Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/323830343a3837633a383a313a3a2f36342d3634203d3e203238323032.roa
File:                     323830343a3837633a383a313a3a2f36342d3634203d3e203238323032.roa (raw, json)
Hash identifier:          GceGlXcEfr5G0alLLL2heYVxOjQEdSfNqh6NxuqEDRs=
Subject key identifier:   F8:F4:53:51:46:26:3F:A6:2D:75:2E:DF:F8:AD:44:1C:D5:A6:22:A2
Certificate issuer:       /CN=6561C6A8E635ED091BE5A553F7EB0B12F5E44495
Certificate serial:       773942C072FF755AD4EEB27A3F81A6C5B40A455D
Authority key identifier: 65:61:C6:A8:E6:35:ED:09:1B:E5:A5:53:F7:EB:0B:12:F5:E4:44:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/323830343a3837633a383a313a3a2f36342d3634203d3e203238323032.roa
Signing time:             Fri 10 Jan 2025 14:19:53 +0000
ROA not before:           Fri 10 Jan 2025 14:14:53 +0000
ROA not after:            Fri 09 Jan 2026 14:19:53 +0000
asID:                     28202
IP address blocks:        2804:87c:8:1::/64 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:39:42:c0:72:ff:75:5a:d4:ee:b2:7a:3f:81:a6:c5:b4:0a:45:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6561C6A8E635ED091BE5A553F7EB0B12F5E44495
        Validity
            Not Before: Jan 10 14:14:53 2025 GMT
            Not After : Jan  9 14:19:53 2026 GMT
        Subject: CN=F8F4535146263FA62D752EDFF8AD441CD5A622A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:de:d9:29:1a:75:91:26:70:c1:3e:88:2f:f3:
                    3d:92:49:1f:9e:58:bf:7e:50:1f:76:9d:da:5c:34:
                    df:bd:af:41:c3:ac:61:8e:15:08:91:6f:5b:5b:aa:
                    38:14:98:22:84:24:3a:00:cc:8d:76:45:02:95:95:
                    0a:da:6e:28:0f:d8:16:12:3d:fd:a5:ee:08:b7:b3:
                    a8:e7:f4:ae:0d:39:35:a9:3e:50:17:e1:ef:36:b3:
                    f6:bb:ae:a6:ab:70:92:f6:3c:cf:8e:2b:55:0c:6b:
                    8e:b1:93:1e:27:3d:f4:4f:62:d7:91:a7:bf:6a:7a:
                    f7:d0:92:73:8f:b3:fe:34:fc:bd:29:14:c1:15:7c:
                    09:d8:92:40:c5:36:f9:64:29:d2:ad:fd:ec:cf:c0:
                    1f:63:f5:f0:d6:a9:72:97:c0:05:14:b0:15:4d:07:
                    f2:d4:9a:98:4f:be:c0:35:a6:39:75:76:ba:d6:14:
                    18:69:be:5a:9f:f0:91:af:6a:25:d8:dc:a9:95:8c:
                    a1:c7:b7:22:a4:a1:7f:f8:db:bb:ad:21:9b:b1:39:
                    d2:ce:b3:79:f4:5f:0a:b7:54:32:a4:de:25:09:b2:
                    e7:98:14:c3:be:67:d7:32:af:f3:81:30:a8:37:fd:
                    38:29:7a:e9:e7:fb:87:77:9a:9f:ea:b8:95:d3:be:
                    f0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F4:53:51:46:26:3F:A6:2D:75:2E:DF:F8:AD:44:1C:D5:A6:22:A2
            X509v3 Authority Key Identifier:
                keyid:65:61:C6:A8:E6:35:ED:09:1B:E5:A5:53:F7:EB:0B:12:F5:E4:44:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/323830343a3837633a383a313a3a2f36342d3634203d3e203238323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:87c:8:1::/64

    Signature Algorithm: sha256WithRSAEncryption
         2a:c6:9e:f8:49:32:96:41:90:e4:4f:58:09:2a:89:5d:75:97:
         0b:71:d0:9b:d7:77:73:09:82:23:85:b3:55:eb:53:6c:29:3f:
         3e:c6:85:d4:9f:ba:4e:f8:8e:4c:dc:b2:df:d5:33:63:32:9b:
         35:e2:f4:d3:d4:4d:19:7e:ac:f4:c8:54:ce:99:e9:75:19:84:
         83:f6:52:f1:bd:4b:57:00:e2:a9:bc:50:c3:23:4e:51:c5:c0:
         e1:4d:8a:3a:e4:24:e2:24:1e:1f:1e:c6:00:6d:ef:61:4c:c1:
         30:be:54:1b:a9:59:80:19:44:3f:ae:ff:bd:3d:d2:ec:b4:13:
         fb:66:71:18:72:e4:8c:5f:e5:aa:ba:ed:ab:2d:96:2f:c3:08:
         bc:5a:3f:63:ec:9a:79:aa:e8:9f:bd:70:a5:dd:21:cd:c7:39:
         89:2d:b3:fd:1c:7b:b7:49:f5:15:47:e5:cf:e2:ce:13:c3:f7:
         fe:f2:91:64:83:c1:3b:dc:65:20:2c:4d:45:d0:56:0d:de:2e:
         06:21:55:0d:c7:7c:11:54:12:ae:3b:34:f9:e4:e7:ca:2e:3b:
         a4:45:d1:e2:9b:34:2d:4e:99:55:f5:05:05:ba:40:b2:72:bd:
         8d:77:fb:54:1e:4d:56:5a:50:31:17:11:37:3e:93:2e:b2:d2:
         e8:d9:2b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:09:22 2025 by rpki-client