Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3s5f3Zpur4FwYdq7yrX2v1JZUMDZEZfUA9co9QVrkLvp/0/323830343a346634343a3230303a3a2f34312d3431203d3e20323638333136.roa
File:                     323830343a346634343a3230303a3a2f34312d3431203d3e20323638333136.roa (raw, json)
Hash identifier:          dXyoLxGDP5HVwNzApVoKss7A6C2pzai+Kk6TlykMdyA=
Subject key identifier:   03:63:D7:E9:EA:D9:F3:BA:42:2C:E0:04:BB:70:AD:7E:56:66:AA:C0
Certificate issuer:       /CN=6394333A258FBDBBD544DE363E2767998C64BB78
Certificate serial:       29B7CAC0FEEC160F0471C346EC320E2445E0DF57
Authority key identifier: 63:94:33:3A:25:8F:BD:BB:D5:44:DE:36:3E:27:67:99:8C:64:BB:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6394333A258FBDBBD544DE363E2767998C64BB78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3s5f3Zpur4FwYdq7yrX2v1JZUMDZEZfUA9co9QVrkLvp/0/323830343a346634343a3230303a3a2f34312d3431203d3e20323638333136.roa
Signing time:             Fri 31 May 2024 17:11:22 +0000
ROA not before:           Fri 31 May 2024 17:06:22 +0000
ROA not after:            Fri 30 May 2025 17:11:22 +0000
asID:                     268316
IP address blocks:        2804:4f44:200::/41 maxlen: 41
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:b7:ca:c0:fe:ec:16:0f:04:71:c3:46:ec:32:0e:24:45:e0:df:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6394333A258FBDBBD544DE363E2767998C64BB78
        Validity
            Not Before: May 31 17:06:22 2024 GMT
            Not After : May 30 17:11:22 2025 GMT
        Subject: CN=0363D7E9EAD9F3BA422CE004BB70AD7E5666AAC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:80:21:e4:37:bd:c2:4f:56:e5:04:99:45:51:
                    ae:29:37:47:5e:4e:c6:f7:a1:3b:fe:67:d4:45:cc:
                    db:2d:29:89:be:ad:ed:76:96:44:94:2a:ad:3e:3f:
                    09:08:1a:7b:e7:9c:9b:ac:9e:92:a4:b0:98:c2:78:
                    b0:1c:3c:34:2c:ef:c5:44:ea:4f:9e:97:15:7e:67:
                    ee:69:b8:68:ec:6f:b7:80:e4:f9:7b:66:0a:fe:14:
                    8f:14:41:a8:cb:d2:15:29:ba:2e:2b:6d:84:92:60:
                    d0:78:23:6f:ba:a2:99:c3:99:78:50:8b:50:64:04:
                    54:11:71:94:2d:f2:10:36:fd:30:c8:c6:67:e5:1a:
                    cb:11:e0:f9:6b:7a:e3:e1:7e:f5:88:81:18:61:9e:
                    8f:a2:4f:06:99:66:db:b0:19:40:ad:19:93:bb:95:
                    4d:7a:75:60:6d:dc:8a:4d:98:2f:19:50:87:08:f5:
                    46:fb:40:2b:f9:b1:fa:6e:1f:9b:ca:02:fe:5b:3b:
                    7c:15:3d:7d:19:a1:93:a5:42:da:2c:cf:18:03:ec:
                    c8:d7:01:fd:36:b9:d7:23:d7:fe:57:85:26:5d:74:
                    76:95:fd:d1:61:0d:95:5b:24:ba:cf:e6:3a:c5:97:
                    e1:23:f6:5d:7d:6d:24:4c:85:57:82:be:d6:57:5c:
                    d9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:63:D7:E9:EA:D9:F3:BA:42:2C:E0:04:BB:70:AD:7E:56:66:AA:C0
            X509v3 Authority Key Identifier:
                keyid:63:94:33:3A:25:8F:BD:BB:D5:44:DE:36:3E:27:67:99:8C:64:BB:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3s5f3Zpur4FwYdq7yrX2v1JZUMDZEZfUA9co9QVrkLvp/0/6394333A258FBDBBD544DE363E2767998C64BB78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6394333A258FBDBBD544DE363E2767998C64BB78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3s5f3Zpur4FwYdq7yrX2v1JZUMDZEZfUA9co9QVrkLvp/0/323830343a346634343a3230303a3a2f34312d3431203d3e20323638333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f44:200::/41

    Signature Algorithm: sha256WithRSAEncryption
         a6:f8:98:6f:b3:3a:d3:00:a0:ef:0a:c8:45:a9:2b:71:99:16:
         ba:76:10:3c:fa:ef:00:2d:d2:7c:c4:49:a2:37:b8:a7:86:c4:
         72:c6:ad:ee:08:df:b2:d8:d5:94:a7:24:64:a7:6d:d2:ad:08:
         ae:6b:19:af:d4:22:39:0e:24:a6:28:3a:d5:2b:47:23:33:b3:
         8e:63:37:bf:2d:50:cc:89:10:3b:e5:b7:12:f7:0d:f8:33:ee:
         56:80:2f:70:d3:b3:81:35:95:e7:9d:02:62:fa:db:19:b3:14:
         f1:c2:ed:89:66:5b:73:a0:78:7c:05:1d:72:b9:58:cb:60:f7:
         0c:b7:93:2d:f5:3a:7e:8d:f8:80:39:ab:46:5b:84:15:b3:d2:
         a6:5a:ef:29:0a:8d:05:bd:19:6f:20:7e:84:7a:46:a9:8a:ca:
         26:b4:ec:bf:6d:25:40:d6:5d:d2:4f:f9:01:57:a4:da:9c:c3:
         05:68:ae:4c:b8:eb:61:a9:9b:19:31:2c:53:82:e5:87:e0:5b:
         12:53:8e:47:e0:f0:80:ed:e3:21:c6:cd:bc:a9:b3:a5:2e:f6:
         67:9e:bd:7d:cf:d3:3b:8b:08:54:4a:a8:f5:be:30:f7:30:85:
         1f:17:1d:b7:25:a6:7f:a7:2c:9a:98:62:ac:ca:bc:ae:a3:43:
         0b:40:60:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 20:49:13 2025 by rpki-client