Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/323830343a363830633a383030303a3a2f33332d3333203d3e20323639363637.roa
File:                     323830343a363830633a383030303a3a2f33332d3333203d3e20323639363637.roa (raw, json)
Hash identifier:          fKD25ttVzDsOHHGrmcFTV6x60fL1EpZw2pSmhrfa1E0=
Subject key identifier:   B5:37:21:5F:35:9C:8E:D2:BD:62:F4:91:1D:89:7A:3A:95:F6:8D:7E
Certificate issuer:       /CN=FB5EF042BD78A22553B5ED9830EF05043520648D
Certificate serial:       57FC2957AF13996BB4FA8BAF8BF40BFDC0531733
Authority key identifier: FB:5E:F0:42:BD:78:A2:25:53:B5:ED:98:30:EF:05:04:35:20:64:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB5EF042BD78A22553B5ED9830EF05043520648D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/323830343a363830633a383030303a3a2f33332d3333203d3e20323639363637.roa
Signing time:             Thu 13 Mar 2025 19:11:56 +0000
ROA not before:           Thu 13 Mar 2025 19:06:56 +0000
ROA not after:            Thu 12 Mar 2026 19:11:56 +0000
asID:                     269667
IP address blocks:        2804:680c:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:fc:29:57:af:13:99:6b:b4:fa:8b:af:8b:f4:0b:fd:c0:53:17:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB5EF042BD78A22553B5ED9830EF05043520648D
        Validity
            Not Before: Mar 13 19:06:56 2025 GMT
            Not After : Mar 12 19:11:56 2026 GMT
        Subject: CN=B537215F359C8ED2BD62F4911D897A3A95F68D7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:17:ca:75:f3:0c:8b:2b:b3:40:61:c6:62:6e:
                    47:81:db:bd:22:e8:8a:77:a0:08:2c:44:28:b8:b1:
                    d6:ae:fa:cf:7e:b3:7c:02:45:89:45:a8:f5:6f:cf:
                    54:d9:9d:c4:e9:32:26:24:08:95:a9:8c:e7:a8:83:
                    cc:48:56:35:8f:a5:d8:9c:ee:c3:62:41:e4:04:2a:
                    c3:40:e8:5d:e8:01:36:c1:b5:be:6c:d8:f6:e6:1f:
                    0b:12:c5:84:09:7f:0e:21:a4:5e:c8:86:9d:9e:7d:
                    9d:ff:e3:7f:68:22:fb:cb:52:5e:92:2e:03:89:0d:
                    b0:b3:4a:bc:c8:c1:c7:39:9e:1f:20:3c:39:f2:7c:
                    3a:4d:81:65:0b:31:4c:e5:d8:c1:0b:fa:cb:28:c5:
                    c9:f5:f1:09:b4:51:aa:4c:cb:5d:84:f4:22:4c:47:
                    65:09:15:ec:02:8b:45:d0:0d:e3:a6:9e:47:ed:99:
                    af:67:f6:27:67:80:00:9f:5f:14:11:e5:f7:3f:da:
                    b1:fd:0d:ad:af:cd:cc:bc:77:c1:d8:bc:ab:f4:ec:
                    b1:eb:b6:40:d7:c9:73:6c:f8:4d:80:d6:0e:6a:ec:
                    f8:9d:e7:87:da:9f:22:27:35:21:6c:6f:d9:2d:b7:
                    73:af:95:53:28:8a:a0:54:90:76:9a:5f:00:3e:6a:
                    75:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:37:21:5F:35:9C:8E:D2:BD:62:F4:91:1D:89:7A:3A:95:F6:8D:7E
            X509v3 Authority Key Identifier:
                keyid:FB:5E:F0:42:BD:78:A2:25:53:B5:ED:98:30:EF:05:04:35:20:64:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/FB5EF042BD78A22553B5ED9830EF05043520648D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB5EF042BD78A22553B5ED9830EF05043520648D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/323830343a363830633a383030303a3a2f33332d3333203d3e20323639363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:680c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         82:fe:fe:a8:be:d4:9e:59:2d:0b:83:9a:f2:22:59:83:d8:e4:
         2c:97:01:c8:ad:84:a7:4d:90:59:fe:87:a7:02:c4:53:5b:c8:
         b1:47:70:c1:b6:de:06:34:c4:bf:e5:2e:0c:9e:1b:60:7f:b8:
         a9:a6:a7:dd:10:a7:37:9d:3b:1e:10:f7:c0:00:82:bb:b2:ee:
         ec:e5:0a:54:43:70:a2:48:7a:54:f1:3b:58:d7:28:d2:7f:79:
         79:3e:91:32:74:96:39:38:64:9e:c0:64:90:61:25:35:7c:b7:
         80:29:b5:83:3f:84:7f:94:86:17:51:5f:80:6b:f8:87:49:7f:
         7a:f6:a5:22:72:39:81:15:2b:df:1c:53:a7:4f:db:cb:bd:5c:
         7c:5d:8b:08:d9:68:e2:0b:c1:8c:4c:72:70:17:c2:6f:98:80:
         45:c9:06:ae:83:d2:c6:3e:e4:b8:b0:93:fb:cf:15:27:be:72:
         f5:64:c6:af:36:b8:27:22:e9:ac:ce:d8:10:ae:6d:64:d3:95:
         cd:65:b2:03:6e:b2:f5:61:8b:85:26:5a:60:09:10:e4:73:4a:
         dd:25:a6:e3:8c:8c:75:1a:ed:8a:f2:f6:b2:02:a9:69:9e:4e:
         ad:94:6f:b6:74:1d:88:73:15:8a:e3:0d:79:f6:0e:4d:53:d9:
         f9:39:41:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:29:34 2025 by rpki-client