Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9BLUrtzMhwr5suQF5aLmU45ErkvLBLXQXWUQAVZgR3bj/0/323830343a376461343a383030303a3a2f33332d3333203d3e203631363035.roa
File:                     323830343a376461343a383030303a3a2f33332d3333203d3e203631363035.roa (raw, json)
Hash identifier:          YMRLac3CrOdsuQJu2/b4nwLiLhqeGUKu7TkIabkSblg=
Subject key identifier:   6F:39:03:34:56:0D:26:43:E4:46:EE:54:58:82:A5:E8:76:97:6C:D9
Certificate issuer:       /CN=95A9B935AF7391D649D034160A7150D2138ECFBC
Certificate serial:       5A11C261D30B2C88C5E4A66574C7EED4E413A630
Authority key identifier: 95:A9:B9:35:AF:73:91:D6:49:D0:34:16:0A:71:50:D2:13:8E:CF:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95A9B935AF7391D649D034160A7150D2138ECFBC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9BLUrtzMhwr5suQF5aLmU45ErkvLBLXQXWUQAVZgR3bj/0/323830343a376461343a383030303a3a2f33332d3333203d3e203631363035.roa
Signing time:             Wed 23 Oct 2024 18:55:38 +0000
ROA not before:           Wed 23 Oct 2024 18:50:38 +0000
ROA not after:            Wed 22 Oct 2025 18:55:38 +0000
asID:                     61605
IP address blocks:        2804:7da4:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:11:c2:61:d3:0b:2c:88:c5:e4:a6:65:74:c7:ee:d4:e4:13:a6:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95A9B935AF7391D649D034160A7150D2138ECFBC
        Validity
            Not Before: Oct 23 18:50:38 2024 GMT
            Not After : Oct 22 18:55:38 2025 GMT
        Subject: CN=6F390334560D2643E446EE545882A5E876976CD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:39:7c:07:07:32:86:70:38:7a:19:90:a1:54:
                    d9:e3:48:74:72:51:45:cb:9c:f8:01:71:53:49:45:
                    f9:51:12:e5:d4:ba:82:cb:70:57:23:1a:67:4a:6b:
                    bf:c8:b6:ea:7d:93:b2:98:53:55:bf:87:5b:61:1a:
                    78:35:60:9d:6c:eb:7c:4a:e1:11:0d:b6:ba:10:b1:
                    03:e0:d6:ee:04:32:85:3e:9b:98:b3:13:34:ec:62:
                    6e:e7:d2:8d:df:74:da:d5:37:ce:72:15:51:ff:b4:
                    c4:2c:4d:85:bb:f3:75:34:20:af:fe:98:31:0f:5e:
                    ee:8a:8f:94:fa:9b:d4:14:2a:bc:01:eb:dd:86:85:
                    4a:3b:a7:c0:e9:58:be:56:ca:79:85:52:43:42:4d:
                    44:27:92:ea:10:51:08:77:59:21:7a:5a:53:c5:bd:
                    bb:c9:17:da:29:1d:f7:7d:26:17:3c:76:fe:aa:a8:
                    4e:52:22:f2:61:63:ce:c1:fb:4a:1d:f3:d9:2e:81:
                    de:9a:6d:49:02:3d:fb:58:9e:75:f2:90:91:ab:3a:
                    57:42:33:7a:34:df:18:fe:5c:85:fc:4e:96:fe:63:
                    42:13:ff:aa:91:b9:cf:84:e4:55:ba:6f:9f:08:e9:
                    6a:98:8b:9d:7e:66:7e:2f:30:97:fb:53:60:4e:3a:
                    bd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:39:03:34:56:0D:26:43:E4:46:EE:54:58:82:A5:E8:76:97:6C:D9
            X509v3 Authority Key Identifier:
                keyid:95:A9:B9:35:AF:73:91:D6:49:D0:34:16:0A:71:50:D2:13:8E:CF:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9BLUrtzMhwr5suQF5aLmU45ErkvLBLXQXWUQAVZgR3bj/0/95A9B935AF7391D649D034160A7150D2138ECFBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95A9B935AF7391D649D034160A7150D2138ECFBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9BLUrtzMhwr5suQF5aLmU45ErkvLBLXQXWUQAVZgR3bj/0/323830343a376461343a383030303a3a2f33332d3333203d3e203631363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7da4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         b4:c1:ce:f8:ab:88:30:1b:7b:08:d7:d3:f3:d7:34:a0:79:5b:
         c7:d5:ed:21:c3:be:e6:b6:bc:db:aa:62:da:56:61:1e:d5:e3:
         9d:8b:78:c8:c3:26:8a:d9:9d:38:1f:ae:b5:e1:17:a0:6c:7f:
         16:78:52:61:9f:cf:72:68:be:98:4c:98:28:e0:c7:4a:0a:0d:
         d4:1e:d5:9c:78:d0:d4:50:05:fa:f1:4f:03:45:5d:c2:90:85:
         45:97:5a:fa:db:4c:0d:db:40:8e:d6:a0:d9:f1:8d:29:71:8f:
         59:04:0e:e6:5f:05:94:b2:6e:6c:14:06:61:7f:dd:66:29:4f:
         d2:05:de:00:b7:57:85:29:43:16:a4:f5:53:7b:d1:83:25:5a:
         4d:b4:27:12:b7:e4:c7:f7:5c:fb:c7:c3:99:56:12:92:7e:36:
         4c:f0:52:1b:ab:24:f1:5d:df:93:61:89:c6:8d:a5:35:34:e5:
         3d:bb:8d:43:be:a8:c8:1a:73:6b:6c:d2:16:c7:65:78:a1:3d:
         ce:3e:65:dd:b5:3e:da:cf:ce:3f:41:13:d4:11:ab:08:75:c8:
         7b:77:99:20:1c:18:1a:4f:7f:e1:8f:ec:f9:13:7e:10:a8:8a:
         7c:05:ad:07:0c:7f:d8:d5:69:b9:e6:f9:ab:8b:12:cf:48:27:
         89:87:8a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:39:06 2025 by rpki-client