Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a3a2f33332d3333203d3e20323636323438.roa
File:                     323830343a336430343a3a2f33332d3333203d3e20323636323438.roa (raw, json)
Hash identifier:          R2N8xu41dg/OePSI7ihwekmFIAP53aWuSHR7GI8990A=
Subject key identifier:   95:67:06:E1:9D:B5:21:0D:DB:AA:6D:BB:67:33:93:B2:70:40:8F:80
Certificate issuer:       /CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
Certificate serial:       47198CABEA3146C04244CF52477CD42D3AF024AA
Authority key identifier: 6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a3a2f33332d3333203d3e20323636323438.roa
Signing time:             Wed 05 Mar 2025 19:00:03 +0000
ROA not before:           Wed 05 Mar 2025 18:55:03 +0000
ROA not after:            Wed 04 Mar 2026 19:00:03 +0000
asID:                     266248
IP address blocks:        2804:3d04::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:19:8c:ab:ea:31:46:c0:42:44:cf:52:47:7c:d4:2d:3a:f0:24:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
        Validity
            Not Before: Mar  5 18:55:03 2025 GMT
            Not After : Mar  4 19:00:03 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:04:da:4c:0b:33:e8:a6:5f:9d:db:73:50:d2:
                    61:a1:14:51:67:44:63:2d:ab:64:5a:67:60:8f:27:
                    0a:de:c9:63:76:0a:2d:b5:3f:3c:49:e8:78:8f:16:
                    01:f4:80:8d:b6:88:90:98:b8:86:e9:04:9b:43:9b:
                    b9:35:ad:2c:63:cf:ae:7a:f6:46:13:17:1b:e4:3e:
                    3c:42:65:54:a9:b2:b1:85:f2:3d:85:dc:7b:32:f0:
                    47:dc:25:a7:cc:ed:67:6b:0e:df:e1:d7:63:cd:22:
                    55:9a:37:24:46:dc:f9:28:43:7b:d8:a7:08:c2:3a:
                    ab:24:ad:df:16:30:1b:1d:af:27:bb:80:82:62:2b:
                    a1:75:df:4c:ba:8c:ba:cd:eb:b6:d0:21:4c:1e:a4:
                    df:31:02:4d:51:b5:2c:58:3e:dc:91:b8:0a:37:40:
                    44:d9:d4:c6:f3:d5:5e:b3:45:9c:31:80:21:59:af:
                    8a:62:29:90:66:8d:fb:30:db:92:96:c1:d0:3d:16:
                    0d:b4:69:85:f8:7d:ef:db:c2:b0:f5:13:b5:22:c4:
                    89:46:3b:1d:25:74:e6:20:9c:1b:9b:00:b2:e6:b8:
                    de:ea:a3:89:6c:5a:90:de:08:3f:f0:3d:2b:22:63:
                    78:0c:22:19:23:a8:3a:2f:0d:ad:a4:10:b5:a6:52:
                    84:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:67:06:E1:9D:B5:21:0D:DB:AA:6D:BB:67:33:93:B2:70:40:8F:80
            X509v3 Authority Key Identifier:
                keyid:6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a3a2f33332d3333203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d04::/33

    Signature Algorithm: sha256WithRSAEncryption
         1d:b8:2b:5f:7d:73:cb:9a:b2:fe:f7:98:a5:01:28:85:15:19:
         58:1a:b9:67:d7:ea:3d:58:70:c4:90:e2:43:a9:c9:7c:45:8b:
         b7:80:b1:b2:51:c6:8d:b4:f9:35:b2:ea:9d:38:00:6c:c4:90:
         f1:06:62:15:cf:ad:cd:fb:2b:ae:5a:77:25:3b:05:ba:45:8e:
         31:51:2e:15:a3:42:7f:10:93:37:8a:95:15:dc:fa:04:49:c2:
         1e:cc:b9:d0:e9:d0:48:70:fc:81:5d:c5:ea:c0:1b:5a:f4:a6:
         a8:6a:c2:67:f8:c1:9f:9f:2d:ad:67:4b:9c:fe:c0:a3:7d:a7:
         98:4e:11:e6:14:da:1a:19:15:d4:d9:63:d6:9a:c9:9b:52:a9:
         59:ce:e2:b9:b3:6f:f3:d2:da:7a:63:14:6f:54:18:ff:2a:2c:
         13:23:02:89:ac:67:41:86:7a:48:f0:d9:f1:4b:8b:4b:5b:b9:
         79:f4:7b:d1:be:88:5e:ea:7f:d9:26:49:e4:c4:0a:bf:44:ef:
         aa:3a:d2:fa:58:9a:52:71:28:83:c1:11:21:81:18:4b:a5:0a:
         51:6a:e4:e8:13:f3:f0:2e:3e:b3:8b:03:92:7f:1d:a8:c3:4b:
         2a:b5:22:c4:27:7e:27:b3:cc:09:49:ec:36:42:21:a3:43:e6:
         5b:85:93:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:15:17 2025 by rpki-client