Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/323830343a363031383a3a2f33332d3333203d3e20323639313435.roa
File:                     323830343a363031383a3a2f33332d3333203d3e20323639313435.roa (raw, json)
Hash identifier:          nPpf0hhGMugZmNdbWERrNoc79wWP0pZTB/sPp3v04wk=
Subject key identifier:   6B:6F:75:6E:12:0A:11:04:62:42:C7:59:97:E0:3F:D6:78:5A:4D:6A
Certificate issuer:       /CN=3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0
Certificate serial:       170CD1025598C12D49E5599FE072C8276AAD4D79
Authority key identifier: 3F:A6:45:3F:F6:EE:48:DA:D9:C2:0C:55:2F:9A:4A:FA:13:BF:74:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/323830343a363031383a3a2f33332d3333203d3e20323639313435.roa
Signing time:             Thu 06 Mar 2025 09:03:17 +0000
ROA not before:           Thu 06 Mar 2025 08:58:17 +0000
ROA not after:            Thu 05 Mar 2026 09:03:17 +0000
asID:                     269145
IP address blocks:        2804:6018::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:0c:d1:02:55:98:c1:2d:49:e5:59:9f:e0:72:c8:27:6a:ad:4d:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0
        Validity
            Not Before: Mar  6 08:58:17 2025 GMT
            Not After : Mar  5 09:03:17 2026 GMT
        Subject: CN=6B6F756E120A11046242C75997E03FD6785A4D6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6d:b9:3c:df:c7:64:a2:31:50:34:f6:31:01:
                    96:c0:91:76:46:82:78:ee:3f:8f:58:b9:4f:0f:18:
                    1d:8e:8f:fb:91:8f:25:a2:04:ff:78:c6:ef:3d:3b:
                    03:72:c0:97:f3:d1:7c:b5:34:ce:58:c0:a4:af:39:
                    df:71:bd:f4:cb:54:c8:76:87:bf:0a:b0:98:ac:db:
                    74:23:00:0b:07:f5:e7:5e:76:99:9c:43:e0:7f:1b:
                    8e:3c:52:bb:ca:cf:ad:92:7f:2c:64:db:d9:f5:a8:
                    b2:3c:24:e9:63:6e:28:6f:35:38:70:17:9c:11:1d:
                    51:89:aa:ff:12:e1:f7:12:f3:61:20:ff:f8:b6:27:
                    bb:d9:78:db:db:94:76:4e:4e:da:9b:cb:3e:43:1c:
                    d0:0c:88:53:40:1c:a7:a2:52:2f:9c:38:27:1b:34:
                    92:89:27:86:1e:e7:15:90:cb:c5:ec:95:ab:7c:9f:
                    bf:4c:84:5e:f0:96:26:63:17:d5:f7:2e:87:36:4f:
                    16:c7:27:a4:4f:a4:3f:04:80:a4:3e:c2:1b:56:32:
                    b9:7c:3b:b0:99:6d:c8:54:5d:51:9b:e6:2e:eb:29:
                    ac:da:cf:26:6f:e1:45:bf:30:51:23:31:88:db:7c:
                    a9:0d:50:6e:bd:50:90:1c:2f:49:8d:05:03:1c:fb:
                    bb:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:6F:75:6E:12:0A:11:04:62:42:C7:59:97:E0:3F:D6:78:5A:4D:6A
            X509v3 Authority Key Identifier:
                keyid:3F:A6:45:3F:F6:EE:48:DA:D9:C2:0C:55:2F:9A:4A:FA:13:BF:74:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/323830343a363031383a3a2f33332d3333203d3e20323639313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6018::/33

    Signature Algorithm: sha256WithRSAEncryption
         52:32:e6:6a:2c:67:f0:98:4e:57:a5:b9:7d:da:f7:19:5b:bd:
         6e:c2:a6:0d:2b:3e:b9:3e:c2:7e:2f:18:4d:3c:be:5a:56:a6:
         f7:5b:de:03:c6:17:58:49:53:62:e0:db:58:cc:b4:43:f8:0b:
         6c:ff:02:1d:60:00:c5:1c:38:c7:5b:83:a7:8c:40:a7:8f:23:
         29:1e:f6:83:c2:58:1f:68:61:8e:e4:81:de:9a:0b:bc:7b:46:
         88:db:42:7a:08:bd:92:f7:8f:43:10:ea:18:62:8e:ca:26:9a:
         4d:2c:67:22:93:49:c7:92:c9:a2:33:5c:7c:6c:d6:2d:55:f0:
         97:cd:50:47:68:5f:e4:11:c1:d7:5f:5b:91:31:0b:e0:4e:b4:
         88:3b:49:27:98:de:12:d3:d2:32:45:80:81:57:1b:ac:3d:08:
         29:af:38:9b:12:24:17:de:a5:f5:e5:2c:a7:19:77:27:11:ab:
         0d:f9:ac:2b:60:57:61:a4:49:87:f0:5c:bf:28:0d:6d:ac:3e:
         a7:ac:8b:b3:f4:f9:8f:cd:5c:c1:e3:07:06:10:e5:69:93:89:
         90:d9:22:e3:f3:76:1b:a8:ba:cb:83:26:e0:26:8b:52:34:ec:
         4f:ac:29:b8:d0:0e:27:d1:87:12:03:1a:37:e2:5a:84:e8:0f:
         18:87:06:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:25:31 2025 by rpki-client