Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/323830343a366239343a3a2f33332d3333203d3e20323730343039.roa
File:                     323830343a366239343a3a2f33332d3333203d3e20323730343039.roa (raw, json)
Hash identifier:          6poc0GJsp+T/kHB3yPasCQKm+9WtFY5uBKsIRXXvcvI=
Subject key identifier:   FD:89:D8:11:3E:AE:5B:60:D6:35:F8:31:5B:C2:B7:24:55:59:F8:0E
Certificate issuer:       /CN=AC61AD7E3EFFFE70721CF169CC83E65CD718A790
Certificate serial:       055C2C5F85BBE7C6DF838F313CDF3BEDFE580EDE
Authority key identifier: AC:61:AD:7E:3E:FF:FE:70:72:1C:F1:69:CC:83:E6:5C:D7:18:A7:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC61AD7E3EFFFE70721CF169CC83E65CD718A790.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/323830343a366239343a3a2f33332d3333203d3e20323730343039.roa
Signing time:             Wed 14 May 2025 18:31:45 +0000
ROA not before:           Wed 14 May 2025 18:26:45 +0000
ROA not after:            Wed 13 May 2026 18:31:45 +0000
asID:                     270409
IP address blocks:        2804:6b94::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:5c:2c:5f:85:bb:e7:c6:df:83:8f:31:3c:df:3b:ed:fe:58:0e:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC61AD7E3EFFFE70721CF169CC83E65CD718A790
        Validity
            Not Before: May 14 18:26:45 2025 GMT
            Not After : May 13 18:31:45 2026 GMT
        Subject: CN=FD89D8113EAE5B60D635F8315BC2B7245559F80E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0d:d1:c2:12:20:0a:a0:c5:2a:f8:de:43:1a:
                    9b:d9:1e:60:a8:37:70:50:b8:8f:20:63:bf:69:9a:
                    9e:cf:31:dd:85:4d:8e:28:8c:1f:ed:be:db:55:06:
                    3e:38:df:3f:f6:30:91:9a:3f:6b:bd:51:c3:e4:c7:
                    68:48:56:27:38:ef:17:24:94:a5:4d:4f:81:93:62:
                    c7:23:a5:a2:36:42:0b:13:1e:16:38:3c:7c:22:85:
                    e4:9b:28:f1:57:09:89:12:cd:2d:b9:19:43:19:6a:
                    a4:e0:30:b5:da:2d:3a:66:b4:68:9b:4a:c3:6e:ae:
                    72:0c:52:cc:85:80:b8:98:62:ac:da:d7:c1:60:aa:
                    6c:c1:ad:e7:db:2a:12:d3:16:73:08:e6:f8:43:7a:
                    53:e2:40:5b:25:88:8f:b0:3c:80:0e:19:85:9c:ed:
                    1c:7b:87:f4:b7:6d:52:8c:69:bd:5a:8a:ac:88:b1:
                    df:9b:97:d7:ad:cb:7c:5f:9d:c2:47:1e:b3:f7:40:
                    53:6b:a1:9a:ee:7e:1e:f8:68:24:b8:81:28:b1:8d:
                    5b:c8:1f:41:4f:8e:84:6f:68:43:70:d8:7a:61:c4:
                    00:df:2d:01:56:8d:b6:a1:b7:bb:85:4d:34:54:53:
                    d8:10:4b:c4:11:a0:90:84:27:f1:2e:f1:da:89:8b:
                    ba:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:89:D8:11:3E:AE:5B:60:D6:35:F8:31:5B:C2:B7:24:55:59:F8:0E
            X509v3 Authority Key Identifier:
                keyid:AC:61:AD:7E:3E:FF:FE:70:72:1C:F1:69:CC:83:E6:5C:D7:18:A7:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/AC61AD7E3EFFFE70721CF169CC83E65CD718A790.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC61AD7E3EFFFE70721CF169CC83E65CD718A790.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/323830343a366239343a3a2f33332d3333203d3e20323730343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6b94::/33

    Signature Algorithm: sha256WithRSAEncryption
         29:cc:54:74:e0:34:13:81:e6:80:58:cc:72:b1:36:5e:9f:45:
         8c:6a:21:6d:3c:35:7e:2f:db:d1:0e:9b:0a:a5:f6:c4:87:70:
         15:d4:91:e9:cf:28:a2:1d:dc:6f:96:a0:4b:b1:3f:bb:d6:65:
         4d:ce:66:61:69:55:1d:20:01:47:d7:27:62:0a:7c:83:1e:1c:
         ef:2b:32:fa:61:80:56:cf:fe:88:46:90:2d:9d:90:5e:87:12:
         1d:6f:24:6c:a4:7e:ce:93:5a:1d:7b:a9:be:63:19:3e:8e:8e:
         ca:1e:4b:d8:84:b6:31:8d:a6:fd:c6:86:1a:38:84:54:db:92:
         0e:4d:f1:40:5c:dc:b8:ed:34:44:80:bf:3b:3f:ca:96:c0:74:
         da:de:f1:51:41:40:73:ea:f0:0e:69:46:11:21:86:ea:02:85:
         8c:2e:d7:68:f3:75:71:64:05:eb:46:c9:ac:41:a9:30:1b:0d:
         36:89:13:67:4c:41:fb:ec:73:be:42:54:18:9c:ed:ea:6f:92:
         24:fb:7e:13:d0:d6:d5:a3:f1:3f:2b:97:97:2a:f8:4e:33:59:
         7f:24:97:07:c6:cb:bd:b3:e7:e8:d9:d4:23:9a:23:cc:9e:a5:
         84:2f:22:cb:40:e0:f9:0c:36:4d:1d:5e:b9:b8:a5:58:d2:f8:
         ca:6a:e9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:43:05 2025 by rpki-client