Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/323830343a323866343a3a2f33342d3334203d3e20323633393839.roa
File:                     323830343a323866343a3a2f33342d3334203d3e20323633393839.roa (raw, json)
Hash identifier:          X4YXb/pCSPnPz7M+4hYOrs39KcVh96CkPLHnrs8exyo=
Subject key identifier:   D3:16:9A:08:3D:53:C6:0E:94:83:0A:2B:97:DC:B6:F9:38:5D:13:59
Certificate issuer:       /CN=6E2CFADE0DB965B830D4C92D2183921AE113D2A2
Certificate serial:       14DC20C4196E262DD8235B7BD427A96E516C3D11
Authority key identifier: 6E:2C:FA:DE:0D:B9:65:B8:30:D4:C9:2D:21:83:92:1A:E1:13:D2:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/323830343a323866343a3a2f33342d3334203d3e20323633393839.roa
Signing time:             Wed 05 Mar 2025 19:32:40 +0000
ROA not before:           Wed 05 Mar 2025 19:27:40 +0000
ROA not after:            Wed 04 Mar 2026 19:32:40 +0000
asID:                     263989
IP address blocks:        2804:28f4::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:dc:20:c4:19:6e:26:2d:d8:23:5b:7b:d4:27:a9:6e:51:6c:3d:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E2CFADE0DB965B830D4C92D2183921AE113D2A2
        Validity
            Not Before: Mar  5 19:27:40 2025 GMT
            Not After : Mar  4 19:32:40 2026 GMT
        Subject: CN=D3169A083D53C60E94830A2B97DCB6F9385D1359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:42:66:07:cf:41:30:4d:19:b6:12:be:84:cb:
                    77:3c:21:cc:1e:69:96:4a:38:54:19:68:57:e4:83:
                    3f:7b:06:1d:c3:ca:4a:0e:bd:d0:ed:68:84:37:62:
                    cd:c9:51:c8:aa:b0:f5:e0:78:d8:18:de:62:7d:3b:
                    e7:c4:9e:d5:2b:aa:2b:1e:fe:ca:0d:05:21:52:be:
                    97:74:e9:dd:fa:09:ff:1a:e5:b2:9d:8e:93:22:a2:
                    f7:8a:bd:2a:74:e4:f1:11:d0:17:ea:4b:7a:85:01:
                    82:0f:cc:d2:83:80:3a:84:88:dd:d8:8d:b8:e6:1d:
                    67:fb:c9:d3:50:d4:31:23:c0:3f:5a:fe:d4:89:11:
                    60:f6:a3:eb:f7:b7:18:11:24:4d:75:a7:a8:81:f7:
                    b7:ce:ab:16:34:32:d1:75:51:0a:94:f6:13:96:17:
                    28:1c:30:c6:d2:13:f2:67:50:1a:77:ec:c9:26:7a:
                    be:d0:19:2d:94:e7:d3:f6:87:d2:f8:a0:b5:39:7e:
                    b6:e5:0a:13:d0:16:24:46:88:5f:d3:f9:8d:14:55:
                    39:30:25:9f:75:d4:b3:07:60:71:40:b8:a3:bf:f8:
                    37:fc:ef:c1:ae:81:fa:00:cd:36:98:64:c3:0c:18:
                    2e:5f:ca:22:05:bd:81:0b:be:b8:01:b3:e7:fb:7d:
                    af:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:16:9A:08:3D:53:C6:0E:94:83:0A:2B:97:DC:B6:F9:38:5D:13:59
            X509v3 Authority Key Identifier:
                keyid:6E:2C:FA:DE:0D:B9:65:B8:30:D4:C9:2D:21:83:92:1A:E1:13:D2:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/323830343a323866343a3a2f33342d3334203d3e20323633393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28f4::/34

    Signature Algorithm: sha256WithRSAEncryption
         8b:54:61:d0:3b:5f:2f:ab:2f:0c:8f:d0:97:04:43:af:d0:83:
         87:82:20:d6:bc:e1:04:6d:01:30:a5:b9:0f:a8:0a:40:56:89:
         08:7f:14:71:b6:1c:56:02:c7:5a:4d:d1:04:23:1a:7b:dc:12:
         4d:8d:5f:48:93:ca:57:7c:41:21:b8:02:0d:e3:07:5b:0e:d3:
         3d:80:1f:91:95:3b:24:ec:75:14:29:5b:53:69:16:73:45:0d:
         5f:6b:6a:5b:2a:e3:4b:3e:07:58:61:5d:91:8a:28:94:6d:51:
         8d:9f:9a:64:8c:b5:35:05:bf:09:11:b6:81:3e:32:2b:f2:a1:
         37:64:0f:a6:4a:89:2a:72:15:0a:06:c9:d5:73:6f:3c:1e:64:
         23:98:15:ed:be:34:fc:66:f3:96:1f:53:2b:12:77:1b:17:5e:
         01:98:7d:50:b6:ff:1e:23:35:a5:aa:16:43:f3:04:72:46:0c:
         64:44:52:a5:04:32:fb:dc:40:bc:3e:f5:c1:89:16:cf:f1:7a:
         49:8c:36:6b:9e:79:ef:64:ca:bf:fe:7a:5e:ef:23:6b:6b:6b:
         c2:d7:a1:4c:88:07:64:3e:35:bc:82:2c:bc:2b:a5:7b:0a:6f:
         cc:8e:e0:26:f9:7e:ce:7b:ea:a9:40:28:8b:20:c3:36:51:a9:
         8f:86:38:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:58:04 2025 by rpki-client