Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/2/323830343a353836343a3a2f33322d3333203d3e20323638313236.roa
File:                     323830343a353836343a3a2f33322d3333203d3e20323638313236.roa (raw, json)
Hash identifier:          sJDjg3v90oDmxBogDwc4XYt8NQH4xKEXHTR91axSuGY=
Subject key identifier:   A2:59:4E:4D:2D:F9:87:C4:2F:BF:0D:5F:5E:54:27:0E:CB:65:04:11
Certificate issuer:       /CN=6897E867CE6150039D0FAD4F6122F7AE3156D5A2
Certificate serial:       7773E7FC57818CEAA568FA824FB2C0386A767F63
Authority key identifier: 68:97:E8:67:CE:61:50:03:9D:0F:AD:4F:61:22:F7:AE:31:56:D5:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6897E867CE6150039D0FAD4F6122F7AE3156D5A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/2/323830343a353836343a3a2f33322d3333203d3e20323638313236.roa
Signing time:             Thu 06 Mar 2025 15:17:01 +0000
ROA not before:           Thu 06 Mar 2025 15:12:01 +0000
ROA not after:            Thu 05 Mar 2026 15:17:01 +0000
asID:                     268126
IP address blocks:        2804:5864::/32 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:73:e7:fc:57:81:8c:ea:a5:68:fa:82:4f:b2:c0:38:6a:76:7f:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6897E867CE6150039D0FAD4F6122F7AE3156D5A2
        Validity
            Not Before: Mar  6 15:12:01 2025 GMT
            Not After : Mar  5 15:17:01 2026 GMT
        Subject: CN=A2594E4D2DF987C42FBF0D5F5E54270ECB650411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3c:04:81:57:64:a1:0e:0c:90:b8:05:f0:04:
                    ec:09:29:d8:52:ac:19:27:1d:05:91:e7:6c:4a:b6:
                    51:1f:e6:34:d4:6e:1f:92:de:c4:67:39:36:0c:b7:
                    d5:20:03:c6:df:27:28:61:cc:79:e5:d9:c4:3a:90:
                    b8:2b:08:70:80:7a:8e:7f:eb:d9:26:9d:83:8e:40:
                    e0:01:c4:27:bf:cb:f3:4e:a7:ce:17:8c:00:4c:8b:
                    45:79:af:1d:a5:b5:e7:03:f6:99:71:97:75:9c:0a:
                    49:3f:c9:5f:70:05:a8:33:3d:34:6c:2e:f6:ef:2d:
                    b3:c3:34:08:9c:23:e1:91:1d:7f:01:f1:3d:0b:07:
                    34:d8:d2:ba:e8:5d:48:9c:44:06:33:75:ad:27:2c:
                    79:8f:70:04:8f:55:c0:f0:a7:2c:30:90:57:dd:72:
                    3f:6a:66:b7:b0:f2:c6:d7:aa:00:af:92:d8:92:f1:
                    0a:22:3d:83:16:3c:a9:af:22:ea:a9:01:35:73:5b:
                    7b:fe:88:e7:8b:37:23:16:07:10:b3:4e:5b:d6:90:
                    90:0b:d0:54:6b:40:d6:c4:be:c2:1b:cb:16:dd:f6:
                    eb:e6:87:68:72:5d:9d:f1:8d:0d:6d:79:c7:1f:e2:
                    cf:92:9c:05:86:57:92:af:48:42:57:15:37:a6:98:
                    d4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:59:4E:4D:2D:F9:87:C4:2F:BF:0D:5F:5E:54:27:0E:CB:65:04:11
            X509v3 Authority Key Identifier:
                keyid:68:97:E8:67:CE:61:50:03:9D:0F:AD:4F:61:22:F7:AE:31:56:D5:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/2/6897E867CE6150039D0FAD4F6122F7AE3156D5A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6897E867CE6150039D0FAD4F6122F7AE3156D5A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/2/323830343a353836343a3a2f33322d3333203d3e20323638313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5864::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:a1:ff:8d:b6:2d:a4:ae:ac:b7:81:73:7a:a7:bd:75:67:fc:
         6a:0f:3f:bd:3c:c7:2e:32:cc:11:cb:b9:ee:9f:17:e5:ee:aa:
         29:41:ac:96:09:70:7b:7b:92:bb:b8:e5:78:5d:70:59:cc:e2:
         e8:35:ec:a3:5e:02:4c:11:51:8a:79:ac:51:3d:9d:ab:e7:00:
         ae:56:28:70:13:23:55:32:41:22:ba:c8:ee:d1:b4:5b:62:5c:
         9a:bb:06:dd:48:54:e2:2e:65:13:7b:b6:06:e2:7e:e1:6f:58:
         26:23:31:81:a6:ef:91:73:63:3a:0b:32:e2:bb:56:85:07:ee:
         b6:c8:b9:60:47:e4:83:8a:b7:38:09:e5:60:79:b8:bf:5d:3a:
         c9:f4:41:bc:e8:e9:29:92:00:c0:3b:df:0e:24:f3:6f:ec:d7:
         f2:8e:ce:ef:f8:34:a0:b0:b7:01:2b:a8:19:49:eb:a9:8f:85:
         73:ab:72:91:9a:b8:ce:af:2c:c6:74:80:be:2f:62:9c:16:14:
         d9:c3:a1:53:a2:20:8a:ff:bb:3e:83:11:dc:28:3d:f7:98:69:
         ad:2c:78:40:aa:e2:02:00:4d:34:57:09:b3:2a:4a:2f:da:37:
         e3:a6:7b:95:79:5b:42:00:67:88:64:60:db:a2:ac:7d:4c:1e:
         6f:3a:39:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:56:59 2025 by rpki-client