Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/323830343a376534303a333030303a3a2f34302d3430203d3e20323731363132.roa
File:                     323830343a376534303a333030303a3a2f34302d3430203d3e20323731363132.roa (raw, json)
Hash identifier:          gTwn7I3nfocmSz55KSdq46TK7NGDzMauP15apBOdJkI=
Subject key identifier:   40:F3:1D:53:57:C6:AE:72:5C:3C:B8:FF:CF:9E:CE:A7:F7:BA:6B:2D
Certificate issuer:       /CN=6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11
Certificate serial:       73C1E1618DE20DBAC04F60ACA4D704935EF76D17
Authority key identifier: 6F:4E:1F:59:E6:18:6A:77:B0:AD:EF:3E:51:0A:CE:74:7B:F1:AB:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/323830343a376534303a333030303a3a2f34302d3430203d3e20323731363132.roa
Signing time:             Thu 06 Mar 2025 02:58:12 +0000
ROA not before:           Thu 06 Mar 2025 02:53:12 +0000
ROA not after:            Thu 05 Mar 2026 02:58:12 +0000
asID:                     271612
IP address blocks:        2804:7e40:3000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:c1:e1:61:8d:e2:0d:ba:c0:4f:60:ac:a4:d7:04:93:5e:f7:6d:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11
        Validity
            Not Before: Mar  6 02:53:12 2025 GMT
            Not After : Mar  5 02:58:12 2026 GMT
        Subject: CN=40F31D5357C6AE725C3CB8FFCF9ECEA7F7BA6B2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:1d:a3:d1:55:93:24:fe:ef:b2:ad:33:38:36:
                    76:d9:4b:5c:f9:76:8e:f6:1f:5a:f7:57:d8:51:54:
                    a0:57:6a:8d:c6:d2:68:c7:78:db:06:6c:ef:3b:0e:
                    7f:9c:3e:12:61:1c:d5:81:89:28:7d:8b:fb:5c:0a:
                    85:0d:57:58:d3:50:df:14:bd:f8:bd:f7:04:09:4e:
                    d3:c8:3a:30:74:17:be:c1:6c:3c:0d:04:0b:1d:df:
                    c9:37:00:d8:80:34:c0:81:80:88:eb:7f:1a:7f:69:
                    c6:62:44:1f:01:0f:e9:d7:cf:10:cc:ce:36:af:0b:
                    ab:df:98:ae:da:be:e8:d8:07:d9:18:8c:1f:82:66:
                    f5:e2:c1:e1:5b:c7:c0:b7:2d:68:93:b9:25:02:2c:
                    9d:42:82:8e:46:e5:a7:1a:1d:73:58:c8:67:25:82:
                    a6:34:b9:ad:c6:b2:45:e9:ce:72:f3:6f:fa:8c:d9:
                    40:12:d7:12:2a:a7:0d:ac:90:3b:62:f5:2b:4d:30:
                    a7:7c:77:bf:23:ea:82:33:a4:b8:35:43:ac:18:df:
                    70:80:d1:cc:d3:a1:f5:e6:c8:a9:d8:49:f7:a3:b9:
                    63:da:ca:d4:f2:4b:1a:e8:4c:9a:ca:a3:45:53:31:
                    93:7f:3a:6d:23:79:3b:64:58:0b:52:50:36:69:3c:
                    f7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:F3:1D:53:57:C6:AE:72:5C:3C:B8:FF:CF:9E:CE:A7:F7:BA:6B:2D
            X509v3 Authority Key Identifier:
                keyid:6F:4E:1F:59:E6:18:6A:77:B0:AD:EF:3E:51:0A:CE:74:7B:F1:AB:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/323830343a376534303a333030303a3a2f34302d3430203d3e20323731363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e40:3000::/40

    Signature Algorithm: sha256WithRSAEncryption
         28:30:fb:18:94:47:2a:ce:57:79:79:03:98:0f:37:fa:53:e1:
         96:c3:1a:14:d1:14:61:ab:a4:eb:4b:c9:75:f0:76:ca:fb:6a:
         10:aa:aa:1f:c4:f1:56:75:05:aa:6f:c5:b4:7c:d5:10:04:a9:
         8b:ea:1d:07:5f:b4:5a:e7:a3:c3:b0:a9:1d:df:ab:da:68:fd:
         39:0b:47:c0:b0:d6:ce:35:05:81:c5:7e:bd:ab:17:3f:0b:cf:
         77:18:48:49:25:f2:da:92:ad:64:9a:54:d3:6c:06:29:54:3f:
         f9:d5:bb:97:3c:d6:96:ec:ce:5c:a1:63:35:49:86:a4:a6:9b:
         b8:06:9f:e8:25:cd:29:59:2b:8e:03:9e:48:69:37:4c:f7:51:
         4a:6f:12:92:97:10:4a:2e:ff:a8:d6:5f:2c:5b:39:fe:6e:ed:
         42:60:50:81:72:f3:6a:3d:62:1e:7d:cb:e7:a4:f9:46:7a:17:
         15:1c:2c:9f:8a:1e:ac:a5:80:a4:3e:6a:31:3c:2f:7a:d4:0f:
         3e:28:23:8a:05:eb:bb:59:1d:17:86:19:16:7a:8c:74:74:e9:
         c9:8e:cb:62:96:5a:44:6f:ef:47:33:3c:10:84:66:fc:a2:61:
         c3:1f:ab:1b:18:8a:18:78:2d:93:e4:14:66:73:ce:a4:fc:c7:
         a2:62:5a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:40:17 2025 by rpki-client