Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a653030303a3a2f33362d3336203d3e20323636323438.roa
File:                     323830343a336430343a653030303a3a2f33362d3336203d3e20323636323438.roa (raw, json)
Hash identifier:          SMPDCLlFI8ySaWX9bzsashqmpkV1lB7x6mqH5rgacXQ=
Subject key identifier:   69:DA:B7:41:51:36:45:92:0F:C2:80:38:1B:25:8D:C1:34:4F:CD:4F
Certificate issuer:       /CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
Certificate serial:       4BF1B018F0C53F73727B0A1A122679FBDC169F8B
Authority key identifier: 6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a653030303a3a2f33362d3336203d3e20323636323438.roa
Signing time:             Wed 05 Mar 2025 19:00:03 +0000
ROA not before:           Wed 05 Mar 2025 18:55:03 +0000
ROA not after:            Wed 04 Mar 2026 19:00:03 +0000
asID:                     266248
IP address blocks:        2804:3d04:e000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:f1:b0:18:f0:c5:3f:73:72:7b:0a:1a:12:26:79:fb:dc:16:9f:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
        Validity
            Not Before: Mar  5 18:55:03 2025 GMT
            Not After : Mar  4 19:00:03 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:dd:53:19:de:98:0b:f4:85:d9:98:a0:b7:60:
                    f8:9e:df:17:08:02:06:12:8e:f5:a0:1b:27:ab:a2:
                    50:43:4a:95:ec:2b:6f:ce:75:8a:05:dc:95:e2:c6:
                    43:b0:fc:75:fc:1d:02:f4:eb:c4:84:a7:01:b8:2a:
                    e7:13:ba:5e:c4:79:8c:75:4a:8c:dd:5f:05:0d:79:
                    55:60:b6:71:79:f1:6e:90:e1:81:73:20:8b:24:2f:
                    cf:d3:ba:10:b4:b2:cc:cc:8e:a4:af:38:9e:68:ce:
                    2c:f3:1d:aa:c2:77:82:dd:5a:e8:61:00:a9:ac:b6:
                    d6:c8:8d:e7:ff:71:13:6c:0d:cc:f2:c9:1d:21:14:
                    3b:74:f0:28:5f:69:ca:22:f5:d6:36:03:07:7b:5f:
                    48:f4:51:96:5e:40:ac:48:eb:b0:17:a6:52:83:8a:
                    0d:09:59:86:85:8a:30:30:3a:1e:2c:7e:d6:92:51:
                    01:61:6c:25:50:ae:33:84:a5:d6:e0:5b:45:6f:cf:
                    f2:11:7a:f7:ca:8a:5a:d4:86:86:cd:63:9e:97:46:
                    ca:86:62:6f:09:e2:e5:dc:42:db:b0:af:c1:31:2e:
                    2a:a3:8a:74:98:77:51:c1:57:1e:7d:39:2a:72:95:
                    2f:2b:8b:ff:ab:79:33:bb:5a:76:a6:07:a3:4f:cf:
                    8f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:DA:B7:41:51:36:45:92:0F:C2:80:38:1B:25:8D:C1:34:4F:CD:4F
            X509v3 Authority Key Identifier:
                keyid:6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a653030303a3a2f33362d3336203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d04:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5d:3b:ba:77:19:b7:08:c2:8a:70:5d:a3:f5:bf:15:7c:3f:14:
         4b:ab:16:1b:2b:a5:bf:1f:3b:fb:e9:7c:06:b9:a6:21:5c:fb:
         9b:81:cf:89:71:97:f8:ee:2e:f1:9d:2a:b1:de:09:c5:e0:92:
         aa:4b:59:fe:11:ab:ef:8d:0f:b8:6f:7c:6e:fd:26:0d:eb:8f:
         d5:52:17:d2:c1:ab:3c:8c:04:36:e2:55:f7:ef:fe:fd:3c:0f:
         82:b3:9e:9d:04:2e:14:9e:4b:de:af:0d:c2:7a:c5:a2:bf:0d:
         50:81:a4:27:22:a9:2c:94:47:07:65:51:60:68:a0:02:1e:a8:
         33:e7:a1:21:3d:3a:ee:37:57:c2:0d:64:9b:33:6f:dc:ad:38:
         dd:b5:99:60:34:59:69:2a:39:d6:90:ca:10:fb:4c:b1:f0:61:
         ed:20:4c:48:07:36:7c:b1:d7:af:03:d9:2c:f3:10:f0:8b:0b:
         ac:94:7d:0e:6d:df:88:b8:40:05:a1:28:49:8b:50:b3:35:c1:
         8e:2b:2d:6c:6f:93:6f:2e:a4:4c:49:02:1b:a5:f3:10:1d:27:
         b0:25:c1:5f:32:1d:3a:64:ac:f1:b4:06:a0:a0:14:5b:a3:be:
         ca:b9:ae:de:a3:cd:a7:82:5c:3a:90:a0:2c:33:15:ba:a9:0f:
         78:37:7c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:20:11 2025 by rpki-client