Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a633030303a3a2f33362d3336203d3e20323636323438.roa
File:                     323830343a336430343a633030303a3a2f33362d3336203d3e20323636323438.roa (raw, json)
Hash identifier:          3E2qzWrv6X5YCN9lARXdAwJaJ4GRAoSmhg+1xxzWVFc=
Subject key identifier:   87:01:BB:30:26:D0:EB:A2:24:41:8B:C3:73:6E:3B:1B:2F:E8:EB:D4
Certificate issuer:       /CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
Certificate serial:       70D403C5D94873BC2D5246C414CC559317D8B251
Authority key identifier: 6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a633030303a3a2f33362d3336203d3e20323636323438.roa
Signing time:             Wed 05 Mar 2025 19:00:02 +0000
ROA not before:           Wed 05 Mar 2025 18:55:02 +0000
ROA not after:            Wed 04 Mar 2026 19:00:02 +0000
asID:                     266248
IP address blocks:        2804:3d04:c000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:d4:03:c5:d9:48:73:bc:2d:52:46:c4:14:cc:55:93:17:d8:b2:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
        Validity
            Not Before: Mar  5 18:55:02 2025 GMT
            Not After : Mar  4 19:00:02 2026 GMT
        Subject: CN=3082010A0282010100D281837BA13206D0CCA43A6484ED0BBB741033D2DBCD9CCFE756F4CCBE432975238BAFFA87F2828F163ED97CE7E66CEDDA15CD9062DAF1448FE8C7C862AA37B2B2BEAF4E9C1E139E7FB1417E659A73AAF8F6A40A5B07807F1B31334451431CCCD7FC5A374992A1B99DC3844C7DC1CCF26D76176F989B0AA47D597963A61087FF40C39CBEA217236EBF1C6CF7A4B9C2ADDFE6DB8A3FF215B1D4491164C493D6EAFC4739B31F3C574020214C4DFDA36B5FC7CE9364CE2570C47D9BCDC7C9373BF51B5DD9081AC1EF54C1D8D0E6F47145F3C9F99DE0815A783C379B2A5D22E0545088C993EE3E4E8A5EA06EB02C6C476081BAE57D2BA4DA75885B8AA30C970F917F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:81:83:7b:a1:32:06:d0:cc:a4:3a:64:84:ed:
                    0b:bb:74:10:33:d2:db:cd:9c:cf:e7:56:f4:cc:be:
                    43:29:75:23:8b:af:fa:87:f2:82:8f:16:3e:d9:7c:
                    e7:e6:6c:ed:da:15:cd:90:62:da:f1:44:8f:e8:c7:
                    c8:62:aa:37:b2:b2:be:af:4e:9c:1e:13:9e:7f:b1:
                    41:7e:65:9a:73:aa:f8:f6:a4:0a:5b:07:80:7f:1b:
                    31:33:44:51:43:1c:cc:d7:fc:5a:37:49:92:a1:b9:
                    9d:c3:84:4c:7d:c1:cc:f2:6d:76:17:6f:98:9b:0a:
                    a4:7d:59:79:63:a6:10:87:ff:40:c3:9c:be:a2:17:
                    23:6e:bf:1c:6c:f7:a4:b9:c2:ad:df:e6:db:8a:3f:
                    f2:15:b1:d4:49:11:64:c4:93:d6:ea:fc:47:39:b3:
                    1f:3c:57:40:20:21:4c:4d:fd:a3:6b:5f:c7:ce:93:
                    64:ce:25:70:c4:7d:9b:cd:c7:c9:37:3b:f5:1b:5d:
                    d9:08:1a:c1:ef:54:c1:d8:d0:e6:f4:71:45:f3:c9:
                    f9:9d:e0:81:5a:78:3c:37:9b:2a:5d:22:e0:54:50:
                    88:c9:93:ee:3e:4e:8a:5e:a0:6e:b0:2c:6c:47:60:
                    81:ba:e5:7d:2b:a4:da:75:88:5b:8a:a3:0c:97:0f:
                    91:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:01:BB:30:26:D0:EB:A2:24:41:8B:C3:73:6E:3B:1B:2F:E8:EB:D4
            X509v3 Authority Key Identifier:
                keyid:6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a633030303a3a2f33362d3336203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d04:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         41:df:c3:da:0b:31:82:86:9f:6d:dd:ee:19:28:be:7a:0f:74:
         17:0c:a3:75:e9:10:88:6b:82:73:b8:22:4b:8e:74:a8:5d:5d:
         9d:f4:14:23:b7:83:dd:33:74:d1:1e:31:bb:95:bb:a9:d6:a3:
         e9:fe:84:e6:82:3c:35:2f:5d:88:79:b7:6c:5d:22:17:e0:f2:
         34:65:26:3d:19:4e:4d:dd:44:6b:fd:aa:75:56:0d:f5:3e:a2:
         b6:43:e1:17:0e:85:2b:11:f0:01:53:4e:ab:03:43:d8:11:dd:
         13:9e:d3:18:a9:83:a4:e4:b6:90:de:9e:a3:fc:d9:83:97:44:
         7f:6b:ab:8d:ff:d4:94:bb:87:05:e0:d7:36:24:63:27:c6:b2:
         ae:7f:97:2a:c5:d7:9d:9a:38:2a:a5:da:d6:b1:84:c5:b6:a8:
         a8:8b:86:9c:5b:44:d5:09:7a:08:96:6b:9f:32:af:81:9b:bc:
         8f:b4:34:01:f1:bf:25:90:28:7d:a3:bc:bc:1e:6c:d4:50:c4:
         6e:19:f3:04:16:ad:92:ef:35:10:67:a6:6e:39:e5:ff:aa:3d:
         78:3e:fb:aa:15:a9:1b:e4:db:03:55:d2:29:e8:2a:9f:e9:91:
         44:05:c6:d7:d3:88:51:f4:a5:db:42:b6:89:eb:76:ab:36:0c:
         c8:d4:a0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:17:34 2025 by rpki-client