Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6HCjq4n6W4akJCMqU9UNbEaB13g6ATWbSz7G5Gv5C5eJ/0/323830343a353432383a383030303a3a2f33342d3334203d3e20323638363332.roa
File:                     323830343a353432383a383030303a3a2f33342d3334203d3e20323638363332.roa (raw, json)
Hash identifier:          ONV4gVuP2vsY0c/PVQD8qryvToguu8xZBUZogt4ssCc=
Subject key identifier:   D2:89:64:36:D9:E3:98:5A:24:9C:65:E6:95:A1:0D:B1:66:05:58:97
Certificate issuer:       /CN=E74F032955E13B4A7C4DFC4184F1D8018DB7C68C
Certificate serial:       3F119677E0CBC4A0C92AAC3E7ED7A01F9DD6BE85
Authority key identifier: E7:4F:03:29:55:E1:3B:4A:7C:4D:FC:41:84:F1:D8:01:8D:B7:C6:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E74F032955E13B4A7C4DFC4184F1D8018DB7C68C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6HCjq4n6W4akJCMqU9UNbEaB13g6ATWbSz7G5Gv5C5eJ/0/323830343a353432383a383030303a3a2f33342d3334203d3e20323638363332.roa
Signing time:             Tue 07 Nov 2023 20:20:05 +0000
ROA not before:           Tue 07 Nov 2023 20:15:05 +0000
ROA not after:            Tue 05 Nov 2024 20:20:05 +0000
asID:                     268632
IP address blocks:        2804:5428:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:11:96:77:e0:cb:c4:a0:c9:2a:ac:3e:7e:d7:a0:1f:9d:d6:be:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E74F032955E13B4A7C4DFC4184F1D8018DB7C68C
        Validity
            Not Before: Nov  7 20:15:05 2023 GMT
            Not After : Nov  5 20:20:05 2024 GMT
        Subject: CN=D2896436D9E3985A249C65E695A10DB166055897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e7:ac:f2:a8:1a:91:b2:a5:b2:ed:c0:2c:13:
                    a7:3b:9e:44:85:6e:4c:f0:ac:bb:9b:97:58:3b:5e:
                    05:11:33:6b:10:b0:50:ea:36:6d:a7:43:22:96:23:
                    ae:5d:a3:fd:f8:6a:2a:4d:2b:25:45:b6:0f:c4:ea:
                    bc:08:12:be:93:c0:95:74:73:39:b2:4d:b2:68:f0:
                    ed:ea:7d:95:a2:20:06:52:1a:56:98:ec:a2:5f:5b:
                    65:f4:11:b6:86:34:7e:ae:66:3d:14:0b:0b:be:ef:
                    a0:e9:86:2d:1e:f1:43:05:e1:97:77:d8:9e:51:bb:
                    54:e9:a1:19:d7:08:1d:93:b1:35:c3:0e:d7:66:76:
                    96:79:3f:8f:da:d9:05:f4:40:10:6a:13:bb:a9:5d:
                    7c:47:75:82:7f:43:81:ee:c1:08:ca:9d:aa:0a:d8:
                    45:0e:90:b7:da:07:b5:03:be:18:cb:ee:96:f7:e0:
                    09:f0:28:d4:c1:d0:fd:97:97:05:eb:e3:f2:fa:56:
                    35:76:3b:59:2c:19:74:57:29:6f:ad:f9:fd:3d:5c:
                    54:b0:01:d0:61:de:60:e0:e7:1c:cc:eb:4b:a5:4d:
                    a6:d2:a2:d5:68:5a:a3:00:4a:1e:4b:eb:3f:0d:cc:
                    6e:35:38:cc:7a:7f:60:89:7d:93:3f:b3:e1:85:2c:
                    67:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:89:64:36:D9:E3:98:5A:24:9C:65:E6:95:A1:0D:B1:66:05:58:97
            X509v3 Authority Key Identifier:
                keyid:E7:4F:03:29:55:E1:3B:4A:7C:4D:FC:41:84:F1:D8:01:8D:B7:C6:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6HCjq4n6W4akJCMqU9UNbEaB13g6ATWbSz7G5Gv5C5eJ/0/E74F032955E13B4A7C4DFC4184F1D8018DB7C68C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E74F032955E13B4A7C4DFC4184F1D8018DB7C68C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6HCjq4n6W4akJCMqU9UNbEaB13g6ATWbSz7G5Gv5C5eJ/0/323830343a353432383a383030303a3a2f33342d3334203d3e20323638363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5428:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         18:c2:6f:c6:5c:36:65:c5:7f:d5:18:ba:25:5a:b4:6d:4a:e1:
         44:6c:1a:82:71:1a:7d:6a:a0:a8:c9:6e:73:80:c6:d1:2f:39:
         05:11:e0:81:1b:41:d8:ae:a8:92:c1:c7:98:6b:56:b7:e8:44:
         5a:ec:d8:b9:18:b6:7a:b1:b7:10:9a:f9:15:db:aa:6a:1d:66:
         33:ca:6f:cd:9e:31:da:02:b5:b7:43:45:a7:c6:e7:b6:d0:73:
         62:1d:80:bd:5b:46:5a:0d:53:c2:b1:70:b0:c5:5f:e9:eb:2a:
         73:26:31:38:03:62:e4:cb:9f:fc:3f:88:1d:09:bf:32:d0:7f:
         ba:dd:8e:c8:fe:2c:e6:cc:d1:e6:d1:7b:a7:d8:21:db:5c:af:
         49:8e:a5:8d:0c:fe:29:6e:a3:a2:00:1f:46:18:71:7f:9b:70:
         57:b6:b3:c1:75:51:9f:4b:c3:84:b6:d3:41:a8:60:55:a0:89:
         c3:65:69:04:88:9f:29:66:cb:f5:8f:80:7c:a5:44:71:34:67:
         62:fc:91:6f:41:b7:53:5b:0b:b4:95:70:ee:8d:68:64:53:c0:
         ad:f2:b2:8d:59:4e:0f:01:0a:41:90:fa:cd:56:c6:02:71:1f:
         7b:fd:69:db:93:80:95:bc:9a:9a:87:f1:2c:5f:cf:e2:54:0f:
         7b:3a:5e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:57:48 2025 by rpki-client