Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/323830343a363461633a3a2f33332d3333203d3e20323639343431.roa
File:                     323830343a363461633a3a2f33332d3333203d3e20323639343431.roa (raw, json)
Hash identifier:          uz/POodLErJ6ZoYa+V6XTcyfLNUxAwEh3rDlPPA0bZA=
Subject key identifier:   F0:82:62:A3:6D:7C:19:0E:27:AE:8C:BC:ED:9B:C1:50:7E:27:CC:4E
Certificate issuer:       /CN=838CBE7B3D3F1DD59BDCF325983E1EE89ACC9697
Certificate serial:       47D9C9F1DCD7ECFF79AB19EC1D72B127FD8441A6
Authority key identifier: 83:8C:BE:7B:3D:3F:1D:D5:9B:DC:F3:25:98:3E:1E:E8:9A:CC:96:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/838CBE7B3D3F1DD59BDCF325983E1EE89ACC9697.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/323830343a363461633a3a2f33332d3333203d3e20323639343431.roa
Signing time:             Thu 09 Jan 2025 04:45:43 +0000
ROA not before:           Thu 09 Jan 2025 04:40:43 +0000
ROA not after:            Thu 08 Jan 2026 04:45:43 +0000
asID:                     269441
IP address blocks:        2804:64ac::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:d9:c9:f1:dc:d7:ec:ff:79:ab:19:ec:1d:72:b1:27:fd:84:41:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=838CBE7B3D3F1DD59BDCF325983E1EE89ACC9697
        Validity
            Not Before: Jan  9 04:40:43 2025 GMT
            Not After : Jan  8 04:45:43 2026 GMT
        Subject: CN=F08262A36D7C190E27AE8CBCED9BC1507E27CC4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:79:b7:b5:bb:c5:0d:e8:d7:15:fd:79:97:07:
                    06:59:82:e3:08:2c:8c:1c:1c:d4:5c:ef:9f:eb:93:
                    bd:5d:d2:17:7b:43:5d:d2:61:8a:ee:3f:2c:fb:14:
                    20:f4:55:6e:13:07:99:3a:d7:2d:7e:a9:85:17:dc:
                    f4:8b:24:26:c3:98:17:27:6f:3a:8d:a5:52:46:b1:
                    f3:f0:74:62:8a:7f:96:36:04:30:0c:2d:1d:e2:f6:
                    58:7d:0b:11:79:e6:13:85:07:f3:13:e9:12:9f:d8:
                    5e:e3:f8:2f:e5:ca:d4:59:ec:74:f8:34:ab:4f:5a:
                    b9:5c:8b:b8:10:e5:ad:da:c5:b5:26:0f:16:01:da:
                    62:6e:d9:9b:b1:6c:c8:17:5d:1a:65:02:79:a4:83:
                    1e:ca:d6:d8:22:3d:a5:14:4c:0a:27:f4:3b:83:ab:
                    46:a8:87:25:bb:4d:bb:c6:77:a6:91:32:d4:ea:c3:
                    ed:bc:37:0d:c3:c0:0c:39:04:48:a2:d5:47:36:0f:
                    26:3c:d7:36:66:5c:fe:c8:0c:dd:da:80:16:e7:da:
                    14:68:37:52:c3:c2:b2:60:57:f1:a5:c4:05:81:3d:
                    13:6a:e6:99:47:d3:7e:54:77:dc:be:48:e0:0b:99:
                    ce:e3:cc:48:be:5b:04:4a:0a:fd:d2:32:03:b9:1b:
                    d5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:82:62:A3:6D:7C:19:0E:27:AE:8C:BC:ED:9B:C1:50:7E:27:CC:4E
            X509v3 Authority Key Identifier:
                keyid:83:8C:BE:7B:3D:3F:1D:D5:9B:DC:F3:25:98:3E:1E:E8:9A:CC:96:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/838CBE7B3D3F1DD59BDCF325983E1EE89ACC9697.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/838CBE7B3D3F1DD59BDCF325983E1EE89ACC9697.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/323830343a363461633a3a2f33332d3333203d3e20323639343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:64ac::/33

    Signature Algorithm: sha256WithRSAEncryption
         6e:f4:0a:14:c1:9c:27:58:ae:50:e0:df:72:38:47:aa:db:f6:
         33:63:b0:87:82:9f:15:01:90:39:43:79:c9:e9:a9:04:44:35:
         c0:31:98:f0:75:8e:fc:69:ed:06:79:18:42:2f:a1:c8:2f:d5:
         e3:61:4a:89:9b:a5:ac:82:92:82:91:86:15:ce:c0:72:ea:0f:
         8c:b4:fc:05:e8:8d:cd:c0:21:d8:94:03:3f:1f:d0:93:58:09:
         57:bd:55:c9:8d:f7:a3:53:db:16:f8:10:9d:38:3c:41:8b:d0:
         98:c5:10:ec:0d:30:1e:cc:21:4c:68:e8:bf:66:34:99:2d:e1:
         c3:0b:83:97:24:64:09:4a:c2:a0:b2:43:70:f3:2f:4a:4e:48:
         75:18:87:cc:8c:39:6c:18:7a:67:b1:ef:7d:83:d3:dd:35:b6:
         a8:6d:65:40:38:3e:54:c2:5b:6b:c0:17:03:01:87:1e:24:0d:
         53:ca:95:9d:4c:db:70:0e:29:64:f0:14:b2:75:ed:d5:aa:33:
         51:18:c8:84:db:52:12:47:eb:ac:62:15:89:7a:6a:2a:71:83:
         78:3c:2c:be:da:f8:57:c6:d0:2d:1c:22:fc:d6:9d:aa:ec:5a:
         34:e7:d3:3b:da:c2:2a:40:25:41:84:d7:50:18:68:94:bb:6b:
         14:89:08:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:24:16 2025 by rpki-client