Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/323830343a323866343a383030303a3a2f33332d3333203d3e20323633393839.roa
File:                     323830343a323866343a383030303a3a2f33332d3333203d3e20323633393839.roa (raw, json)
Hash identifier:          4/+GVTrg1OYq3K6U/8nrMBzoOZGSMUAohE8fa6exGiI=
Subject key identifier:   AF:CD:A1:8E:DD:99:91:A8:1B:E7:F2:AB:3F:C3:64:00:79:D9:FC:99
Certificate issuer:       /CN=6E2CFADE0DB965B830D4C92D2183921AE113D2A2
Certificate serial:       0D9C06D41EAF447D673CFEDAF2836287967943DF
Authority key identifier: 6E:2C:FA:DE:0D:B9:65:B8:30:D4:C9:2D:21:83:92:1A:E1:13:D2:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/323830343a323866343a383030303a3a2f33332d3333203d3e20323633393839.roa
Signing time:             Wed 05 Mar 2025 19:32:38 +0000
ROA not before:           Wed 05 Mar 2025 19:27:38 +0000
ROA not after:            Wed 04 Mar 2026 19:32:38 +0000
asID:                     263989
IP address blocks:        2804:28f4:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:9c:06:d4:1e:af:44:7d:67:3c:fe:da:f2:83:62:87:96:79:43:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E2CFADE0DB965B830D4C92D2183921AE113D2A2
        Validity
            Not Before: Mar  5 19:27:38 2025 GMT
            Not After : Mar  4 19:32:38 2026 GMT
        Subject: CN=AFCDA18EDD9991A81BE7F2AB3FC3640079D9FC99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b7:82:05:c3:a6:22:32:79:78:c9:e6:4b:34:
                    b3:14:9e:09:43:f5:e5:fc:f2:af:b6:82:66:4c:d6:
                    06:a5:01:6b:e9:58:df:09:ac:76:d0:2c:2b:fe:5f:
                    5e:80:23:be:c0:9f:d1:dd:c2:bb:6d:6c:88:18:60:
                    c9:87:87:8e:25:f5:82:9c:9a:f8:2e:79:17:12:98:
                    97:9f:46:c2:64:5a:53:03:8a:e2:b7:8d:55:fc:3d:
                    31:6b:a3:ad:2a:3c:67:8f:3f:c7:58:e1:8b:50:cf:
                    f3:78:33:ef:43:9b:8b:e1:d7:3a:7d:a0:76:4b:d6:
                    09:38:12:fc:a8:ac:5e:98:cc:7f:4f:6a:93:47:8a:
                    40:97:b1:67:be:c8:f7:95:95:f1:a3:ff:25:da:51:
                    2a:63:85:c6:1b:e0:aa:1d:44:8f:86:a1:54:e7:59:
                    4f:e1:4b:86:56:ec:1e:3a:0e:c4:61:9f:ab:fc:74:
                    8b:16:6b:ce:28:eb:c6:14:7e:29:b6:80:26:1e:c7:
                    4e:61:9c:c5:ba:c7:42:6f:19:9d:d2:a0:b2:c4:02:
                    1c:19:8e:36:3b:cc:94:a5:1e:80:9a:05:56:0a:12:
                    69:ca:cb:04:19:30:a1:23:26:7e:a5:8b:ea:34:75:
                    d4:64:26:56:82:fd:b7:ad:d4:6d:20:20:e8:fe:52:
                    1b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:CD:A1:8E:DD:99:91:A8:1B:E7:F2:AB:3F:C3:64:00:79:D9:FC:99
            X509v3 Authority Key Identifier:
                keyid:6E:2C:FA:DE:0D:B9:65:B8:30:D4:C9:2D:21:83:92:1A:E1:13:D2:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/323830343a323866343a383030303a3a2f33332d3333203d3e20323633393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28f4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         21:b9:7e:37:8a:17:64:d2:42:42:cc:98:69:c0:8d:f9:60:3f:
         dc:e0:59:c7:89:24:ef:79:52:ef:17:7e:ee:79:cc:df:68:92:
         6a:7a:4d:b8:3d:c1:cb:a3:59:dd:00:80:29:df:9a:06:69:2d:
         6f:3e:30:07:eb:9b:fd:fe:77:99:ef:17:f8:9a:d7:b1:c7:5f:
         e3:ab:f5:b1:ff:c5:67:08:7c:44:a8:56:48:44:0c:9f:3f:f6:
         da:fb:49:1e:05:50:5d:7e:a9:9e:a0:e0:97:47:4f:dc:ac:25:
         7a:a5:57:70:7c:89:90:d4:34:41:b1:95:5a:b2:0f:21:cd:a7:
         f2:d3:1f:03:d5:98:fd:51:33:69:dd:6c:e7:52:c5:f1:2f:c1:
         03:16:de:7a:e1:cf:57:08:30:94:a9:b4:3f:77:85:73:dd:ab:
         5f:4c:4a:6f:dd:c7:81:03:5c:84:0d:41:36:ff:b7:6b:b6:4a:
         22:93:a6:73:96:29:6c:f8:ee:5d:5c:3c:e0:6f:8d:16:92:96:
         7b:b7:f7:f6:1d:a7:3c:ba:1b:16:69:2b:61:37:a2:eb:a9:0a:
         08:bb:03:49:07:68:10:f1:96:b2:71:b5:8e:bb:cf:87:d3:cc:
         ef:90:13:08:ce:1a:40:cd:77:cf:5a:58:fb:c8:52:c6:35:5a:
         86:16:93:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:00:45 2025 by rpki-client