Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a643030303a3a2f33362d3336203d3e20323636323438.roa
File:                     323830343a336430343a643030303a3a2f33362d3336203d3e20323636323438.roa (raw, json)
Hash identifier:          /XD513LVRfMzehDNuWGK3YZI8p0ilYYAZtFNjHN6L78=
Subject key identifier:   CD:15:60:3F:A5:69:D4:24:98:6C:17:99:C3:40:99:96:A2:B9:B6:1C
Certificate issuer:       /CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
Certificate serial:       6ED021070C064FC13BBE35777BF45ABB434ECD6D
Authority key identifier: 6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a643030303a3a2f33362d3336203d3e20323636323438.roa
Signing time:             Wed 05 Mar 2025 19:00:03 +0000
ROA not before:           Wed 05 Mar 2025 18:55:03 +0000
ROA not after:            Wed 04 Mar 2026 19:00:03 +0000
asID:                     266248
IP address blocks:        2804:3d04:d000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:d0:21:07:0c:06:4f:c1:3b:be:35:77:7b:f4:5a:bb:43:4e:cd:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
        Validity
            Not Before: Mar  5 18:55:03 2025 GMT
            Not After : Mar  4 19:00:03 2026 GMT
        Subject: CN=3082010A0282010100D61421FF1FB62AF5FEBAD4655058757BA7A7A86BE31BF4D3D2ADD7C82FBB5873472752E85E76BBD3B32FA31A57E98736AA3DAD05F617E85B631A581ABAAF4688DDF97A2C2F9051447DA0969AB22F2595C2B08D776EE5FB3345BCC93792551363AC67360A001F77A2FFDE3400F95BD81463988C8596003FFC2CB75E910928DA96BCB8BA2A3EEA068EF2789592E90EA9FA5F8DAB27F241B3F24631AE0908F5B388D0E76F8CE8346BA66E1D98FE0BF4540A060FF0F137FE5A767DE51CFA2AE9C9EA69E8C7D0A8EF1E5799A048BB9A43E6834062615A76C05FCCE5C74EA70D1005E62BC24EC1FF9D0558AFB38249BA8C8BCE5778BD0444C4C49ED3FE0D4399ACD0AB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:14:21:ff:1f:b6:2a:f5:fe:ba:d4:65:50:58:
                    75:7b:a7:a7:a8:6b:e3:1b:f4:d3:d2:ad:d7:c8:2f:
                    bb:58:73:47:27:52:e8:5e:76:bb:d3:b3:2f:a3:1a:
                    57:e9:87:36:aa:3d:ad:05:f6:17:e8:5b:63:1a:58:
                    1a:ba:af:46:88:dd:f9:7a:2c:2f:90:51:44:7d:a0:
                    96:9a:b2:2f:25:95:c2:b0:8d:77:6e:e5:fb:33:45:
                    bc:c9:37:92:55:13:63:ac:67:36:0a:00:1f:77:a2:
                    ff:de:34:00:f9:5b:d8:14:63:98:8c:85:96:00:3f:
                    fc:2c:b7:5e:91:09:28:da:96:bc:b8:ba:2a:3e:ea:
                    06:8e:f2:78:95:92:e9:0e:a9:fa:5f:8d:ab:27:f2:
                    41:b3:f2:46:31:ae:09:08:f5:b3:88:d0:e7:6f:8c:
                    e8:34:6b:a6:6e:1d:98:fe:0b:f4:54:0a:06:0f:f0:
                    f1:37:fe:5a:76:7d:e5:1c:fa:2a:e9:c9:ea:69:e8:
                    c7:d0:a8:ef:1e:57:99:a0:48:bb:9a:43:e6:83:40:
                    62:61:5a:76:c0:5f:cc:e5:c7:4e:a7:0d:10:05:e6:
                    2b:c2:4e:c1:ff:9d:05:58:af:b3:82:49:ba:8c:8b:
                    ce:57:78:bd:04:44:c4:c4:9e:d3:fe:0d:43:99:ac:
                    d0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:15:60:3F:A5:69:D4:24:98:6C:17:99:C3:40:99:96:A2:B9:B6:1C
            X509v3 Authority Key Identifier:
                keyid:6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a643030303a3a2f33362d3336203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d04:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         03:00:83:1a:f0:a1:24:6e:19:bd:49:06:71:ff:98:f2:61:86:
         8f:19:21:e6:75:a7:85:84:91:4d:f1:7f:fd:56:b6:93:94:c2:
         bb:70:60:57:c4:7a:b6:0d:7a:dc:46:06:f6:67:ab:78:19:df:
         de:37:d7:c4:c3:fd:1e:70:c4:ba:58:0c:db:97:87:74:c6:38:
         cb:bb:b9:dd:36:dd:c2:71:a4:40:6c:f8:ed:c5:2e:81:b0:a1:
         97:b7:6c:a7:ba:e7:91:05:9b:6c:d6:be:f2:4a:46:b4:47:eb:
         9a:3b:3e:bb:7f:e7:bf:7c:cb:60:02:2b:22:d4:90:c3:dc:81:
         10:ef:2e:6f:d4:22:9d:1e:af:32:25:e4:9f:f5:20:e9:ac:3a:
         57:21:d9:da:7e:13:bb:fd:9d:79:ea:b3:a1:7a:d1:fa:c0:0f:
         17:0e:1b:49:f8:42:d3:69:45:5d:6e:79:4e:2d:62:45:8a:bb:
         61:64:82:66:b2:c8:7a:51:61:3f:92:47:1a:ef:c4:a0:45:8d:
         dc:71:7d:9f:fa:f9:c9:e7:31:ec:12:3a:72:76:e3:c8:88:ba:
         3d:77:69:0e:8b:7d:be:77:e1:1f:45:88:4c:07:af:b2:dd:72:
         5e:b6:d9:5c:94:b8:4d:77:d3:d9:ab:1b:47:3b:f9:77:54:a3:
         46:37:88:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:17:41 2025 by rpki-client