Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/323830343a333662633a3a2f33342d3334203d3e20323636333638.roa
File:                     323830343a333662633a3a2f33342d3334203d3e20323636333638.roa (raw, json)
Hash identifier:          bnp+NJ4vElNP++UNgXxOD3bZ7JSKY9gQHcronNMJOaE=
Subject key identifier:   2D:6C:14:A7:60:85:4D:EA:65:E6:DF:A2:09:00:F9:53:67:CB:1B:93
Certificate issuer:       /CN=2A3CA2DBD8297399B3831FD990D4BFDBEC0BED07
Certificate serial:       70CDAADA9228A91158667100F3E6C89EDDDD7969
Authority key identifier: 2A:3C:A2:DB:D8:29:73:99:B3:83:1F:D9:90:D4:BF:DB:EC:0B:ED:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A3CA2DBD8297399B3831FD990D4BFDBEC0BED07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/323830343a333662633a3a2f33342d3334203d3e20323636333638.roa
Signing time:             Tue 17 Dec 2024 19:54:14 +0000
ROA not before:           Tue 17 Dec 2024 19:49:14 +0000
ROA not after:            Tue 16 Dec 2025 19:54:14 +0000
asID:                     266368
IP address blocks:        2804:36bc::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:cd:aa:da:92:28:a9:11:58:66:71:00:f3:e6:c8:9e:dd:dd:79:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A3CA2DBD8297399B3831FD990D4BFDBEC0BED07
        Validity
            Not Before: Dec 17 19:49:14 2024 GMT
            Not After : Dec 16 19:54:14 2025 GMT
        Subject: CN=2D6C14A760854DEA65E6DFA20900F95367CB1B93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:85:e0:99:e9:b9:0a:33:c3:d0:11:4a:15:36:
                    44:40:db:86:0e:a7:a1:7f:ca:e0:2a:cb:d7:91:67:
                    82:28:b8:dc:4e:1e:af:41:4a:d4:53:f5:2e:9c:57:
                    8b:3c:70:81:6f:66:7d:15:df:48:aa:b0:57:dc:93:
                    25:7a:2b:2a:e7:ac:41:ca:67:0b:dd:eb:19:24:6a:
                    ad:b2:2c:da:8a:28:45:5c:26:69:bf:36:25:d9:3d:
                    95:64:e9:b1:fd:fd:54:14:86:8f:6a:59:9d:20:08:
                    14:b5:22:1e:78:cf:1e:52:ee:ff:f8:63:49:28:92:
                    2e:25:a1:55:81:78:e8:81:b8:e5:a0:35:6b:97:94:
                    80:4d:4d:94:d9:73:bc:31:98:a4:13:e2:a4:d3:ce:
                    ef:71:1c:6c:0e:0d:ab:6e:a6:21:f4:b8:22:d2:c9:
                    8f:72:d1:8a:a7:f3:f8:8a:4a:c1:2b:8a:f9:7b:64:
                    ba:36:c4:0d:72:4d:94:df:7b:03:b0:8f:10:39:5a:
                    e2:d9:d9:aa:fc:5a:c8:d7:c4:16:84:b8:5f:72:51:
                    1e:77:27:e9:a4:76:01:f4:b2:35:a8:00:cb:e3:4b:
                    33:82:62:34:e9:85:70:81:45:94:82:fc:9c:78:65:
                    db:e9:7b:09:0c:50:41:4e:0d:db:89:91:0c:3e:dd:
                    e4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:6C:14:A7:60:85:4D:EA:65:E6:DF:A2:09:00:F9:53:67:CB:1B:93
            X509v3 Authority Key Identifier:
                keyid:2A:3C:A2:DB:D8:29:73:99:B3:83:1F:D9:90:D4:BF:DB:EC:0B:ED:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/2A3CA2DBD8297399B3831FD990D4BFDBEC0BED07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A3CA2DBD8297399B3831FD990D4BFDBEC0BED07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/323830343a333662633a3a2f33342d3334203d3e20323636333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:36bc::/34

    Signature Algorithm: sha256WithRSAEncryption
         06:80:37:e6:b4:78:ed:22:5f:b8:2a:1a:3d:77:cf:07:43:17:
         5a:38:fa:37:0c:50:de:eb:e8:e6:da:88:71:88:80:33:d7:31:
         0a:bc:4c:2c:3e:f1:e9:04:4f:fb:3a:41:7b:1a:9f:ad:c9:cc:
         8e:8c:13:25:4e:c3:87:cb:29:ec:a6:ec:a3:96:54:d7:4a:5d:
         a5:47:f1:ea:58:db:14:75:6f:fe:27:f2:8a:32:8e:9b:31:2e:
         84:43:f6:4a:1f:70:70:79:cc:df:4e:b2:92:96:2f:ee:2d:22:
         69:45:14:47:6d:8b:f4:9e:38:7b:b4:e9:d1:81:96:2a:45:a5:
         d0:94:c4:8b:ef:e3:4d:9f:16:a9:f1:15:64:3a:e6:be:8b:e7:
         f1:ea:83:f9:0b:2f:a6:71:61:d5:49:9c:20:e5:c7:5d:1b:c9:
         7f:1a:fa:57:cb:fa:1a:b7:d1:d4:63:e5:e0:74:b3:f4:70:c9:
         e5:dc:eb:f9:c8:ce:f9:11:32:e9:14:02:70:48:5f:39:bf:a1:
         6f:49:87:4a:e3:48:6c:a3:e1:60:74:78:ff:30:fa:48:8a:5a:
         d5:a5:36:11:3a:a9:5d:0b:9f:c6:33:ad:b0:13:90:80:19:9d:
         9f:39:e8:be:09:33:6c:0a:4b:2f:d2:57:0b:68:9e:57:18:8d:
         4d:53:72:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:34:14 2025 by rpki-client