Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/323830343a376534303a383030303a3a2f33332d3333203d3e20323731363132.roa
File:                     323830343a376534303a383030303a3a2f33332d3333203d3e20323731363132.roa (raw, json)
Hash identifier:          w+1LKEMkYpCD1nFCu16J3o8Rfodb7lqJS05umI/oO5c=
Subject key identifier:   63:E7:4F:31:2A:95:B4:8B:3A:3B:62:A9:77:83:E6:5D:98:13:D7:B1
Certificate issuer:       /CN=6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11
Certificate serial:       2119F011B02D2E68D3CDAF746C9C4129AC479B79
Authority key identifier: 6F:4E:1F:59:E6:18:6A:77:B0:AD:EF:3E:51:0A:CE:74:7B:F1:AB:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/323830343a376534303a383030303a3a2f33332d3333203d3e20323731363132.roa
Signing time:             Thu 06 Mar 2025 02:58:11 +0000
ROA not before:           Thu 06 Mar 2025 02:53:11 +0000
ROA not after:            Thu 05 Mar 2026 02:58:11 +0000
asID:                     271612
IP address blocks:        2804:7e40:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:19:f0:11:b0:2d:2e:68:d3:cd:af:74:6c:9c:41:29:ac:47:9b:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11
        Validity
            Not Before: Mar  6 02:53:11 2025 GMT
            Not After : Mar  5 02:58:11 2026 GMT
        Subject: CN=63E74F312A95B48B3A3B62A97783E65D9813D7B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:90:ae:d9:89:2f:3d:06:91:79:d0:25:97:2b:
                    78:ea:f7:3c:3c:3f:da:2f:dd:aa:9f:db:74:f2:8a:
                    51:3a:29:24:5f:4f:81:c4:68:ec:3e:b9:bc:f9:d5:
                    aa:6f:a8:08:42:e5:75:47:db:c3:16:3d:9b:14:ed:
                    6e:cf:05:45:ea:23:0a:ef:2f:8c:b3:ac:81:95:fa:
                    f6:6c:bb:35:7a:3b:28:a5:58:28:99:b1:25:d0:4b:
                    1c:cf:e2:26:2d:7e:5a:50:5f:ab:9f:bf:77:ec:1f:
                    13:c0:fe:70:9c:52:15:3e:5e:7c:5d:b0:91:bc:79:
                    07:32:2b:c7:b9:da:89:b8:43:b0:d1:65:44:04:4e:
                    c5:f8:ce:6c:24:22:8c:f4:03:a7:0d:9b:6e:49:09:
                    35:4a:d7:66:27:b5:1e:a8:03:ce:e5:8b:4c:f8:33:
                    dd:d7:5d:2e:1b:d1:8e:5c:40:17:9a:11:db:81:b0:
                    12:6b:d3:cc:98:00:9c:66:81:3f:94:fb:4f:f8:37:
                    b9:18:c1:e3:20:94:d0:59:a3:53:06:13:5a:8f:c1:
                    b8:29:ef:20:48:fd:8c:0a:05:9b:52:cc:e7:be:b1:
                    0b:01:71:c8:f4:38:7d:4a:98:9e:99:bc:d4:4d:9f:
                    18:79:9a:58:89:c7:70:6f:1b:e4:98:6d:74:3e:55:
                    73:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E7:4F:31:2A:95:B4:8B:3A:3B:62:A9:77:83:E6:5D:98:13:D7:B1
            X509v3 Authority Key Identifier:
                keyid:6F:4E:1F:59:E6:18:6A:77:B0:AD:EF:3E:51:0A:CE:74:7B:F1:AB:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F4E1F59E6186A77B0ADEF3E510ACE747BF1AB11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/1/323830343a376534303a383030303a3a2f33332d3333203d3e20323731363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e40:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         98:ab:94:4f:7f:54:66:5d:fc:ec:26:7a:58:29:c0:ff:32:ca:
         6b:1b:0e:5a:13:50:9c:a5:ee:fa:c3:e1:e6:f5:ea:9d:b6:35:
         58:11:d7:56:9b:06:28:23:69:1f:71:d9:e8:20:04:10:95:f2:
         f9:f0:03:eb:87:4d:a6:e7:14:e8:e8:c9:d4:ad:07:47:53:14:
         d1:cc:a7:f5:59:76:92:69:2f:ee:2b:dc:ff:df:3e:bd:cb:7f:
         0b:3d:e6:c7:28:31:fe:15:88:5c:4e:85:29:55:18:2c:45:62:
         99:5f:dc:48:36:a8:8e:ea:71:47:78:4b:a0:3c:00:06:54:75:
         d7:01:56:96:77:ca:39:f2:3e:c3:2a:a2:30:e0:13:a7:e4:a6:
         dc:27:5e:22:30:f1:9f:0b:33:1e:bd:2c:ec:92:cc:07:38:77:
         5a:cd:d8:b3:76:52:39:52:5e:4b:d6:39:a3:82:fb:c7:a9:fb:
         db:a7:0a:72:50:b1:64:08:75:fb:39:65:91:58:5d:09:85:5f:
         3b:fb:7f:7e:3c:cb:17:99:46:a3:d6:60:da:4d:6d:73:3b:5c:
         18:33:2d:a8:a4:03:8c:fa:99:c5:d6:f5:db:f5:9c:2d:73:17:
         4d:c5:e9:4d:63:c6:02:41:b2:17:5b:92:02:ed:c8:8f:5e:2a:
         9a:dd:04:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:41:59 2025 by rpki-client