Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3z3EuSE6VRzkgE6zsUFyinhxui3bXSqEKwQdbkRzwBf4/0/323830343a373035633a633030303a3a2f33342d3334203d3e20323730373232.roa
File:                     323830343a373035633a633030303a3a2f33342d3334203d3e20323730373232.roa (raw, json)
Hash identifier:          xQVg4Yiv+8CkwRwOYisg+KQT3G+v2JBBP940sjqfRz0=
Subject key identifier:   DD:5A:E6:8F:C8:BA:10:8C:98:D5:5D:CE:BC:23:3F:71:1C:A6:8A:88
Certificate issuer:       /CN=F67448549A64A3CB85C49B816FDEB8E90B7226DF
Certificate serial:       1393D0882BF9891CCC926D4309FBF549F6929505
Authority key identifier: F6:74:48:54:9A:64:A3:CB:85:C4:9B:81:6F:DE:B8:E9:0B:72:26:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F67448549A64A3CB85C49B816FDEB8E90B7226DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3z3EuSE6VRzkgE6zsUFyinhxui3bXSqEKwQdbkRzwBf4/0/323830343a373035633a633030303a3a2f33342d3334203d3e20323730373232.roa
Signing time:             Fri 19 Jan 2024 19:05:20 +0000
ROA not before:           Fri 19 Jan 2024 19:00:20 +0000
ROA not after:            Fri 17 Jan 2025 19:05:20 +0000
asID:                     270722
IP address blocks:        2804:705c:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:93:d0:88:2b:f9:89:1c:cc:92:6d:43:09:fb:f5:49:f6:92:95:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F67448549A64A3CB85C49B816FDEB8E90B7226DF
        Validity
            Not Before: Jan 19 19:00:20 2024 GMT
            Not After : Jan 17 19:05:20 2025 GMT
        Subject: CN=DD5AE68FC8BA108C98D55DCEBC233F711CA68A88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6b:81:74:33:5e:91:fc:ca:70:a3:a0:89:c5:
                    d7:f6:fc:87:9a:3e:8d:1e:5c:a3:65:6a:c9:46:fe:
                    bb:73:ba:40:a2:ed:e6:70:36:77:a2:21:c1:8c:09:
                    ae:fc:75:a4:4f:f9:64:38:15:e7:38:d9:bc:28:e9:
                    be:f9:fb:16:0e:c5:0e:06:d5:da:f8:a2:95:a2:56:
                    6c:34:8c:51:38:89:43:43:d9:ac:46:49:5a:af:cd:
                    7d:77:7f:77:d2:c2:d2:cd:7b:8d:b2:88:6a:b8:38:
                    4d:00:cf:6f:4a:71:f7:f7:53:13:0c:0a:ff:4a:b2:
                    aa:4b:d4:ac:31:18:a2:43:41:ee:51:87:c1:36:6e:
                    88:b3:10:f6:7f:09:db:89:c3:33:fc:0e:38:ca:cc:
                    22:b8:83:f2:05:46:ff:a7:72:25:97:96:9f:6f:57:
                    17:51:ca:df:45:44:e4:ac:1b:08:0a:12:c5:d0:53:
                    cf:2b:d3:84:f2:5d:8a:ae:6a:3c:5d:f9:c1:c2:5b:
                    d2:51:27:8b:eb:57:24:4d:05:44:07:a0:26:5e:a2:
                    86:56:c4:8c:1d:a5:20:66:6e:b1:9f:4f:c3:66:fb:
                    9d:49:82:48:05:a0:9e:43:ff:15:6a:1e:32:1c:af:
                    dd:94:3e:49:68:95:2c:d8:ea:4e:ce:c4:de:8b:5e:
                    5b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:5A:E6:8F:C8:BA:10:8C:98:D5:5D:CE:BC:23:3F:71:1C:A6:8A:88
            X509v3 Authority Key Identifier:
                keyid:F6:74:48:54:9A:64:A3:CB:85:C4:9B:81:6F:DE:B8:E9:0B:72:26:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3z3EuSE6VRzkgE6zsUFyinhxui3bXSqEKwQdbkRzwBf4/0/F67448549A64A3CB85C49B816FDEB8E90B7226DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F67448549A64A3CB85C49B816FDEB8E90B7226DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3z3EuSE6VRzkgE6zsUFyinhxui3bXSqEKwQdbkRzwBf4/0/323830343a373035633a633030303a3a2f33342d3334203d3e20323730373232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:705c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7f:b3:eb:8c:8c:53:c7:30:a9:fb:04:ce:81:94:79:95:81:6a:
         04:22:2d:0d:2d:22:8a:96:e7:13:e0:f8:4c:5f:6b:b1:71:50:
         ca:11:66:3d:42:12:65:cc:6f:72:1a:ce:f2:80:9d:e5:b5:dd:
         d9:fe:4d:6d:e6:f6:0c:92:22:be:11:06:35:d4:f3:4d:69:65:
         c6:0a:48:7d:ae:2a:2e:3e:28:cf:97:3d:f2:6a:4e:4a:a3:e2:
         c7:38:7b:04:89:c6:c4:3d:e4:d7:12:57:85:82:8a:e3:e6:92:
         17:74:42:ee:98:a7:27:89:9e:39:f0:59:7c:96:32:f2:61:cc:
         59:27:96:1d:52:a0:27:01:a4:1d:7e:bb:2a:c7:d2:b8:39:b0:
         e7:e1:44:0f:ef:64:e8:c3:3c:aa:45:d5:91:51:d8:62:20:68:
         64:66:23:e7:61:70:3f:63:7e:bd:e2:61:07:fa:3c:b8:f3:b5:
         61:7a:c7:9d:ae:56:df:83:0b:bc:18:15:61:06:4c:86:d1:82:
         81:42:b0:26:00:72:34:9b:b9:b7:7a:39:e1:29:2e:92:91:25:
         9d:47:52:9c:8a:06:ec:e3:fb:ea:69:75:55:90:3d:77:76:8b:
         0b:3d:78:d7:65:5e:91:ef:71:de:37:3c:1c:fd:9f:8a:77:24:
         6b:e2:b5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:35:44 2025 by rpki-client