Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/323830343a363139633a383030303a3a2f33332d3333203d3e20323639323435.roa
File:                     323830343a363139633a383030303a3a2f33332d3333203d3e20323639323435.roa (raw, json)
Hash identifier:          bhZpoUDHgvhph1tIeXzl3cvIi5qM6qio32I/Y88KLl8=
Subject key identifier:   84:2E:B7:51:8F:50:1D:E7:CC:D7:CD:C0:E7:49:3E:08:5D:BC:AC:E9
Certificate issuer:       /CN=A12962D917F7F6F2BE3A3E746A8863360ABEB089
Certificate serial:       378C41C708AB6A461C2E0333AF256B789EC398D3
Authority key identifier: A1:29:62:D9:17:F7:F6:F2:BE:3A:3E:74:6A:88:63:36:0A:BE:B0:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A12962D917F7F6F2BE3A3E746A8863360ABEB089.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/323830343a363139633a383030303a3a2f33332d3333203d3e20323639323435.roa
Signing time:             Wed 05 Feb 2025 11:55:03 +0000
ROA not before:           Wed 05 Feb 2025 11:50:03 +0000
ROA not after:            Wed 04 Feb 2026 11:55:03 +0000
asID:                     269245
IP address blocks:        2804:619c:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:8c:41:c7:08:ab:6a:46:1c:2e:03:33:af:25:6b:78:9e:c3:98:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A12962D917F7F6F2BE3A3E746A8863360ABEB089
        Validity
            Not Before: Feb  5 11:50:03 2025 GMT
            Not After : Feb  4 11:55:03 2026 GMT
        Subject: CN=842EB7518F501DE7CCD7CDC0E7493E085DBCACE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b0:6e:9a:4a:10:91:b6:10:c9:c8:77:3d:3d:
                    26:52:d5:f0:d0:03:11:4f:b9:2d:f4:d4:8a:47:7a:
                    33:dc:f8:ef:ab:1e:94:12:b0:cf:0b:d3:e3:f7:ee:
                    23:10:59:72:f2:91:fb:a3:f1:78:e6:49:02:a0:84:
                    42:de:d0:e6:2b:0e:55:58:67:e3:fe:92:fb:1f:8b:
                    25:f5:62:69:23:96:6d:5e:1a:74:22:76:b2:46:23:
                    3e:ee:85:3c:64:82:92:db:75:2c:0c:5b:34:ff:17:
                    d4:a9:5c:84:f9:ee:9a:75:34:2b:06:b0:bc:52:3f:
                    e1:40:03:8a:2b:0f:ac:25:e6:e3:c5:f2:5c:c8:c3:
                    08:dd:aa:3a:bf:26:4f:02:63:b8:a5:bf:16:33:0e:
                    51:16:e2:21:be:35:08:31:a2:65:54:19:42:fb:f6:
                    85:7a:80:39:ce:a3:98:fa:eb:0d:21:f4:b4:ae:28:
                    b1:6f:f0:ff:8e:0f:7f:c0:ac:0e:5f:ce:50:50:a8:
                    c7:16:39:71:8c:d5:15:49:4b:f7:08:aa:46:20:79:
                    d4:18:23:e4:3c:55:9b:05:4b:b3:85:ed:fe:a0:4b:
                    7d:3b:62:af:13:b1:a2:18:96:49:9b:8d:59:f8:56:
                    1c:64:a7:cd:78:b7:13:5c:33:e4:30:ed:02:eb:27:
                    b1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:2E:B7:51:8F:50:1D:E7:CC:D7:CD:C0:E7:49:3E:08:5D:BC:AC:E9
            X509v3 Authority Key Identifier:
                keyid:A1:29:62:D9:17:F7:F6:F2:BE:3A:3E:74:6A:88:63:36:0A:BE:B0:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/A12962D917F7F6F2BE3A3E746A8863360ABEB089.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A12962D917F7F6F2BE3A3E746A8863360ABEB089.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/323830343a363139633a383030303a3a2f33332d3333203d3e20323639323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:619c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         d4:18:22:4d:fe:8e:0d:c0:51:b6:34:12:16:bf:9a:31:dc:f8:
         1c:c3:d2:2f:0d:5d:48:1c:d9:82:34:f3:1f:65:48:df:45:40:
         e8:a0:34:74:4b:7f:d8:72:d6:bc:37:10:98:f9:28:13:be:11:
         40:76:8d:df:f3:7f:b8:89:1f:67:d7:f6:7e:b3:5b:19:58:49:
         c3:b4:eb:a7:dd:8a:f8:73:d0:ea:24:c8:88:0f:a6:06:9f:d8:
         e8:fe:56:12:f6:b7:24:35:de:a5:18:78:6a:85:0c:78:ba:c1:
         2d:d3:44:f2:b8:db:25:63:8b:8a:7b:73:ba:af:ba:cb:cc:ce:
         13:49:21:86:15:31:f6:df:f5:7b:1f:58:df:10:5b:fd:3c:23:
         7d:5c:fb:7b:96:94:f8:14:24:bd:b9:92:e5:b4:5c:78:94:f3:
         13:dd:6f:b9:a8:19:c8:a8:2c:36:02:61:ca:f9:00:a7:79:34:
         6f:f7:5e:33:2b:af:1a:74:38:88:60:e2:f7:67:0e:56:1e:ca:
         7f:cb:3f:72:03:a7:f5:f6:d4:e4:b7:17:ec:2b:a5:f6:9d:35:
         d3:40:57:29:be:f8:ea:f6:48:93:7d:7b:9b:ee:42:7e:39:f2:
         62:99:87:ca:c1:69:fb:02:a4:13:cd:c9:b9:49:5f:d2:b4:07:
         e5:7d:ca:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:41:14 2025 by rpki-client