Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/323830343a366239343a383030303a3a2f33332d3333203d3e20323730343039.roa
File:                     323830343a366239343a383030303a3a2f33332d3333203d3e20323730343039.roa (raw, json)
Hash identifier:          KnChz2TXL1u2h5G/Cz99Z+ul+EaulXr0YEtGjVxMKVI=
Subject key identifier:   63:E5:0A:1B:C4:5F:0A:10:88:55:35:BB:B2:8E:28:9B:00:07:4C:64
Certificate issuer:       /CN=AC61AD7E3EFFFE70721CF169CC83E65CD718A790
Certificate serial:       3904FF9FDF0308197E13414CEAF264CE7D5DF8F3
Authority key identifier: AC:61:AD:7E:3E:FF:FE:70:72:1C:F1:69:CC:83:E6:5C:D7:18:A7:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC61AD7E3EFFFE70721CF169CC83E65CD718A790.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/323830343a366239343a383030303a3a2f33332d3333203d3e20323730343039.roa
Signing time:             Wed 14 May 2025 18:31:56 +0000
ROA not before:           Wed 14 May 2025 18:26:56 +0000
ROA not after:            Wed 13 May 2026 18:31:56 +0000
asID:                     270409
IP address blocks:        2804:6b94:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:04:ff:9f:df:03:08:19:7e:13:41:4c:ea:f2:64:ce:7d:5d:f8:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC61AD7E3EFFFE70721CF169CC83E65CD718A790
        Validity
            Not Before: May 14 18:26:56 2025 GMT
            Not After : May 13 18:31:56 2026 GMT
        Subject: CN=63E50A1BC45F0A10885535BBB28E289B00074C64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:af:be:9e:f1:57:ff:9d:04:c5:e9:10:f1:25:
                    c4:ca:34:fa:64:f1:a2:e3:cf:47:60:68:61:00:8b:
                    53:87:ff:ef:d6:f9:e4:71:4e:90:d0:56:1d:1f:4f:
                    df:2e:d9:80:ad:f1:5e:83:48:f5:da:44:ab:a6:83:
                    d3:2f:89:fd:73:46:d7:d2:44:8f:c9:7a:ff:ac:69:
                    89:42:46:69:3a:82:d9:64:b8:c1:e0:92:59:23:d3:
                    8b:fe:13:85:f2:d7:89:08:ff:d6:69:4c:44:15:f6:
                    c3:1f:ea:ec:71:dd:90:7e:d6:be:5f:29:9f:1d:e5:
                    dd:07:60:c3:42:08:bc:91:43:c4:ea:b5:0d:61:d9:
                    62:55:36:74:ea:2c:02:91:f6:aa:77:ef:e4:6a:8f:
                    82:d1:81:ea:18:37:a8:7e:94:fe:e2:1b:c8:38:c4:
                    4f:23:cb:a5:7a:8c:c2:85:41:6e:81:f2:81:2c:66:
                    6e:69:14:e2:0d:0e:71:1d:85:98:70:45:47:52:57:
                    6a:4f:8b:45:3d:75:98:39:34:54:23:fa:c1:e2:47:
                    c0:9f:68:99:ac:ab:40:15:0e:bb:a7:cd:3e:02:e8:
                    03:cd:33:00:64:af:e2:42:7c:fd:fa:7e:47:d9:42:
                    a3:de:6e:95:21:e9:b1:ad:9d:72:9b:05:41:7e:28:
                    e8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E5:0A:1B:C4:5F:0A:10:88:55:35:BB:B2:8E:28:9B:00:07:4C:64
            X509v3 Authority Key Identifier:
                keyid:AC:61:AD:7E:3E:FF:FE:70:72:1C:F1:69:CC:83:E6:5C:D7:18:A7:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/AC61AD7E3EFFFE70721CF169CC83E65CD718A790.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC61AD7E3EFFFE70721CF169CC83E65CD718A790.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/323830343a366239343a383030303a3a2f33332d3333203d3e20323730343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6b94:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         24:bd:f9:5f:ff:31:95:47:a3:ae:d2:ca:30:6c:16:2e:07:94:
         c4:36:ba:19:55:24:1f:67:ce:2e:b3:6e:83:ae:91:33:30:cd:
         3d:9a:da:ab:2e:40:49:2c:b9:b9:fb:fb:6d:c9:08:24:b4:6b:
         9e:e3:6e:59:e2:e8:f7:58:50:32:a0:d2:99:24:b3:a9:13:8a:
         66:ef:13:e2:c9:05:1c:39:1d:57:0f:05:e1:62:c1:c1:f6:92:
         ce:38:39:ed:d3:2e:46:a3:3b:95:87:c6:3f:c9:be:f5:f1:e2:
         91:47:d4:6c:9d:59:75:86:29:78:7c:e0:78:52:62:0d:4f:32:
         f9:f4:72:ae:e5:0a:1c:a8:43:0a:10:55:b3:2f:e4:22:7a:96:
         c3:7b:7a:87:39:a5:f9:88:11:2d:3e:35:d6:c7:46:a3:f4:78:
         e3:bb:8e:f2:90:1d:fb:02:a7:9b:ea:e6:e0:ec:2b:bc:b7:06:
         dd:3a:09:d3:eb:b9:74:56:a8:b1:38:be:ab:0d:b4:8f:89:56:
         8e:c8:7e:a3:8a:4a:d4:b7:ae:52:09:a6:8d:52:45:ee:32:f3:
         0e:93:4c:07:cf:1e:b2:51:a6:ef:80:e7:d7:fb:ef:63:70:a4:
         2c:aa:99:2f:89:76:0c:e9:e2:f1:2c:06:89:96:f5:ed:97:3b:
         c5:11:6c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 15:21:38 2025 by rpki-client