Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/323830343a333662633a666630303a3a2f34302d3430203d3e20323636333638.roa
File:                     323830343a333662633a666630303a3a2f34302d3430203d3e20323636333638.roa (raw, json)
Hash identifier:          NFtfmyQshNZKi5cBPsVQbVEO5M7F5b2bJ9GzYhzgCAQ=
Subject key identifier:   72:74:8F:C4:0B:C5:F5:9A:6B:8B:CC:C4:F8:26:91:10:BB:31:8D:3F
Certificate issuer:       /CN=2A3CA2DBD8297399B3831FD990D4BFDBEC0BED07
Certificate serial:       5D323B53ADA829DC13ACE0FEFB4C841AB4142B85
Authority key identifier: 2A:3C:A2:DB:D8:29:73:99:B3:83:1F:D9:90:D4:BF:DB:EC:0B:ED:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A3CA2DBD8297399B3831FD990D4BFDBEC0BED07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/323830343a333662633a666630303a3a2f34302d3430203d3e20323636333638.roa
Signing time:             Tue 17 Dec 2024 19:54:13 +0000
ROA not before:           Tue 17 Dec 2024 19:49:13 +0000
ROA not after:            Tue 16 Dec 2025 19:54:13 +0000
asID:                     266368
IP address blocks:        2804:36bc:ff00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:32:3b:53:ad:a8:29:dc:13:ac:e0:fe:fb:4c:84:1a:b4:14:2b:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A3CA2DBD8297399B3831FD990D4BFDBEC0BED07
        Validity
            Not Before: Dec 17 19:49:13 2024 GMT
            Not After : Dec 16 19:54:13 2025 GMT
        Subject: CN=72748FC40BC5F59A6B8BCCC4F8269110BB318D3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f7:53:81:2b:2c:72:78:01:2c:21:22:9f:21:
                    9d:63:7e:4a:ca:ba:5a:07:a3:9c:28:6a:ae:2b:91:
                    ae:d6:d0:df:0d:4a:fb:25:9a:ef:0a:c9:10:c6:ca:
                    4c:12:78:cc:87:90:c2:22:2f:a7:53:a5:fb:76:27:
                    ba:52:f1:fd:45:4a:e2:f4:a2:2a:88:83:16:5f:6c:
                    a6:02:5d:06:84:1d:c0:6f:17:1b:cc:39:a5:84:f8:
                    8d:c6:d4:9d:24:40:de:a0:87:1c:5e:c6:2a:b0:10:
                    ef:a5:97:af:f9:16:12:27:84:eb:a9:f3:6e:e6:ea:
                    b2:bf:a4:4e:5a:b6:83:bc:18:49:23:88:7e:1f:d2:
                    6f:5f:45:cb:b3:ae:5a:e0:7c:48:cd:7b:47:23:bf:
                    8d:4e:03:e1:e9:d9:a0:55:5e:e9:67:7d:b4:e9:27:
                    70:1d:af:6f:b5:52:b6:75:f9:d9:a4:ac:8a:61:06:
                    0a:75:ff:e1:6c:b2:e6:b1:2d:75:44:a6:0a:a4:7c:
                    d5:84:0c:73:02:13:d2:a6:12:8c:3d:0f:35:f5:b7:
                    0a:e7:e0:0d:bd:9d:de:3d:a9:40:84:2b:5e:1b:93:
                    2a:a7:76:ee:22:5d:1c:9d:68:ce:5f:ed:80:e8:0b:
                    81:ad:1d:05:72:23:5c:23:b9:39:81:c4:7f:63:ca:
                    b2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:74:8F:C4:0B:C5:F5:9A:6B:8B:CC:C4:F8:26:91:10:BB:31:8D:3F
            X509v3 Authority Key Identifier:
                keyid:2A:3C:A2:DB:D8:29:73:99:B3:83:1F:D9:90:D4:BF:DB:EC:0B:ED:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/2A3CA2DBD8297399B3831FD990D4BFDBEC0BED07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A3CA2DBD8297399B3831FD990D4BFDBEC0BED07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/323830343a333662633a666630303a3a2f34302d3430203d3e20323636333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:36bc:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         35:43:38:35:2a:21:de:b0:b1:c5:9c:12:12:96:cf:d7:c6:0f:
         e5:cb:25:58:1f:99:4f:8f:20:da:6a:42:31:8e:af:80:5f:2b:
         79:54:86:76:04:93:5e:38:f5:f4:31:46:56:44:37:38:49:e6:
         cb:07:14:c5:22:41:16:44:4f:64:66:0f:60:d7:14:16:7a:39:
         99:20:3a:c4:74:7a:e1:de:65:15:5d:b4:8a:a5:ce:57:78:bf:
         de:ea:80:60:c8:2c:a2:13:5a:e6:9f:1c:8a:e4:cc:ae:f3:52:
         3e:c7:78:11:4e:c4:e5:91:cf:60:b1:2d:b0:b4:2b:1e:02:67:
         0a:a6:c8:df:dd:e5:47:db:be:73:ef:55:ff:4c:1a:6b:3f:f0:
         6e:0d:b4:21:8e:63:58:f8:16:19:5f:f4:c6:a5:8a:e6:d8:27:
         d9:49:33:e1:e3:9b:93:ff:dc:b9:83:90:3e:2e:0d:b8:09:a2:
         65:e4:85:1c:d3:fa:c5:1b:85:7c:c3:11:14:96:f1:14:9a:41:
         23:ff:04:4b:7a:b5:21:07:c5:35:b5:bf:33:55:9a:d4:a4:35:
         81:01:8f:04:6d:dd:12:06:35:f8:4d:fc:69:81:e9:59:07:b8:
         18:fe:39:31:41:48:3e:b0:07:8d:f9:f4:00:0a:55:6a:ad:ce:
         ef:20:b6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:11:12 2025 by rpki-client