Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/0/323830343a366362303a3a2f33322d3334203d3e20323730343835.roa
File:                     323830343a366362303a3a2f33322d3334203d3e20323730343835.roa (raw, json)
Hash identifier:          2bLTpeVWmBReABmpBrlek3wPLzqOST/s512q9gQRdkM=
Subject key identifier:   51:2A:53:96:93:41:44:21:7B:CA:FE:B5:29:3C:FB:27:C8:CC:12:57
Certificate issuer:       /CN=CA696FB59BAE4926964E7F1FABB3F5C6A93F443B
Certificate serial:       5824F1A210C5054B11E324FBB93F0B5281B4C575
Authority key identifier: CA:69:6F:B5:9B:AE:49:26:96:4E:7F:1F:AB:B3:F5:C6:A9:3F:44:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA696FB59BAE4926964E7F1FABB3F5C6A93F443B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/0/323830343a366362303a3a2f33322d3334203d3e20323730343835.roa
Signing time:             Thu 04 Apr 2024 19:00:00 +0000
ROA not before:           Thu 04 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     270485
IP address blocks:        2804:6cb0::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:24:f1:a2:10:c5:05:4b:11:e3:24:fb:b9:3f:0b:52:81:b4:c5:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA696FB59BAE4926964E7F1FABB3F5C6A93F443B
        Validity
            Not Before: Apr  4 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:43:e0:1b:8f:6d:73:4b:77:7f:8e:00:80:bd:
                    13:83:f2:55:a2:b4:3e:09:5f:60:e4:5f:c0:8d:ad:
                    28:db:4d:ed:44:bc:8c:d0:a3:ce:5f:97:68:2d:9f:
                    cf:6e:80:0d:97:47:7f:45:06:d8:02:d7:8b:9b:ef:
                    3f:dc:fd:13:1d:44:0c:66:33:53:e5:7a:9b:b6:d1:
                    8e:28:f6:56:6b:5c:92:8b:56:46:a3:92:c3:2f:68:
                    29:e8:03:8e:9d:63:de:9d:11:dc:39:83:31:3c:71:
                    8b:57:50:73:95:35:89:65:0b:22:1f:d6:6c:45:91:
                    ba:3a:9a:c3:98:7d:e2:c7:0f:37:68:2c:6d:52:bb:
                    99:4a:c1:9e:9f:c8:44:e3:ef:7a:b1:13:79:54:04:
                    95:e3:3f:14:af:41:95:e5:e6:8f:46:a4:3d:6b:78:
                    0c:e5:78:46:41:b7:a8:b5:e5:f6:d2:0e:88:8f:f0:
                    21:73:d0:f7:c1:17:ac:46:64:06:c0:7e:04:5d:e8:
                    e3:ce:51:14:87:ac:ea:e9:26:03:ed:3f:7c:fa:1d:
                    7e:24:02:0f:47:5f:d5:7f:11:ef:00:1c:c2:1e:89:
                    48:75:58:c1:c6:1d:ad:6d:04:ec:d2:4c:b7:02:f9:
                    ac:64:7b:fb:03:6d:3f:69:b0:a2:22:1d:38:c3:af:
                    81:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:2A:53:96:93:41:44:21:7B:CA:FE:B5:29:3C:FB:27:C8:CC:12:57
            X509v3 Authority Key Identifier:
                keyid:CA:69:6F:B5:9B:AE:49:26:96:4E:7F:1F:AB:B3:F5:C6:A9:3F:44:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/0/CA696FB59BAE4926964E7F1FABB3F5C6A93F443B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA696FB59BAE4926964E7F1FABB3F5C6A93F443B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/0/323830343a366362303a3a2f33322d3334203d3e20323730343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6cb0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:2b:ff:90:ff:37:2a:65:4c:60:fe:a3:95:fe:c4:f2:07:8f:
         3e:41:50:04:d3:77:b7:5e:cd:50:64:ef:42:c6:42:4c:0c:2e:
         e1:b2:85:f5:08:8d:b3:bf:f7:66:1b:3c:5f:67:d8:c0:09:c2:
         14:32:c5:9e:0f:68:35:26:8d:ef:61:15:a1:54:61:b2:8e:05:
         97:fe:7b:5c:08:a6:44:8e:df:5d:54:54:56:66:f9:13:6b:f9:
         ba:94:16:b2:1e:ee:05:61:72:a4:7a:3f:2e:56:ab:0c:d6:07:
         67:76:b5:f5:b8:e6:18:b1:57:90:10:40:39:d8:a6:0e:ba:99:
         11:ca:4f:f4:2b:c4:db:8e:bc:a0:c1:8d:52:47:26:e2:bd:78:
         2e:6d:f6:51:8d:fc:b9:e2:bd:50:bc:68:73:5c:ae:25:17:8a:
         45:c2:d5:fa:8a:99:24:df:0a:65:f9:eb:30:51:bf:03:22:7e:
         b2:9c:21:6c:b2:ff:53:4f:2d:0d:bb:07:45:1b:4d:c8:cc:2d:
         31:1b:35:3c:c5:07:69:57:32:18:4a:30:8a:62:87:89:fe:42:
         fa:66:12:c9:7e:34:89:ec:a6:2e:5a:ca:83:2a:85:63:2f:57:
         53:82:78:b3:0c:1c:78:e9:39:2f:36:00:ed:64:6d:19:ee:1b:
         08:18:64:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:30 2025 by rpki-client