Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/323830343a363830303a3a2f33332d3333203d3e20323639363634.roa
File:                     323830343a363830303a3a2f33332d3333203d3e20323639363634.roa (raw, json)
Hash identifier:          7zvy+C4Vqz4X/L17LHWIPiSoQT0USyELfEZcd9yTKNE=
Subject key identifier:   62:C4:B9:DD:55:DD:C6:46:E3:78:53:B7:6E:A9:88:FB:77:EF:A4:54
Certificate issuer:       /CN=4F366058E8C8DCE8E24C1CBB8D8F8A282A6FE59D
Certificate serial:       503D1E87A4CAFE4E24A1173162A704568EC3FB55
Authority key identifier: 4F:36:60:58:E8:C8:DC:E8:E2:4C:1C:BB:8D:8F:8A:28:2A:6F:E5:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F366058E8C8DCE8E24C1CBB8D8F8A282A6FE59D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/323830343a363830303a3a2f33332d3333203d3e20323639363634.roa
Signing time:             Mon 07 Apr 2025 19:56:50 +0000
ROA not before:           Mon 07 Apr 2025 19:51:50 +0000
ROA not after:            Mon 06 Apr 2026 19:56:50 +0000
asID:                     269664
IP address blocks:        2804:6800::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:3d:1e:87:a4:ca:fe:4e:24:a1:17:31:62:a7:04:56:8e:c3:fb:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F366058E8C8DCE8E24C1CBB8D8F8A282A6FE59D
        Validity
            Not Before: Apr  7 19:51:50 2025 GMT
            Not After : Apr  6 19:56:50 2026 GMT
        Subject: CN=62C4B9DD55DDC646E37853B76EA988FB77EFA454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e7:a3:7a:d2:7f:4d:01:32:f5:a8:d8:07:85:
                    ff:50:91:5b:0e:4d:87:f2:c0:60:ce:f9:f8:1d:4e:
                    e1:ce:c2:a4:a9:20:6e:d8:b8:d4:d9:d8:f5:b0:aa:
                    45:e9:49:fb:03:08:6d:da:31:25:04:aa:69:9c:cd:
                    53:01:ee:1a:44:a6:80:aa:34:4b:0d:c0:d8:a2:c5:
                    a2:3a:c2:1a:a7:cf:b5:f9:b8:12:c3:5d:ab:fb:94:
                    c5:b2:55:c1:89:d8:e1:f9:3d:c3:79:36:b3:9a:7c:
                    66:6b:0c:e7:12:ed:ed:5a:6a:58:f1:97:cd:56:8e:
                    f2:61:e1:50:c6:dd:6f:c1:fd:81:ec:2a:86:6f:76:
                    b2:d4:85:5c:4d:39:73:e3:99:32:e5:0a:05:bc:22:
                    34:70:ba:ae:55:90:cb:59:8f:6a:d5:2f:d9:03:3c:
                    d8:f8:f3:3f:ac:0c:ea:db:6c:7c:4d:d0:c8:6b:f3:
                    82:00:78:32:08:82:82:4d:54:4f:3c:bb:32:fb:43:
                    28:e0:4b:1e:ed:ec:d2:5b:62:e6:b6:3c:f4:e3:13:
                    a5:bb:07:27:aa:f6:18:84:db:83:73:9d:76:89:46:
                    c3:cc:85:37:92:14:30:53:cd:d0:8e:a2:16:eb:e7:
                    be:5c:85:d6:09:8c:a9:ad:08:26:0f:81:63:31:bd:
                    de:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C4:B9:DD:55:DD:C6:46:E3:78:53:B7:6E:A9:88:FB:77:EF:A4:54
            X509v3 Authority Key Identifier:
                keyid:4F:36:60:58:E8:C8:DC:E8:E2:4C:1C:BB:8D:8F:8A:28:2A:6F:E5:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/4F366058E8C8DCE8E24C1CBB8D8F8A282A6FE59D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F366058E8C8DCE8E24C1CBB8D8F8A282A6FE59D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/323830343a363830303a3a2f33332d3333203d3e20323639363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6800::/33

    Signature Algorithm: sha256WithRSAEncryption
         4c:a9:de:d8:2c:3c:42:4b:ee:43:cb:fb:39:1e:ab:60:0d:ad:
         9b:6d:60:21:d4:b6:d7:52:e7:67:9f:8f:44:d2:f9:e0:4d:06:
         3b:93:45:15:90:24:8d:54:78:8e:84:a7:0e:92:f3:86:ac:2d:
         e0:56:88:04:98:18:c2:e5:3a:02:b2:15:93:f1:5e:54:93:8b:
         d4:05:76:a7:49:68:a0:f2:31:fe:28:34:2a:d4:b4:7e:0f:08:
         bb:c1:58:25:f2:41:f3:39:de:77:1d:4f:22:d5:61:9e:de:a6:
         b5:b7:d7:02:bd:dd:17:a8:2d:89:46:3f:50:8b:99:cc:05:3a:
         3d:b1:b1:ba:4f:64:fe:0f:37:a1:5c:24:7c:a3:09:59:6d:59:
         95:69:3c:25:6c:64:c3:75:ed:4f:22:35:98:4a:67:eb:4f:46:
         1e:29:6a:65:29:23:38:43:01:f0:2e:9e:40:08:ee:a5:5d:93:
         1a:ae:d8:27:f2:c1:ae:4f:fb:3b:ec:b4:ec:bd:85:be:6f:42:
         ac:86:fa:09:53:88:0b:45:76:3c:f3:2c:ec:58:d8:43:0b:1f:
         47:9c:7a:8a:27:e3:3c:a7:c2:76:a5:c9:1b:57:ed:13:a6:ec:
         50:fb:8d:6e:ce:84:a6:93:f8:bc:06:b8:e0:af:64:2d:cf:c3:
         18:48:81:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:55:26 2025 by rpki-client