Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/1/323830343a333234343a3a2f33322d3438203d3e20323635303636.roa
File:                     323830343a333234343a3a2f33322d3438203d3e20323635303636.roa (raw, json)
Hash identifier:          pOyJ2H0MMB2X5ZoiCYSPN4hC7sHU6JFdkkw/mO5UhRc=
Subject key identifier:   34:2D:96:70:59:A5:44:FA:7A:C7:41:63:C0:CA:C8:C8:58:56:9E:25
Certificate issuer:       /CN=F1884EF6E788EB8A39510CE0A51DB48C6523379E
Certificate serial:       649439F6A9118BBA393DDAF1180E26FCE5A70342
Authority key identifier: F1:88:4E:F6:E7:88:EB:8A:39:51:0C:E0:A5:1D:B4:8C:65:23:37:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1884EF6E788EB8A39510CE0A51DB48C6523379E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/1/323830343a333234343a3a2f33322d3438203d3e20323635303636.roa
Signing time:             Thu 06 Mar 2025 08:03:53 +0000
ROA not before:           Thu 06 Mar 2025 07:58:53 +0000
ROA not after:            Thu 05 Mar 2026 08:03:53 +0000
asID:                     265066
IP address blocks:        2804:3244::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:94:39:f6:a9:11:8b:ba:39:3d:da:f1:18:0e:26:fc:e5:a7:03:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1884EF6E788EB8A39510CE0A51DB48C6523379E
        Validity
            Not Before: Mar  6 07:58:53 2025 GMT
            Not After : Mar  5 08:03:53 2026 GMT
        Subject: CN=342D967059A544FA7AC74163C0CAC8C858569E25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:19:eb:26:f4:04:10:35:f5:22:a1:bd:25:b5:
                    4d:a9:73:a7:f3:40:5f:03:9c:66:5f:6d:a9:d6:58:
                    8e:e1:03:2d:1d:55:53:46:12:1f:13:4e:35:b9:e3:
                    91:7c:23:3e:73:9b:a2:ec:47:ad:e0:21:9b:49:5b:
                    80:8c:f0:98:89:d8:72:82:d4:9b:66:ff:f4:61:2c:
                    ca:c6:3a:4c:2a:0a:06:d1:49:d4:66:91:13:3c:7f:
                    56:67:d0:c6:10:5b:ae:2a:a6:1b:c0:76:5c:f1:b2:
                    f8:db:92:ca:45:7c:95:65:a3:fd:4f:0d:7d:dc:f8:
                    1f:d0:79:1a:dd:5d:15:5b:50:d8:b0:b9:72:16:bb:
                    23:60:60:3f:2e:57:1d:15:c1:8b:e4:74:5c:47:6c:
                    f1:98:07:f7:50:4e:35:5d:12:ba:42:6e:b0:01:e4:
                    4a:fd:f4:dc:22:5e:b0:cc:77:d8:f2:bc:73:dd:d3:
                    57:0f:59:6c:a5:8b:fd:eb:a0:dc:be:7d:59:10:e6:
                    45:55:0d:58:c6:6d:a0:7b:72:b9:b2:d1:af:e2:27:
                    ee:19:54:2f:fe:fb:09:87:18:22:e6:c5:01:6d:6a:
                    34:52:c9:1f:02:b1:19:54:8b:fa:1d:a6:a5:9a:a1:
                    a5:20:b2:0d:8a:72:a8:37:d5:ef:a6:1e:06:bc:0f:
                    50:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:2D:96:70:59:A5:44:FA:7A:C7:41:63:C0:CA:C8:C8:58:56:9E:25
            X509v3 Authority Key Identifier:
                keyid:F1:88:4E:F6:E7:88:EB:8A:39:51:0C:E0:A5:1D:B4:8C:65:23:37:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/1/F1884EF6E788EB8A39510CE0A51DB48C6523379E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1884EF6E788EB8A39510CE0A51DB48C6523379E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/1/323830343a333234343a3a2f33322d3438203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3244::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:05:a8:21:ac:b4:f8:4e:e6:e1:94:e0:82:b3:29:ae:f1:89:
         33:da:b8:de:cb:12:94:d0:b9:dc:35:68:77:ba:74:04:b6:23:
         25:1b:0e:30:3f:14:6b:4a:39:1c:ab:14:e4:e1:a8:41:4d:e2:
         a9:21:95:6a:da:4c:a3:8d:bb:52:22:46:7c:61:b7:38:a8:23:
         2d:d8:2f:03:fe:c5:ca:ff:96:c8:ff:e6:af:22:45:8b:78:da:
         84:4a:06:82:44:0d:b6:d4:f1:ea:25:25:79:13:1d:d1:d8:4b:
         86:34:6e:90:75:f4:82:be:d2:be:c8:5b:e8:2d:55:19:66:f2:
         2e:b1:48:82:30:26:58:69:d0:cc:0a:82:43:5f:e0:01:25:47:
         bd:4d:fb:7e:a7:dd:fb:ea:4c:c2:c5:5f:d5:2b:26:27:2e:86:
         d4:a5:1d:ce:e4:ea:1a:b8:6b:13:d9:35:fe:38:d3:c3:f2:33:
         e7:fb:29:19:e2:da:49:41:82:92:9f:c7:a1:4e:e2:45:0b:5a:
         c0:77:62:5c:4a:e6:d5:bf:5a:88:48:4e:c2:1d:30:e0:2d:2a:
         9e:4d:8d:e5:f9:c0:35:e2:dc:12:24:6f:15:36:da:c0:81:d9:
         ac:2a:c6:91:7e:00:60:14:d5:4a:55:5d:3d:ac:a3:e7:6f:96:
         83:53:a3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:10:11 2025 by rpki-client