Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/323830343a366635303a343030303a3a2f33342d3334203d3e20323730363532.roa
File:                     323830343a366635303a343030303a3a2f33342d3334203d3e20323730363532.roa (raw, json)
Hash identifier:          w0hnOtDNtUYfkospoe066OtiVdBA3sr+BtUAHJ8gQVY=
Subject key identifier:   63:DD:93:59:64:AF:5A:D3:5A:5C:D6:DB:DF:05:BB:CF:42:4F:71:5E
Certificate issuer:       /CN=0144765DC0A3D9D0EADA845625C5E7F14C552690
Certificate serial:       73F7F898CFDF197257A2FE0CAE01D0C03EC71AF1
Authority key identifier: 01:44:76:5D:C0:A3:D9:D0:EA:DA:84:56:25:C5:E7:F1:4C:55:26:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/323830343a366635303a343030303a3a2f33342d3334203d3e20323730363532.roa
Signing time:             Wed 05 Mar 2025 23:11:38 +0000
ROA not before:           Wed 05 Mar 2025 23:06:38 +0000
ROA not after:            Wed 04 Mar 2026 23:11:38 +0000
asID:                     270652
IP address blocks:        2804:6f50:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:f7:f8:98:cf:df:19:72:57:a2:fe:0c:ae:01:d0:c0:3e:c7:1a:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0144765DC0A3D9D0EADA845625C5E7F14C552690
        Validity
            Not Before: Mar  5 23:06:38 2025 GMT
            Not After : Mar  4 23:11:38 2026 GMT
        Subject: CN=63DD935964AF5AD35A5CD6DBDF05BBCF424F715E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:77:87:91:8f:da:60:d0:31:48:92:dd:d9:62:
                    bb:5c:7d:55:e2:9f:c7:76:00:19:50:96:19:a4:29:
                    3c:29:13:8b:ef:25:78:88:85:ac:a0:9d:0a:5c:b5:
                    0e:23:c0:f1:5e:cf:33:db:17:f0:8f:b3:3d:87:cb:
                    41:cd:a4:03:fe:c1:20:ca:a4:11:99:38:82:e6:f8:
                    06:44:d5:6b:b9:40:dd:6d:f4:3f:c8:05:14:95:66:
                    92:86:94:07:13:06:57:d0:1f:f0:d7:8e:ff:b3:87:
                    90:ba:e4:e0:c6:52:14:77:a3:17:06:bd:83:e1:f3:
                    e2:50:8f:ca:9e:89:07:88:43:f6:fa:89:f7:e9:9f:
                    9c:2f:46:6a:af:9b:5f:8d:da:ff:b5:da:c0:2f:70:
                    91:c2:e2:69:6e:03:6b:66:26:fa:16:2a:1c:33:43:
                    4e:f4:e6:ad:ce:16:75:64:9e:45:1c:03:bf:e0:cc:
                    d8:a1:0b:7a:c8:06:c3:c2:d3:aa:e8:12:2e:d3:30:
                    e8:5d:f7:38:0b:1a:07:7b:49:c1:82:5e:09:5f:79:
                    30:f3:26:b6:87:0a:5d:e8:e5:81:a6:e9:94:c9:ac:
                    08:58:39:cc:f7:b4:99:8f:09:b9:32:6e:96:cd:fb:
                    fa:cc:dc:08:5c:ab:c6:11:4c:23:8d:a2:18:79:34:
                    28:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:DD:93:59:64:AF:5A:D3:5A:5C:D6:DB:DF:05:BB:CF:42:4F:71:5E
            X509v3 Authority Key Identifier:
                keyid:01:44:76:5D:C0:A3:D9:D0:EA:DA:84:56:25:C5:E7:F1:4C:55:26:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/323830343a366635303a343030303a3a2f33342d3334203d3e20323730363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f50:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         61:cd:34:1e:f3:2e:0c:3e:71:3a:ae:b3:b5:62:98:f8:03:75:
         a5:1e:79:67:b2:f6:cb:3a:b4:a7:8d:5d:e5:09:67:e7:d8:95:
         1b:6a:f7:5e:0f:28:58:c2:2a:22:18:ef:67:2e:94:b1:32:a0:
         17:6f:f2:b0:a2:7f:d3:2b:b8:9d:b4:2b:f0:8b:19:1b:c3:8f:
         e6:6b:be:ac:9a:c3:be:f8:0c:cf:b9:94:7d:e9:c4:68:46:c2:
         b2:37:c2:3b:07:71:8c:a8:b7:1e:54:21:f8:bc:7e:81:a9:93:
         e5:a9:99:d6:6b:2e:df:00:4a:15:2b:0b:e0:6c:1c:3f:ad:b0:
         1e:b9:a5:12:8c:34:3f:3a:ac:b4:68:d0:69:f1:31:39:f6:72:
         86:5c:97:61:c3:8e:0e:e1:28:63:66:a2:4f:95:df:7d:19:14:
         04:c1:ae:5b:b7:40:15:a4:b6:58:14:fc:63:35:07:f3:b3:34:
         7f:e1:1a:43:07:15:cc:6b:21:fe:bc:0e:b4:c1:5f:f2:4e:fd:
         f8:8e:4f:0b:ef:db:76:74:e1:b4:69:1d:bb:ab:be:95:db:ea:
         0b:20:29:1f:16:91:c9:e5:5f:36:37:d4:49:f4:58:3a:1d:bd:
         cd:ba:0c:30:46:45:86:b6:44:fd:a9:ce:75:0e:4b:63:89:11:
         59:34:a3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:35:25 2025 by rpki-client