:C9:C9
Certificate issuer:       /CN=F9C0B6ABFD2FCFA262AA160EA50EE3AC42B848A5
Certificate serial:       3B8906627800680B1D9E8A855CB05F7D93181DEE
Authority key identifier: F9:C0:B6:AB:FD:2F:CF:A2:62:AA:16:0E:A5:0E:E3:AC:42:B8:48:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9C0B6ABFD2FCFA262AA160EA50EE3AC42B848A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/323830343a333963343a3a2f33332d3333203d3e20323636303439.roa
Signing time:             Mon 10 Mar 2025 13:56:51 +0000
ROA not before:           Mon 10 Mar 2025 13:51:51 +0000
ROA not after:            Mon 09 Mar 2026 13:56:51 +0000
asID:                     266049
IP address blocks:        2804:39c4::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:89:06:62:78:00:68:0b:1d:9e:8a:85:5c:b0:5f:7d:93:18:1d:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9C0B6ABFD2FCFA262AA160EA50EE3AC42B848A5
        Validity
            Not Before: Mar 10 13:51:51 2025 GMT
            Not After : Mar  9 13:56:51 2026 GMT
        Subject: CN=8AE8C7A7A2E3F220414E33723A0410C544E8C9C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:30:e8:b8:45:69:3d:c8:34:f5:92:59:e2:6f:
                    aa:27:17:a4:e9:a5:2c:40:58:10:21:d3:ce:ff:9f:
                    27:46:12:f4:f9:75:29:8e:ac:ec:26:a8:03:b0:f1:
                    4e:41:aa:ab:77:01:1a:8c:47:45:47:99:68:8e:87:
                    6f:e8:da:a5:2a:05:0b:3e:f7:5b:1f:24:07:df:50:
                    b1:73:d8:32:11:b7:55:a2:dc:67:68:b7:39:1f:9b:
                    e9:8a:82:d4:92:dd:d3:cc:e0:f6:42:76:3e:67:c6:
                    9a:3d:aa:fa:24:ba:28:b1:3f:43:8a:cd:ee:10:96:
                    30:29:50:6a:c1:c1:73:e1:d5:5d:fc:21:6e:13:ad:
                    27:90:88:01:90:40:98:91:fb:73:20:7b:71:0e:e2:
                    16:e7:9f:8d:8d:f0:a3:7d:6d:71:6d:31:94:66:4e:
                    22:d9:48:03:cc:e5:6d:a3:8e:06:cb:22:4d:bc:62:
                    62:56:f2:aa:a6:c0:f7:51:11:b2:0b:98:7a:ac:40:
                    a3:d9:62:c6:b8:a1:ff:16:8b:a2:22:d2:c5:90:a0:
                    19:1f:3e:cb:6c:96:d2:3f:59:60:54:e4:12:2f:14:
                    07:6d:93:60:65:93:08:1e:d3:29:31:d7:22:3b:30:
                    58:72:eb:03:d1:c9:5e:4f:c5:6c:df:8b:96:81:a4:
                    61:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:E8:C7:A7:A2:E3:F2:20:41:4E:33:72:3A:04:10:C5:44:E8:C9:C9
            X509v3 Authority Key Identifier:
                keyid:F9:C0:B6:AB:FD:2F:CF:A2:62:AA:16:0E:A5:0E:E3:AC:42:B8:48:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/F9C0B6ABFD2FCFA262AA160EA50EE3AC42B848A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9C0B6ABFD2FCFA262AA160EA50EE3AC42B848A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/323830343a333963343a3a2f33332d3333203d3e20323636303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:39c4::/33

    Signature Algorithm: sha256WithRSAEncryption
         7c:ae:7a:ff:cf:44:0a:68:f6:61:4d:aa:37:ab:e7:16:78:dc:
         aa:4a:b7:f7:c5:0b:4c:3e:d4:7a:25:96:f6:f3:7d:5d:68:0d:
         df:01:e0:05:01:af:27:d0:03:09:a6:fc:12:fc:25:62:09:e6:
         cb:57:b5:8c:75:0d:8d:4c:fa:69:ff:75:7c:15:a0:c9:c6:d9:
         66:dd:96:df:7f:43:3e:19:84:9d:92:11:25:93:58:ea:86:94:
         9a:13:11:b0:58:0e:0d:f0:92:4e:8e:a4:c1:4e:96:2a:52:d7:
         0d:a7:96:26:74:cd:b6:88:d7:4f:bc:50:3b:eb:5b:23:ba:dc:
         95:3c:ca:ba:82:f0:35:96:c0:f2:0b:45:9e:ee:37:e4:6d:c3:
         e8:4b:d5:f9:5b:5c:46:13:c8:7e:5e:51:dc:e4:88:b9:86:e9:
         b3:36:7e:bb:0e:82:83:33:59:60:fb:83:52:6f:ca:fe:9c:c3:
         ad:61:0d:b4:df:01:3e:fc:12:02:1b:d0:fa:1a:f2:40:4a:ac:
         c6:5d:c8:d3:bf:30:77:87:d4:56:3b:8d:90:2c:c4:9a:d0:e7:
         cd:e5:b5:b4:75:ff:ce:da:19:aa:47:e6:81:0a:70:e6:9f:8e:
         6c:e7:7b:26:45:26:8c:15:1c:99:13:73:e1:10:65:2c:4b:1c:
         5c:e5:b6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:21:54 2025 by rpki-client