Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/323830343a346566633a613030303a3a2f33362d3336203d3e20323638323936.roa
File:                     323830343a346566633a613030303a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier:          wGJVu+9589e0XdE9zoE+6stItSWG20vvco+Fh9IwXQI=
Subject key identifier:   52:FA:90:ED:E1:8F:A4:18:97:6D:46:52:18:00:53:CF:72:32:76:33
Certificate issuer:       /CN=6FBB408034D86AB411C8C8B5E5FA96780D0C5466
Certificate serial:       695EEC6130075E063BD06E1B9A592FA0744FAA76
Authority key identifier: 6F:BB:40:80:34:D8:6A:B4:11:C8:C8:B5:E5:FA:96:78:0D:0C:54:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/323830343a346566633a613030303a3a2f33362d3336203d3e20323638323936.roa
Signing time:             Thu 06 Mar 2025 09:31:53 +0000
ROA not before:           Thu 06 Mar 2025 09:26:53 +0000
ROA not after:            Thu 05 Mar 2026 09:31:53 +0000
asID:                     268296
IP address blocks:        2804:4efc:a000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:5e:ec:61:30:07:5e:06:3b:d0:6e:1b:9a:59:2f:a0:74:4f:aa:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FBB408034D86AB411C8C8B5E5FA96780D0C5466
        Validity
            Not Before: Mar  6 09:26:53 2025 GMT
            Not After : Mar  5 09:31:53 2026 GMT
        Subject: CN=52FA90EDE18FA418976D4652180053CF72327633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:00:0c:ca:f6:5c:e6:7c:ac:60:b9:a5:9f:4e:
                    6c:a9:68:c8:82:70:e5:86:a4:d9:d6:3d:14:a2:10:
                    bc:6e:23:64:19:09:18:d5:25:7b:82:99:20:93:03:
                    61:43:31:98:2b:30:a8:1f:21:18:99:96:b1:22:79:
                    b9:a7:6b:ff:ea:db:69:57:88:04:2a:77:ec:03:d8:
                    72:a0:3f:89:46:bd:fc:a5:57:da:36:74:43:f2:4c:
                    47:b1:47:c4:f0:0d:4a:8e:c9:0d:97:39:fb:29:f2:
                    0e:04:91:ea:68:e9:21:4a:3c:73:35:2b:16:10:58:
                    ba:b4:5a:e9:54:67:b9:02:ed:88:9b:f2:e3:bd:ec:
                    0a:2e:81:3e:7e:97:a5:cf:39:37:6e:55:4d:37:a7:
                    42:53:0d:18:30:15:5c:70:fe:83:c9:b8:6f:87:ef:
                    9b:51:32:09:e6:df:1d:9b:e9:83:fc:b0:3f:09:78:
                    94:63:ab:80:8a:f8:52:11:19:68:d0:80:f8:f6:fc:
                    cd:e2:d1:01:b8:b8:95:9a:64:82:75:7a:c6:64:97:
                    ff:32:11:26:0a:64:4a:1a:1a:f3:5b:26:08:96:3c:
                    6b:46:e5:81:98:73:13:a9:49:f5:8f:85:23:54:ac:
                    b8:e2:47:6a:52:e5:85:01:6a:da:2b:c1:01:64:8f:
                    1e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:FA:90:ED:E1:8F:A4:18:97:6D:46:52:18:00:53:CF:72:32:76:33
            X509v3 Authority Key Identifier:
                keyid:6F:BB:40:80:34:D8:6A:B4:11:C8:C8:B5:E5:FA:96:78:0D:0C:54:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/323830343a346566633a613030303a3a2f33362d3336203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3c:85:83:df:6a:14:ee:93:ed:6a:af:2f:2f:5c:fb:ca:07:21:
         b5:3b:c1:e0:52:3f:25:88:8f:72:d2:df:b4:89:0f:e5:09:03:
         fd:c6:94:a6:b1:88:9e:f7:1d:48:64:4c:d3:89:15:49:e9:b3:
         d4:5f:7e:be:c6:59:8e:08:cb:1b:f7:71:b3:b3:6a:f5:1a:e7:
         a9:c4:fd:d0:15:bc:4b:e2:82:4e:0d:24:cd:58:98:61:57:cb:
         a3:e0:fb:cd:69:1f:a5:af:df:e7:de:2a:19:76:89:a1:fe:7a:
         07:06:99:64:b4:35:44:3b:41:f5:81:dc:34:39:cd:93:2b:c2:
         72:0f:4e:24:99:92:02:61:b3:ee:81:da:5d:f8:08:94:d6:82:
         49:17:d0:59:17:08:84:16:93:47:51:25:29:e5:7b:f2:66:e4:
         55:8b:fc:92:3a:af:d9:5c:63:fb:35:76:1c:6f:73:a5:4b:e4:
         b8:84:35:94:d4:9a:b1:18:ec:f8:4c:79:f7:f8:13:0e:0f:ef:
         f3:f5:ce:ae:9e:98:91:f7:85:21:d5:a5:c5:16:b5:19:b5:0d:
         90:62:21:eb:76:08:10:0f:c4:c4:ae:ff:94:af:ab:c7:82:50:
         de:85:87:9c:d0:68:ba:93:b3:cd:88:a1:73:35:59:74:02:27:
         35:06:67:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:17:53 2025 by rpki-client