Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/323830343a363830303a383030303a3a2f33342d3334203d3e20323639363634.roa
File:                     323830343a363830303a383030303a3a2f33342d3334203d3e20323639363634.roa (raw, json)
Hash identifier:          FF+W2RCJW7xVPbZA1iLOnCwZVXF4SGt2BpYpqRQ+MzQ=
Subject key identifier:   F6:92:94:CB:11:72:57:BC:B6:7B:62:48:7F:46:E3:90:85:F5:90:74
Certificate issuer:       /CN=4F366058E8C8DCE8E24C1CBB8D8F8A282A6FE59D
Certificate serial:       5FB81655BD2B6B720BE77CBD0990D76A0FEE645A
Authority key identifier: 4F:36:60:58:E8:C8:DC:E8:E2:4C:1C:BB:8D:8F:8A:28:2A:6F:E5:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F366058E8C8DCE8E24C1CBB8D8F8A282A6FE59D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/323830343a363830303a383030303a3a2f33342d3334203d3e20323639363634.roa
Signing time:             Mon 07 Apr 2025 19:56:49 +0000
ROA not before:           Mon 07 Apr 2025 19:51:49 +0000
ROA not after:            Mon 06 Apr 2026 19:56:49 +0000
asID:                     269664
IP address blocks:        2804:6800:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:b8:16:55:bd:2b:6b:72:0b:e7:7c:bd:09:90:d7:6a:0f:ee:64:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F366058E8C8DCE8E24C1CBB8D8F8A282A6FE59D
        Validity
            Not Before: Apr  7 19:51:49 2025 GMT
            Not After : Apr  6 19:56:49 2026 GMT
        Subject: CN=F69294CB117257BCB67B62487F46E39085F59074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:16:94:97:46:32:c7:54:77:3e:5b:64:32:b9:
                    c9:dc:8a:0c:b1:b4:89:26:ca:98:95:8c:05:62:e8:
                    21:bf:4a:ea:8d:2e:39:e0:d6:22:e1:5c:28:cd:e9:
                    84:8d:16:17:86:50:8c:e8:1b:0f:f2:7c:58:3d:9a:
                    85:45:ea:8c:a6:b5:88:97:d5:dc:33:08:3a:a1:12:
                    7f:80:94:9d:46:48:82:d9:db:85:4c:04:a7:42:54:
                    6b:9e:52:6d:8f:11:1a:f0:95:57:ab:97:15:9d:d8:
                    e6:4e:91:26:3c:7d:e3:c6:92:6c:60:74:b3:3b:93:
                    15:5f:90:4b:d4:43:35:40:68:5f:41:0d:c4:e0:80:
                    02:64:b5:4d:ca:b0:87:3a:40:8b:d1:c1:65:e2:5b:
                    68:f2:1d:2b:a5:5c:38:46:c4:1d:e3:0d:e1:6e:a9:
                    63:f9:8f:49:10:1b:0b:f8:76:a5:10:02:70:04:50:
                    3a:66:57:17:a7:6b:1f:51:5c:49:28:29:1b:b9:97:
                    86:4e:25:d1:55:ea:ac:cc:bd:9c:36:20:71:8d:99:
                    0c:5d:f0:33:39:07:9b:92:e9:85:83:10:90:f3:8e:
                    26:7c:67:4a:d0:7d:52:e0:eb:2a:ab:4d:83:ce:29:
                    ba:6d:85:fa:90:f1:b1:35:cc:9b:5f:15:ec:5f:99:
                    e0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:92:94:CB:11:72:57:BC:B6:7B:62:48:7F:46:E3:90:85:F5:90:74
            X509v3 Authority Key Identifier:
                keyid:4F:36:60:58:E8:C8:DC:E8:E2:4C:1C:BB:8D:8F:8A:28:2A:6F:E5:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/4F366058E8C8DCE8E24C1CBB8D8F8A282A6FE59D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F366058E8C8DCE8E24C1CBB8D8F8A282A6FE59D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/323830343a363830303a383030303a3a2f33342d3334203d3e20323639363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6800:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6c:1c:55:14:ce:97:b7:3f:b4:3e:e6:83:a4:2a:91:f5:a6:94:
         3c:2b:24:4c:a9:16:cd:fb:d7:30:d0:81:ee:bc:57:8e:d9:18:
         5e:f3:3e:19:81:ec:73:86:b5:b6:ce:94:3a:2b:49:aa:9e:fd:
         cc:d0:4e:e8:d1:12:20:4c:b6:ec:7e:05:a7:82:01:f5:b8:71:
         26:6d:6d:2f:61:24:1e:b0:31:fe:59:3a:90:12:9a:bb:40:83:
         48:50:8a:2a:c5:07:b6:8d:d0:e0:57:97:0b:76:10:50:b9:76:
         12:ec:91:f9:f6:99:29:6c:38:3a:cf:dd:20:82:2d:e9:f6:0e:
         11:19:29:2d:7d:12:b1:8a:f3:dd:3a:d3:e1:eb:85:3d:8f:4b:
         04:c2:25:b9:35:ff:57:48:93:4f:6b:22:b0:be:ed:29:35:08:
         2f:95:d3:5b:fc:55:78:cf:61:3b:f1:a1:f8:62:d8:f7:cd:9b:
         f3:d8:4e:b6:6c:10:13:fa:c6:fb:8c:ba:d4:cd:32:43:20:3e:
         d9:83:5f:48:97:be:ec:02:23:e0:06:26:2f:78:b5:f0:ba:c4:
         3f:09:bb:56:2d:b7:5a:ee:c7:2e:f1:e6:70:48:b9:62:6b:0e:
         59:36:e8:a4:a1:e3:48:d0:80:dd:b8:61:e8:78:c2:eb:2f:04:
         95:bf:9a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:39:16 2025 by rpki-client