Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ikPkQmMEbW3uKKo7D2id28LVV94tECs1mDDx8TFqh5i/0/323830343a393239303a3a2f33322d3438203d3e20323734373139.roa
File:                     323830343a393239303a3a2f33322d3438203d3e20323734373139.roa (raw, json)
Hash identifier:          ENng+u9eJT5Kpx/ToNqIpk3qKlojqMls/eBiAY08ir0=
Subject key identifier:   5B:64:D6:76:87:11:90:37:96:71:B3:3A:A8:38:8B:79:35:01:5F:BD
Certificate issuer:       /CN=2375BDB766C50947684A61514317FB8110D5B48E
Certificate serial:       62BFA9FA0CFE9B5D1CEA9ADEB5888EF57E5EA20F
Authority key identifier: 23:75:BD:B7:66:C5:09:47:68:4A:61:51:43:17:FB:81:10:D5:B4:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2375BDB766C50947684A61514317FB8110D5B48E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ikPkQmMEbW3uKKo7D2id28LVV94tECs1mDDx8TFqh5i/0/323830343a393239303a3a2f33322d3438203d3e20323734373139.roa
Signing time:             Fri 17 Jan 2025 15:26:30 +0000
ROA not before:           Fri 17 Jan 2025 15:21:30 +0000
ROA not after:            Fri 16 Jan 2026 15:26:30 +0000
asID:                     274719
IP address blocks:        2804:9290::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:bf:a9:fa:0c:fe:9b:5d:1c:ea:9a:de:b5:88:8e:f5:7e:5e:a2:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2375BDB766C50947684A61514317FB8110D5B48E
        Validity
            Not Before: Jan 17 15:21:30 2025 GMT
            Not After : Jan 16 15:26:30 2026 GMT
        Subject: CN=5B64D676871190379671B33AA8388B7935015FBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:88:d9:56:0d:4c:ba:4e:de:45:6f:a7:e6:61:
                    96:36:c1:06:5c:6b:df:1a:a7:42:b9:d9:03:a6:85:
                    2a:9b:d1:d1:8e:fd:d9:0a:8f:3f:e5:9e:a3:f3:58:
                    c3:cf:9e:3f:43:df:a8:6f:ce:93:e2:0b:dc:0b:b0:
                    5b:eb:3f:07:4d:fa:ed:f3:18:f2:01:fc:ad:b1:97:
                    79:88:12:93:1d:04:e1:00:20:ae:6f:1e:12:64:7a:
                    26:9b:a9:e1:58:c7:ed:b8:75:2f:cf:59:37:b5:7c:
                    1e:d8:d5:59:af:be:23:f0:35:de:18:e1:d9:dc:45:
                    be:f7:52:25:a7:16:97:90:96:84:1b:18:9a:04:6c:
                    38:52:8a:95:79:b0:1f:d7:ce:08:20:ab:5e:14:27:
                    ec:35:bc:54:e6:ee:aa:d2:d8:2e:8c:ac:b0:fe:2d:
                    77:24:9c:5d:36:db:bf:e6:f3:66:56:a7:1d:68:65:
                    45:d3:18:d4:ce:81:be:f0:19:cc:60:b4:3d:d4:e9:
                    5a:e4:fb:a9:31:6d:83:1c:d3:2b:69:71:29:98:ae:
                    eb:e3:aa:70:6d:3c:4f:8d:a5:e9:3a:fc:6e:a5:25:
                    22:e1:49:44:2b:c2:cc:c8:b1:ed:86:de:e1:79:8a:
                    87:27:68:5a:06:a7:7d:2d:14:7d:4a:34:1a:4a:af:
                    15:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:64:D6:76:87:11:90:37:96:71:B3:3A:A8:38:8B:79:35:01:5F:BD
            X509v3 Authority Key Identifier:
                keyid:23:75:BD:B7:66:C5:09:47:68:4A:61:51:43:17:FB:81:10:D5:B4:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ikPkQmMEbW3uKKo7D2id28LVV94tECs1mDDx8TFqh5i/0/2375BDB766C50947684A61514317FB8110D5B48E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2375BDB766C50947684A61514317FB8110D5B48E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ikPkQmMEbW3uKKo7D2id28LVV94tECs1mDDx8TFqh5i/0/323830343a393239303a3a2f33322d3438203d3e20323734373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9290::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:d3:df:61:e8:06:03:d4:17:90:e0:2b:c9:01:92:8d:46:46:
         c2:b8:64:20:3e:08:c9:4c:d8:6c:ca:f1:de:0b:47:94:44:0c:
         2b:a7:d3:9c:17:ca:1b:93:d7:18:e7:65:6a:e8:2f:4d:09:54:
         10:67:0e:be:08:e0:e0:20:7a:b5:d0:32:72:e5:1b:33:68:2f:
         3f:f7:77:71:d2:6b:64:3d:64:50:b4:0e:71:52:fe:d6:82:18:
         c1:22:93:70:cd:8c:03:41:a6:ea:2e:83:cc:a9:0b:e5:29:3b:
         d7:3b:83:6a:45:3e:9a:90:dc:9a:e3:b6:bb:c7:7c:3b:07:94:
         07:39:bc:51:06:31:9e:4e:21:e3:67:96:dc:63:f5:47:25:0a:
         92:db:da:b2:c4:65:35:5c:d0:68:b8:a5:63:fb:ba:b1:0e:f7:
         ef:91:c8:e7:4d:05:16:b8:a6:ec:97:aa:9f:a1:d3:99:37:84:
         78:20:36:a9:de:3f:fd:ae:9b:58:62:61:b6:e5:24:6e:46:d4:
         bc:f5:07:1d:f1:be:17:c4:7e:f8:b5:d7:fb:71:0b:71:54:a1:
         d3:9f:9f:57:67:4a:96:c3:42:4f:af:d1:ab:28:fa:dd:86:8d:
         01:48:4d:11:23:8b:76:99:5f:4b:2d:19:9b:d7:af:31:85:60:
         d6:04:b2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:52:07 2025 by rpki-client