Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/323830343a363830303a633030303a3a2f33342d3334203d3e20323639363634.roa
File:                     323830343a363830303a633030303a3a2f33342d3334203d3e20323639363634.roa (raw, json)
Hash identifier:          su9/rY0VvraUpSFMj9bvHbdnT5gFtQmomVCKqiDeeW8=
Subject key identifier:   00:59:58:34:85:D9:EF:0B:46:D9:2C:AB:18:21:43:48:4E:43:E1:48
Certificate issuer:       /CN=4F366058E8C8DCE8E24C1CBB8D8F8A282A6FE59D
Certificate serial:       3AD26CFB5FA1E8468371663A082258F17322322F
Authority key identifier: 4F:36:60:58:E8:C8:DC:E8:E2:4C:1C:BB:8D:8F:8A:28:2A:6F:E5:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F366058E8C8DCE8E24C1CBB8D8F8A282A6FE59D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/323830343a363830303a633030303a3a2f33342d3334203d3e20323639363634.roa
Signing time:             Mon 07 Apr 2025 19:56:49 +0000
ROA not before:           Mon 07 Apr 2025 19:51:49 +0000
ROA not after:            Mon 06 Apr 2026 19:56:49 +0000
asID:                     269664
IP address blocks:        2804:6800:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:d2:6c:fb:5f:a1:e8:46:83:71:66:3a:08:22:58:f1:73:22:32:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F366058E8C8DCE8E24C1CBB8D8F8A282A6FE59D
        Validity
            Not Before: Apr  7 19:51:49 2025 GMT
            Not After : Apr  6 19:56:49 2026 GMT
        Subject: CN=0059583485D9EF0B46D92CAB182143484E43E148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:62:49:56:64:64:a4:60:9e:91:ef:61:f5:e6:
                    11:0d:56:6c:24:55:e3:67:f1:43:7e:57:c0:02:71:
                    e9:5a:bb:f7:90:32:cb:52:33:86:46:32:dd:50:15:
                    1e:ca:10:90:70:2b:32:9b:fd:4d:f2:db:bb:0a:20:
                    de:e6:e5:1c:b9:de:1a:57:eb:f0:43:29:05:65:96:
                    68:95:6c:9d:ae:8c:6c:48:33:3f:d1:1f:e8:ef:9d:
                    b0:3a:7d:25:42:6e:23:e9:01:5c:3d:d6:9e:09:82:
                    2f:d9:49:d8:8a:73:d8:ce:df:7b:f4:6a:59:1a:59:
                    18:b2:56:14:60:4d:9d:1a:d2:dc:10:c4:cf:25:3f:
                    89:d2:be:46:a9:d6:58:51:46:32:5b:89:9c:29:fd:
                    9a:d5:04:3e:a4:a6:89:bb:d2:ee:40:79:c3:84:aa:
                    04:34:e1:fa:ff:41:12:3d:55:1f:3f:ff:b8:c0:86:
                    16:4b:34:d3:32:9c:b7:8d:ec:e7:4b:62:e6:a3:21:
                    ef:12:a1:88:e6:7a:72:58:22:66:af:51:89:65:67:
                    ce:33:6b:46:5f:c9:7c:06:3f:92:ec:06:05:43:b5:
                    6b:31:a4:99:f0:fe:e3:14:7e:9b:a2:b0:59:31:b1:
                    b4:9e:6e:bc:08:df:97:a5:a7:46:46:1c:64:90:bf:
                    36:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:59:58:34:85:D9:EF:0B:46:D9:2C:AB:18:21:43:48:4E:43:E1:48
            X509v3 Authority Key Identifier:
                keyid:4F:36:60:58:E8:C8:DC:E8:E2:4C:1C:BB:8D:8F:8A:28:2A:6F:E5:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/4F366058E8C8DCE8E24C1CBB8D8F8A282A6FE59D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F366058E8C8DCE8E24C1CBB8D8F8A282A6FE59D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/323830343a363830303a633030303a3a2f33342d3334203d3e20323639363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6800:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         90:22:1e:bf:58:5a:cb:5e:b5:71:f7:5d:21:41:05:26:a8:f0:
         00:02:9b:67:2d:4d:c6:8d:b7:80:a5:c7:3e:60:e4:8a:f7:b3:
         d0:0c:21:77:4b:fa:c1:09:14:50:ca:8e:71:f6:b1:e4:99:db:
         a8:67:64:c1:07:3f:93:d7:be:af:d9:45:a4:97:18:ef:68:b2:
         d1:67:8d:b8:3d:45:4e:d6:f9:ea:f0:77:94:a7:7d:a8:76:c4:
         c9:c3:34:b4:34:bd:1b:db:7c:77:06:b4:30:ad:c7:3d:d5:bf:
         15:1b:d4:5b:21:b6:a2:61:a9:94:0c:eb:c9:14:d3:0a:fb:9c:
         86:15:9f:ff:29:32:24:4f:9b:89:b9:5a:ff:e4:13:1b:85:3c:
         08:d9:22:8c:1a:65:d5:4d:a1:f0:2b:3b:d9:f0:16:0a:3a:6e:
         83:9b:21:6b:c4:e5:4c:1a:1f:b7:45:ee:c1:e0:73:5b:0b:d9:
         50:7b:6c:8a:9d:ca:36:42:8c:0a:ce:94:fb:6a:f2:db:48:40:
         81:2d:ad:1c:1e:99:1b:6c:f4:6d:42:e7:74:47:26:e0:86:83:
         11:87:7a:72:db:9e:5d:a4:c0:b2:55:49:96:0c:85:79:48:6f:
         a1:e2:ad:27:b4:5d:13:34:6d:79:5f:31:a6:64:f9:47:ea:39:
         44:cd:a1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:06:06 2025 by rpki-client