Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/0/323830343a383034303a3a2f33322d3332203d3e20323731373339.roa
File:                     323830343a383034303a3a2f33322d3332203d3e20323731373339.roa (raw, json)
Hash identifier:          iQz9EDtKTpnV/39IyaXHbMyTbZxn+3ILauulPwkacro=
Subject key identifier:   51:9A:06:3F:C6:3E:6A:24:C0:66:C9:20:03:FD:88:D3:C8:A5:EE:AA
Certificate issuer:       /CN=F4F556C33EA7428E6140162105F40037D7CF70CA
Certificate serial:       35ADCD792186D62220231D79BD4F2E44C5F8E3A1
Authority key identifier: F4:F5:56:C3:3E:A7:42:8E:61:40:16:21:05:F4:00:37:D7:CF:70:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4F556C33EA7428E6140162105F40037D7CF70CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/0/323830343a383034303a3a2f33322d3332203d3e20323731373339.roa
Signing time:             Mon 11 Mar 2024 18:26:43 +0000
ROA not before:           Mon 11 Mar 2024 18:21:43 +0000
ROA not after:            Mon 10 Mar 2025 18:26:43 +0000
asID:                     271739
IP address blocks:        2804:8040::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ad:cd:79:21:86:d6:22:20:23:1d:79:bd:4f:2e:44:c5:f8:e3:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4F556C33EA7428E6140162105F40037D7CF70CA
        Validity
            Not Before: Mar 11 18:21:43 2024 GMT
            Not After : Mar 10 18:26:43 2025 GMT
        Subject: CN=519A063FC63E6A24C066C92003FD88D3C8A5EEAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:98:16:53:9b:64:12:79:d5:08:2f:05:c8:c0:
                    a0:94:fd:57:e6:51:df:37:0d:00:98:d0:da:58:49:
                    e1:3d:e2:90:74:7f:1d:df:6d:f9:4b:18:2d:c7:c4:
                    94:d5:f4:19:69:e8:2f:49:26:e6:86:a8:39:10:24:
                    fb:cf:fb:b3:0c:7f:32:d0:ae:43:f5:d5:e8:26:93:
                    df:e3:fd:93:d9:bb:fb:ef:ac:23:c9:36:29:30:ef:
                    5a:d4:73:7e:d7:e9:74:5b:87:2a:73:6e:2b:a0:de:
                    33:f9:90:a9:1d:5d:b5:cf:ff:34:72:59:e3:fa:ca:
                    b6:40:d7:ed:62:cb:8e:e5:83:43:71:7f:ff:23:17:
                    c2:0d:b5:4e:d4:85:0c:08:c9:ad:56:2f:cb:6f:93:
                    be:76:2a:4a:6b:ab:c6:2b:34:68:ef:2f:59:ff:2a:
                    bb:2a:eb:29:36:a9:44:3e:7f:c3:ce:da:e2:0d:3b:
                    21:f4:8c:b9:72:4e:58:86:bb:b8:7e:94:a7:aa:e9:
                    5d:e0:93:13:69:78:25:e7:e6:7c:81:c7:7c:ad:3d:
                    c2:c8:51:8b:16:80:ea:eb:89:46:10:43:a1:87:9f:
                    1a:53:47:d4:ce:57:8e:79:24:41:a2:ac:b6:d5:84:
                    21:3d:94:4b:a4:20:82:7d:5c:0e:69:56:a5:80:02:
                    56:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:9A:06:3F:C6:3E:6A:24:C0:66:C9:20:03:FD:88:D3:C8:A5:EE:AA
            X509v3 Authority Key Identifier:
                keyid:F4:F5:56:C3:3E:A7:42:8E:61:40:16:21:05:F4:00:37:D7:CF:70:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/0/F4F556C33EA7428E6140162105F40037D7CF70CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4F556C33EA7428E6140162105F40037D7CF70CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/0/323830343a383034303a3a2f33322d3332203d3e20323731373339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8040::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:96:2d:e3:06:40:36:8f:da:80:2a:30:fe:5e:34:4a:7c:da:
         d3:28:20:6d:3a:01:82:ed:28:ac:e0:dc:24:f8:e3:ea:1e:0a:
         f4:94:bc:16:6f:7f:75:d7:a5:dc:30:0a:4b:d0:cb:08:e7:25:
         42:35:d3:fb:86:1b:a9:3c:1f:c9:fd:00:65:10:af:18:67:6f:
         10:d3:c3:ea:5e:5f:83:ba:0a:80:b3:d7:a8:45:dc:ba:49:c8:
         52:4f:90:09:11:29:3e:6b:4f:a6:23:39:23:a8:62:78:20:86:
         0a:6d:45:cb:5f:b8:de:1c:cd:86:5e:89:04:93:f8:50:73:c4:
         fa:1a:71:32:78:0e:f1:5f:76:fd:d7:67:e9:f5:b9:17:fc:df:
         80:8e:4b:25:9a:79:c5:21:e0:a5:37:c8:5d:a5:e2:a6:01:b4:
         b2:0e:59:af:3c:35:f8:20:e6:de:35:56:09:8d:2c:5b:ca:dd:
         51:9a:ec:49:f4:a8:28:4c:98:56:87:1e:0e:5b:1c:31:c7:4a:
         0c:51:43:5b:06:91:c8:6c:3f:c8:a9:27:3a:b2:3b:6c:f1:2c:
         5b:af:c8:34:80:4d:a2:80:34:04:31:75:dd:6f:16:cb:f8:bc:
         ea:cb:c4:be:04:b9:56:14:c3:03:70:28:79:a8:48:ec:f1:84:
         6d:da:48:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:45 2025 by rpki-client