Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/323830343a313634633a6661633a3a2f34382d3438203d3e20323633323830.roa
File:                     323830343a313634633a6661633a3a2f34382d3438203d3e20323633323830.roa (raw, json)
Hash identifier:          6nL36QcETJJFvkiVVyWMLCclaTBJ1x3KCbT9g3ETV2Q=
Subject key identifier:   33:DA:58:85:3F:0C:3F:F4:94:6C:16:A6:BD:97:9C:7A:F9:45:E0:72
Certificate issuer:       /CN=A3F168F0E50A90E41A736FE0D5FA919765E1B5E6
Certificate serial:       47B3257542EEA40BB28743C36B28E89746EC505C
Authority key identifier: A3:F1:68:F0:E5:0A:90:E4:1A:73:6F:E0:D5:FA:91:97:65:E1:B5:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/323830343a313634633a6661633a3a2f34382d3438203d3e20323633323830.roa
Signing time:             Thu 06 Mar 2025 16:46:48 +0000
ROA not before:           Thu 06 Mar 2025 16:41:48 +0000
ROA not after:            Thu 05 Mar 2026 16:46:48 +0000
asID:                     263280
IP address blocks:        2804:164c:fac::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:b3:25:75:42:ee:a4:0b:b2:87:43:c3:6b:28:e8:97:46:ec:50:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3F168F0E50A90E41A736FE0D5FA919765E1B5E6
        Validity
            Not Before: Mar  6 16:41:48 2025 GMT
            Not After : Mar  5 16:46:48 2026 GMT
        Subject: CN=33DA58853F0C3FF4946C16A6BD979C7AF945E072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4a:36:86:a4:44:8c:de:7a:4c:50:c0:55:23:
                    d8:e9:d0:f4:c5:fa:b6:94:2a:0e:de:a3:9d:13:9a:
                    37:37:88:2b:17:6e:b5:4d:32:45:99:ed:09:7a:9d:
                    77:77:ae:e3:29:c2:c7:b1:50:3c:fe:14:c8:bd:86:
                    f6:96:ba:aa:a5:14:2d:f5:ed:49:d8:e3:fd:12:e0:
                    9f:3f:07:dd:1b:53:21:cc:3e:08:ac:29:3e:88:7b:
                    fb:bc:c3:e3:d8:94:c3:16:8b:fa:bb:de:55:0d:13:
                    e4:af:c8:35:40:27:99:23:1d:73:dd:f1:5d:a7:4f:
                    4d:8c:a7:5d:21:77:71:2d:cf:f5:95:a3:99:58:b6:
                    55:3d:ac:2d:f9:2c:19:14:07:2b:d5:2b:df:74:e1:
                    29:48:8f:94:ca:25:31:b0:ac:a4:31:67:d7:5c:3a:
                    e1:88:d9:30:60:37:a5:60:78:bc:12:fa:54:27:a6:
                    fd:71:e6:95:38:a5:73:2a:50:ef:88:cd:26:10:6e:
                    ed:78:48:e9:28:ab:4d:73:4e:03:93:d8:df:9f:3b:
                    2f:bc:7f:e5:9f:2d:4c:c2:3c:fd:24:25:65:92:76:
                    2f:83:c4:41:4a:d8:87:af:cc:68:92:3b:e5:1b:e0:
                    e6:9f:32:88:78:c5:02:7c:15:02:46:e9:84:46:4b:
                    73:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:DA:58:85:3F:0C:3F:F4:94:6C:16:A6:BD:97:9C:7A:F9:45:E0:72
            X509v3 Authority Key Identifier:
                keyid:A3:F1:68:F0:E5:0A:90:E4:1A:73:6F:E0:D5:FA:91:97:65:E1:B5:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/323830343a313634633a6661633a3a2f34382d3438203d3e20323633323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:164c:fac::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:24:ce:0d:4c:8e:03:61:a6:7b:b7:f7:e1:cb:0c:4d:67:fa:
         60:35:3c:a4:4d:9a:07:89:8d:6a:e0:7e:8a:8b:44:e3:bd:be:
         50:4d:83:f3:e9:14:6b:6f:c4:5f:90:da:29:73:36:46:f1:fd:
         18:5e:9d:db:d7:d1:54:b5:a3:2f:eb:7d:4f:21:a2:4e:6a:48:
         a8:d3:c4:cc:99:7a:cc:4d:59:f1:23:53:10:c3:6d:10:0c:db:
         e8:ab:1d:2f:b0:63:a1:03:4e:d6:da:b6:21:73:07:f9:4d:c1:
         df:57:73:b9:c2:f5:e6:ee:a3:cd:11:6c:e4:52:68:ee:eb:67:
         8a:b3:88:99:7e:49:9e:94:9c:a3:a1:08:cd:6a:84:a2:3f:bb:
         b7:0c:1b:c9:9d:68:83:0a:03:1c:c7:86:ed:e6:64:7c:3b:c0:
         03:c2:19:11:a0:29:7e:e8:e0:67:42:94:ef:af:0e:5b:31:e2:
         da:ec:51:98:29:3d:ce:55:ec:e4:51:13:a8:87:3f:64:ec:fe:
         39:57:01:15:84:8a:58:d0:3c:b1:31:1c:01:b7:02:28:d8:51:
         c7:4d:c1:c6:8c:55:15:55:1c:2e:5d:d2:c3:22:d0:bc:4d:05:
         a8:ad:d4:90:bf:fe:e9:a5:5d:92:ec:6e:fc:d0:8a:2a:c1:dc:
         14:38:47:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:18:39 2025 by rpki-client