Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a383030303a3a2f33332d3333203d3e20323636323638.roa
File:                     323830343a336435343a383030303a3a2f33332d3333203d3e20323636323638.roa (raw, json)
Hash identifier:          2sklWGPKKdPKdA7qTwuzJFGiQ5vCt28uf/gVPOf0tZI=
Subject key identifier:   B9:89:6A:AB:39:FA:F9:99:79:C1:57:7D:81:B2:3E:6E:C6:13:B5:B9
Certificate issuer:       /CN=FA48EF12356C5AD0E3D01AA17F6B30133FB7095D
Certificate serial:       61FC49904F6EF2FEFCD53C13992147271294BB46
Authority key identifier: FA:48:EF:12:35:6C:5A:D0:E3:D0:1A:A1:7F:6B:30:13:3F:B7:09:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA48EF12356C5AD0E3D01AA17F6B30133FB7095D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a383030303a3a2f33332d3333203d3e20323636323638.roa
Signing time:             Sun 11 Feb 2024 15:19:26 +0000
ROA not before:           Sun 11 Feb 2024 15:14:26 +0000
ROA not after:            Sun 09 Feb 2025 15:19:26 +0000
asID:                     266268
IP address blocks:        2804:3d54:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:fc:49:90:4f:6e:f2:fe:fc:d5:3c:13:99:21:47:27:12:94:bb:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA48EF12356C5AD0E3D01AA17F6B30133FB7095D
        Validity
            Not Before: Feb 11 15:14:26 2024 GMT
            Not After : Feb  9 15:19:26 2025 GMT
        Subject: CN=B9896AAB39FAF99979C1577D81B23E6EC613B5B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fa:ed:05:1f:d7:f5:98:9d:ba:7c:74:e7:ef:
                    41:bd:67:9d:0b:e8:c2:43:59:75:56:f8:b7:69:58:
                    a8:af:a9:50:26:4e:73:d5:a7:6d:bb:5d:e7:06:51:
                    20:19:03:7c:4d:78:ef:3a:cd:75:00:50:2f:1b:97:
                    3e:53:51:ff:d4:b6:4b:05:35:0f:6b:b8:70:24:94:
                    96:d8:d7:90:41:d2:49:61:16:a1:46:22:23:50:42:
                    12:62:59:33:79:2a:45:14:29:aa:08:c4:b5:dc:14:
                    0b:a5:76:91:49:8a:5e:1f:45:fc:b2:d9:73:68:fd:
                    c4:e9:07:7b:77:7b:37:60:cb:6c:3a:0b:5c:49:22:
                    06:82:d2:f5:5b:53:06:4d:9d:10:6a:80:df:6e:64:
                    db:ef:3b:fc:6e:50:70:0d:a5:78:ec:11:11:a8:b3:
                    31:20:6e:5d:5e:7b:81:29:f8:64:1b:e0:fc:81:aa:
                    bf:fa:e3:43:41:49:6a:2c:b6:e8:6e:21:aa:08:48:
                    bc:1c:7c:76:1e:14:47:a3:f2:a3:52:46:18:01:1f:
                    be:4b:44:48:cf:55:d4:3d:aa:48:30:8a:7a:b3:1c:
                    e8:0f:e5:c2:b9:ab:52:de:8b:8d:cc:ac:f7:ec:8c:
                    68:5d:bb:c5:8b:a3:f0:ed:00:db:f6:58:63:a8:3c:
                    1b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:89:6A:AB:39:FA:F9:99:79:C1:57:7D:81:B2:3E:6E:C6:13:B5:B9
            X509v3 Authority Key Identifier:
                keyid:FA:48:EF:12:35:6C:5A:D0:E3:D0:1A:A1:7F:6B:30:13:3F:B7:09:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/FA48EF12356C5AD0E3D01AA17F6B30133FB7095D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA48EF12356C5AD0E3D01AA17F6B30133FB7095D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a383030303a3a2f33332d3333203d3e20323636323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d54:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         16:85:6d:cd:e2:5e:cb:2a:fd:b6:81:5e:d7:d2:fa:0b:ec:b2:
         62:e0:42:e6:e3:4c:09:d0:9b:78:e7:d2:22:f7:c7:f9:e3:4e:
         81:ae:ce:ee:d6:ec:fc:dc:8c:09:04:0d:5b:75:73:fb:08:c4:
         e3:9e:f3:22:75:4a:a3:59:66:74:54:20:2c:6f:a0:21:84:78:
         a9:7b:21:4d:19:eb:38:f4:d0:e9:03:58:7b:89:b5:4f:98:cc:
         ce:cd:03:fd:bd:ac:8a:4e:87:6d:29:ae:84:d0:e5:72:cc:99:
         8b:bb:7a:85:5e:0b:2b:4f:b4:30:0c:fe:2f:8a:fb:e3:1f:e8:
         84:5e:62:93:5a:17:67:b4:24:21:f3:75:a5:ff:e1:32:28:c7:
         60:b9:42:12:ce:9b:5b:63:90:d0:e4:53:f4:16:09:e9:d4:93:
         1f:c4:72:8f:84:5c:ae:0e:23:12:06:62:08:46:a8:51:17:41:
         f0:38:90:fa:d1:cb:70:9b:fd:c7:54:8d:c0:f2:1c:cc:d0:3d:
         b2:48:50:4f:9a:db:ba:9b:b0:35:c6:20:97:b9:1d:78:50:52:
         cc:9d:70:25:75:6a:7b:a1:30:6b:b8:51:5e:25:ee:fb:d8:3b:
         ca:c3:77:4b:37:0c:9a:28:c3:da:b5:c3:6e:fa:69:5d:9e:f8:
         ca:8a:42:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:15:07 2025 by rpki-client