Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3TxE1YqYsXZV25FMLMmP3mHVukZzyqGtJ2aYVKtYnG6T/0/323830343a366265303a3a2f33322d3332203d3e20323730343331.roa
File:                     323830343a366265303a3a2f33322d3332203d3e20323730343331.roa (raw, json)
Hash identifier:          6zC2U9UsD9QagzavH36tGY+N8e8ykUW3L1ticPKxpA8=
Subject key identifier:   8B:F7:4A:B2:A7:F8:5E:1F:6D:C1:8C:C0:BE:DD:FB:11:60:FF:91:3F
Certificate issuer:       /CN=7A3155CF09025C706805077AAA5B01CEBAB508F3
Certificate serial:       349F122975E8E9F69C6DF45F3C7FFE03FACBE8C0
Authority key identifier: 7A:31:55:CF:09:02:5C:70:68:05:07:7A:AA:5B:01:CE:BA:B5:08:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3155CF09025C706805077AAA5B01CEBAB508F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3TxE1YqYsXZV25FMLMmP3mHVukZzyqGtJ2aYVKtYnG6T/0/323830343a366265303a3a2f33322d3332203d3e20323730343331.roa
Signing time:             Wed 29 Jan 2025 22:29:02 +0000
ROA not before:           Wed 29 Jan 2025 22:24:02 +0000
ROA not after:            Wed 28 Jan 2026 22:29:02 +0000
asID:                     270431
IP address blocks:        2804:6be0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:9f:12:29:75:e8:e9:f6:9c:6d:f4:5f:3c:7f:fe:03:fa:cb:e8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A3155CF09025C706805077AAA5B01CEBAB508F3
        Validity
            Not Before: Jan 29 22:24:02 2025 GMT
            Not After : Jan 28 22:29:02 2026 GMT
        Subject: CN=8BF74AB2A7F85E1F6DC18CC0BEDDFB1160FF913F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:29:27:0c:56:03:df:01:04:ff:4c:a7:70:fa:
                    68:b5:e2:72:3d:22:19:3a:9f:25:7f:32:cb:79:07:
                    9c:18:a4:82:e0:a3:bf:cc:c3:b1:02:c9:f9:6a:69:
                    7e:75:a3:76:9c:c5:18:77:2c:29:26:d7:d7:01:7f:
                    d2:9e:60:9a:3f:ff:6e:bd:cd:16:8c:d4:6e:e5:27:
                    f0:36:54:cc:03:44:13:36:c2:53:86:c8:32:47:b5:
                    f5:ac:6b:63:23:ba:3a:f5:33:38:4d:05:8c:e0:9b:
                    ad:dc:49:a2:c4:20:aa:76:56:27:a0:77:df:96:8a:
                    57:04:4a:31:27:c2:24:ad:a9:5d:ea:49:be:70:74:
                    76:1e:a1:09:28:dc:71:4a:03:0a:a7:40:5f:bf:8a:
                    a6:91:52:c1:17:cd:32:93:65:ce:03:04:aa:81:14:
                    cc:8a:ba:f5:84:cd:c4:2b:51:07:a5:b7:c2:77:bc:
                    64:d1:b9:73:38:ec:d5:c6:07:e8:e8:3e:9a:98:45:
                    ac:0a:f5:1b:06:b7:8a:cd:06:1b:b0:48:11:9d:d5:
                    f3:ae:e5:27:3f:c3:43:0c:07:a0:83:4d:ca:3c:22:
                    69:4d:04:70:f1:95:b4:d1:c2:47:57:0c:e6:35:19:
                    6e:5c:39:ee:d5:4a:1b:4b:2e:3b:d6:74:fe:41:f5:
                    e9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F7:4A:B2:A7:F8:5E:1F:6D:C1:8C:C0:BE:DD:FB:11:60:FF:91:3F
            X509v3 Authority Key Identifier:
                keyid:7A:31:55:CF:09:02:5C:70:68:05:07:7A:AA:5B:01:CE:BA:B5:08:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3TxE1YqYsXZV25FMLMmP3mHVukZzyqGtJ2aYVKtYnG6T/0/7A3155CF09025C706805077AAA5B01CEBAB508F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3155CF09025C706805077AAA5B01CEBAB508F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3TxE1YqYsXZV25FMLMmP3mHVukZzyqGtJ2aYVKtYnG6T/0/323830343a366265303a3a2f33322d3332203d3e20323730343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6be0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:39:6d:24:ae:1e:46:a3:cb:ad:05:71:d2:03:3b:52:aa:92:
         b3:1f:0f:b7:98:d6:2c:1c:75:89:ca:b6:bd:2c:24:a4:a7:d5:
         62:91:aa:1d:1a:5d:d0:4d:fd:4f:76:9c:ff:3b:25:86:bd:41:
         4d:3b:0f:57:5a:e7:95:73:cc:95:8f:ba:51:da:55:8e:1a:73:
         ee:d8:df:b0:39:3a:ab:a2:5e:9b:81:ca:eb:bf:dc:70:7b:33:
         3f:6f:33:23:2f:28:9f:9c:d2:bc:27:25:0c:41:0a:dc:21:5a:
         0a:89:dc:21:df:d7:b4:84:87:86:dc:32:7b:19:70:87:07:32:
         26:93:df:90:76:7a:be:79:6a:ad:79:cf:71:97:62:e4:1c:a1:
         1d:c2:8f:83:15:e4:00:f5:66:26:ee:e4:ca:a7:57:2d:4f:03:
         e5:50:74:95:53:03:44:9c:06:ba:50:92:7e:f8:35:ab:c4:93:
         13:e9:4a:ae:2f:be:f4:0e:06:11:44:c2:13:03:ea:35:8d:61:
         86:73:bf:e2:5c:84:df:06:5d:5a:0b:fb:6e:aa:dc:42:d2:b7:
         ba:d0:6b:b5:fa:38:89:60:8f:53:53:3d:53:8b:a9:01:aa:60:
         11:d4:44:9b:e6:ac:24:fb:99:de:8f:7e:bd:35:f1:f4:56:07:
         8f:6c:fd:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 02:03:28 2025 by rpki-client