Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/323830343a363461633a383030303a3a2f33332d3333203d3e20323639343431.roa
File:                     323830343a363461633a383030303a3a2f33332d3333203d3e20323639343431.roa (raw, json)
Hash identifier:          y2L4X5CoIIBjkDha6fTrogx8nX14BzYxNVG5V20fe7s=
Subject key identifier:   06:96:A9:49:44:DA:D1:3F:EE:3B:12:BA:69:F0:54:CD:89:C9:35:33
Certificate issuer:       /CN=838CBE7B3D3F1DD59BDCF325983E1EE89ACC9697
Certificate serial:       63919DA0CAD43ECDB7CDBF0A5D7DC0B1506E56E3
Authority key identifier: 83:8C:BE:7B:3D:3F:1D:D5:9B:DC:F3:25:98:3E:1E:E8:9A:CC:96:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/838CBE7B3D3F1DD59BDCF325983E1EE89ACC9697.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/323830343a363461633a383030303a3a2f33332d3333203d3e20323639343431.roa
Signing time:             Thu 09 Jan 2025 04:45:41 +0000
ROA not before:           Thu 09 Jan 2025 04:40:41 +0000
ROA not after:            Thu 08 Jan 2026 04:45:41 +0000
asID:                     269441
IP address blocks:        2804:64ac:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:91:9d:a0:ca:d4:3e:cd:b7:cd:bf:0a:5d:7d:c0:b1:50:6e:56:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=838CBE7B3D3F1DD59BDCF325983E1EE89ACC9697
        Validity
            Not Before: Jan  9 04:40:41 2025 GMT
            Not After : Jan  8 04:45:41 2026 GMT
        Subject: CN=0696A94944DAD13FEE3B12BA69F054CD89C93533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a7:aa:70:85:6a:ef:58:80:c1:83:bd:f1:3a:
                    62:55:e6:b4:35:0f:62:1f:cf:d5:e2:7d:65:8d:02:
                    f3:62:cd:3b:27:bf:8c:17:56:26:45:b7:3e:99:3e:
                    07:34:fb:03:0c:9b:59:a0:5f:e2:8d:bc:56:62:c6:
                    e6:73:48:6e:38:6c:a3:8c:95:ce:da:2c:41:3d:a9:
                    52:eb:9c:47:95:6d:c3:24:50:44:dc:a4:18:10:e3:
                    df:a5:e5:a8:95:26:77:bf:1b:d7:e6:f0:58:e9:e4:
                    a7:80:8f:ed:ca:e8:e9:05:bf:4b:fe:6b:e5:0c:45:
                    ec:6f:ad:e7:04:5e:71:ee:8d:cd:54:c2:d8:94:c2:
                    2c:40:40:66:2f:0f:6f:6f:fc:53:34:b5:ef:56:74:
                    77:ce:af:76:1d:d1:ff:e5:79:10:5d:ec:1e:76:15:
                    c4:9e:52:8b:dd:ee:f3:1f:b2:bf:16:e4:f4:87:52:
                    8a:52:94:fb:3b:05:f1:14:99:53:95:69:51:67:63:
                    d8:2c:e2:bc:5d:83:10:7a:27:62:f9:e5:8c:b2:e0:
                    98:f4:94:67:91:0a:dd:d3:3d:5b:09:15:08:fa:63:
                    9f:95:58:90:da:ac:ff:72:9d:22:cd:63:bf:19:e3:
                    a5:a8:fb:97:6e:64:34:c3:80:ba:90:2a:ae:e8:c8:
                    a8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:96:A9:49:44:DA:D1:3F:EE:3B:12:BA:69:F0:54:CD:89:C9:35:33
            X509v3 Authority Key Identifier:
                keyid:83:8C:BE:7B:3D:3F:1D:D5:9B:DC:F3:25:98:3E:1E:E8:9A:CC:96:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/838CBE7B3D3F1DD59BDCF325983E1EE89ACC9697.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/838CBE7B3D3F1DD59BDCF325983E1EE89ACC9697.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/323830343a363461633a383030303a3a2f33332d3333203d3e20323639343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:64ac:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         68:23:84:31:fc:34:db:3b:d8:d7:34:20:2e:7c:60:5d:ee:73:
         5b:94:be:fa:9b:da:ca:b9:6e:c3:ea:c1:f2:57:0b:6d:da:44:
         92:58:64:5c:b7:5f:ac:5b:dc:2c:bf:bb:83:0b:83:ea:f8:f6:
         30:5a:3a:f4:4d:ed:32:b9:9f:da:94:5b:31:6b:7a:a8:72:8b:
         08:7a:27:4e:06:dd:8f:57:fa:75:5b:1e:72:87:fd:f9:1f:7d:
         57:ed:62:c9:01:43:c1:4c:f2:e2:7e:23:20:86:47:3f:1a:12:
         b5:3a:76:1a:b8:4f:60:21:df:b2:c8:60:e1:1b:bc:27:73:6b:
         b4:0b:6f:81:34:58:94:c8:12:61:af:73:b3:72:2c:ad:6f:23:
         9d:d6:72:b6:51:d4:73:2a:fc:40:40:3d:c4:57:05:ae:07:86:
         19:ad:c5:f3:07:dc:06:8c:3a:0b:72:0d:ce:06:1d:99:e0:94:
         76:15:f1:a4:3e:38:bb:65:66:a2:d2:ca:bd:15:d1:dc:97:26:
         07:46:43:d3:2a:00:d5:ab:02:b6:17:0b:c5:fe:e7:68:5c:c4:
         77:2d:99:b5:1d:57:d7:f4:e9:4d:4a:3f:c1:b9:ab:50:c8:12:
         a9:d5:0a:f6:11:e8:36:1f:2c:30:2c:62:0d:5e:ef:93:55:f9:
         e4:06:db:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:40:05 2025 by rpki-client