Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/323830343a333336303a666330303a3a2f34302d3430203d3e20323632373235.roa
File:                     323830343a333336303a666330303a3a2f34302d3430203d3e20323632373235.roa (raw, json)
Hash identifier:          s2LIZ8IR3Sf8CHVayFx11rnqvRYuxvcABY8JYeQF/hs=
Subject key identifier:   F4:6B:40:77:F0:46:8E:80:A0:BF:5F:3A:9B:36:9A:0C:24:B6:41:3D
Certificate issuer:       /CN=20DE0E6E3D621F83173025848A78216A75E502CC
Certificate serial:       02C5CA780858896B0103621C4FA8D3BC25FE4089
Authority key identifier: 20:DE:0E:6E:3D:62:1F:83:17:30:25:84:8A:78:21:6A:75:E5:02:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DE0E6E3D621F83173025848A78216A75E502CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/323830343a333336303a666330303a3a2f34302d3430203d3e20323632373235.roa
Signing time:             Mon 11 Nov 2024 21:01:51 +0000
ROA not before:           Mon 11 Nov 2024 20:56:51 +0000
ROA not after:            Mon 10 Nov 2025 21:01:51 +0000
asID:                     262725
IP address blocks:        2804:3360:fc00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:c5:ca:78:08:58:89:6b:01:03:62:1c:4f:a8:d3:bc:25:fe:40:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DE0E6E3D621F83173025848A78216A75E502CC
        Validity
            Not Before: Nov 11 20:56:51 2024 GMT
            Not After : Nov 10 21:01:51 2025 GMT
        Subject: CN=3082010A0282010100AF27DB403FB1590CF0493CB944663BF60E3576F3BC40017EAF7C18B9020CB9B7E2DA1E68FFE73A8C48FBD9EAA9FBC9EFE3191F2D213AE67396C9F646D004C4B9804467CC21A6A1A3ADAD0E395A6312503E36557CCF01596B42A1147A04FC1B031B0E49D2139F73E386FAA62B2B7A6139466A8F269853F09A74212640A2B0338BD6F93F0C1982470D434EC27E28847FAF0294A26B0364DAD78E390ACD83F8147E33E02939033CCAAD47D34A74B5BFF25175345350D60D6B7944D612D9E3AAA610946B882569ACDD7A547B61EA182833F64C378390D32A5F852AFE8376DC589BF524A1DE4B02FFD364336D746CA59A40571AFF322E80D6856859731A386713783D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:27:db:40:3f:b1:59:0c:f0:49:3c:b9:44:66:
                    3b:f6:0e:35:76:f3:bc:40:01:7e:af:7c:18:b9:02:
                    0c:b9:b7:e2:da:1e:68:ff:e7:3a:8c:48:fb:d9:ea:
                    a9:fb:c9:ef:e3:19:1f:2d:21:3a:e6:73:96:c9:f6:
                    46:d0:04:c4:b9:80:44:67:cc:21:a6:a1:a3:ad:ad:
                    0e:39:5a:63:12:50:3e:36:55:7c:cf:01:59:6b:42:
                    a1:14:7a:04:fc:1b:03:1b:0e:49:d2:13:9f:73:e3:
                    86:fa:a6:2b:2b:7a:61:39:46:6a:8f:26:98:53:f0:
                    9a:74:21:26:40:a2:b0:33:8b:d6:f9:3f:0c:19:82:
                    47:0d:43:4e:c2:7e:28:84:7f:af:02:94:a2:6b:03:
                    64:da:d7:8e:39:0a:cd:83:f8:14:7e:33:e0:29:39:
                    03:3c:ca:ad:47:d3:4a:74:b5:bf:f2:51:75:34:53:
                    50:d6:0d:6b:79:44:d6:12:d9:e3:aa:a6:10:94:6b:
                    88:25:69:ac:dd:7a:54:7b:61:ea:18:28:33:f6:4c:
                    37:83:90:d3:2a:5f:85:2a:fe:83:76:dc:58:9b:f5:
                    24:a1:de:4b:02:ff:d3:64:33:6d:74:6c:a5:9a:40:
                    57:1a:ff:32:2e:80:d6:85:68:59:73:1a:38:67:13:
                    78:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:6B:40:77:F0:46:8E:80:A0:BF:5F:3A:9B:36:9A:0C:24:B6:41:3D
            X509v3 Authority Key Identifier:
                keyid:20:DE:0E:6E:3D:62:1F:83:17:30:25:84:8A:78:21:6A:75:E5:02:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/20DE0E6E3D621F83173025848A78216A75E502CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DE0E6E3D621F83173025848A78216A75E502CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/323830343a333336303a666330303a3a2f34302d3430203d3e20323632373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3360:fc00::/40

    Signature Algorithm: sha256WithRSAEncryption
         4b:7d:7e:9a:aa:18:41:28:53:4f:63:95:ad:9a:d6:de:2d:80:
         1a:d0:31:64:c0:84:58:a1:4c:42:39:8a:8a:80:1f:bd:73:11:
         c2:85:88:be:75:ef:aa:4b:31:fa:83:39:0f:ee:37:34:c3:46:
         64:6e:47:a0:fc:de:cc:8a:2c:59:ad:c5:f3:14:87:a1:9b:0d:
         32:10:4b:de:e6:65:c4:65:0b:b9:90:94:e9:2a:37:52:92:6f:
         91:d0:be:48:d8:56:8c:2e:36:0b:5b:09:d3:53:19:81:36:72:
         f4:df:d1:94:96:3c:69:55:0c:49:75:4c:b0:00:89:10:2d:56:
         ee:4f:25:0d:42:20:1d:c8:7d:d0:ba:bd:92:15:14:b1:8f:90:
         22:b7:4a:fd:f5:55:24:b2:64:ac:38:c0:9c:c8:e1:e3:1d:ae:
         3f:f3:39:a2:66:be:75:d9:9f:b5:e7:8e:28:0c:7e:3c:79:ef:
         4f:8e:32:c6:6d:94:18:25:7e:e1:33:a5:21:75:5b:c2:e7:db:
         81:83:1b:27:78:51:d1:dc:8a:54:03:f0:88:b0:7f:1e:65:00:
         e7:27:fb:da:df:c1:8e:f7:c8:1c:76:23:2a:c3:10:e6:2c:cd:
         99:7c:14:27:40:26:9c:a1:07:12:4f:0a:dc:92:3b:23:5a:09:
         f1:cf:ce:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:55 2025 by rpki-client