Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/323830343a6664633a613030303a3a2f33362d3336203d3e20323633363038.roa
File:                     323830343a6664633a613030303a3a2f33362d3336203d3e20323633363038.roa (raw, json)
Hash identifier:          LMExRfnVgyC3pKxeHURVUFzU8iQ3ltagyd9q5CJ546Y=
Subject key identifier:   B3:8C:34:0A:1F:0F:50:80:80:F8:85:5A:10:5A:C5:E5:D8:47:5E:49
Certificate issuer:       /CN=F19D655ABFCCFC8CB566935B71AA7D94D2905E48
Certificate serial:       2ECE77E1194AC6A138DBE0D33D7DFB0E1695D01D
Authority key identifier: F1:9D:65:5A:BF:CC:FC:8C:B5:66:93:5B:71:AA:7D:94:D2:90:5E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/323830343a6664633a613030303a3a2f33362d3336203d3e20323633363038.roa
Signing time:             Mon 23 Dec 2024 13:18:25 +0000
ROA not before:           Mon 23 Dec 2024 13:13:25 +0000
ROA not after:            Mon 22 Dec 2025 13:18:25 +0000
asID:                     263608
IP address blocks:        2804:fdc:a000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:ce:77:e1:19:4a:c6:a1:38:db:e0:d3:3d:7d:fb:0e:16:95:d0:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F19D655ABFCCFC8CB566935B71AA7D94D2905E48
        Validity
            Not Before: Dec 23 13:13:25 2024 GMT
            Not After : Dec 22 13:18:25 2025 GMT
        Subject: CN=B38C340A1F0F508080F8855A105AC5E5D8475E49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1c:d4:30:ba:46:8b:6c:35:d8:d8:6b:c1:69:
                    1f:4e:40:e2:60:67:08:af:3e:e8:7e:63:f2:f3:98:
                    1c:fa:f8:a1:98:7d:54:4c:ae:d7:d9:7c:d4:7e:16:
                    64:65:1a:46:de:af:d1:20:48:0f:51:d2:2e:65:00:
                    9d:e7:21:2c:03:ee:23:0f:85:24:78:79:f0:c4:8a:
                    4a:09:34:ef:f1:02:02:f6:8a:37:69:08:bc:f2:75:
                    f3:e9:04:59:05:98:ed:53:5b:a2:55:b7:90:7f:0e:
                    01:52:ac:87:b9:62:a7:db:1b:e7:64:fd:cc:a9:36:
                    08:8b:d1:6b:4c:2f:be:30:bd:d4:9c:7d:01:7c:cc:
                    7a:90:64:9e:f1:4b:f0:25:b3:0b:a4:1b:2b:0c:47:
                    6b:3a:db:78:1c:31:26:97:54:27:06:14:c1:0c:bd:
                    60:11:ac:a8:00:02:5b:4d:08:85:3e:b2:af:3c:7c:
                    55:81:64:09:83:bf:43:16:bb:6d:09:49:08:cd:3b:
                    59:52:3a:83:0c:ba:01:d2:0a:e8:da:15:20:28:51:
                    cd:d9:dd:64:e5:21:9f:13:83:35:6a:a9:b7:36:bc:
                    2e:a6:21:77:a2:c0:c8:c6:01:b5:51:fb:a8:cc:93:
                    a5:70:6e:0a:6e:8a:59:c0:b9:13:a1:86:06:1a:f5:
                    05:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:8C:34:0A:1F:0F:50:80:80:F8:85:5A:10:5A:C5:E5:D8:47:5E:49
            X509v3 Authority Key Identifier:
                keyid:F1:9D:65:5A:BF:CC:FC:8C:B5:66:93:5B:71:AA:7D:94:D2:90:5E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/323830343a6664633a613030303a3a2f33362d3336203d3e20323633363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fdc:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7a:9f:92:cf:d2:21:be:49:20:12:59:65:05:67:37:9e:92:aa:
         5c:24:13:07:7f:1c:68:d1:38:79:b1:60:f0:9b:2e:fd:8a:db:
         58:20:ee:19:90:03:2f:41:36:62:d8:3d:03:97:51:cb:b8:33:
         ae:b0:86:a1:e9:e8:68:16:03:e2:c0:69:0b:f3:1b:b5:31:9f:
         6b:82:0d:b3:d3:31:c5:d8:90:98:25:0a:25:a5:c1:32:ae:e4:
         17:ed:9a:88:30:f4:ce:9f:d6:37:f5:5a:ae:90:c0:26:9b:dd:
         01:47:09:0c:e4:f1:dd:07:4c:37:99:04:a6:ea:b8:c7:ac:7a:
         cb:22:3e:d7:12:e6:5e:b5:68:43:0a:a4:ea:c5:3c:e2:f5:e8:
         d9:5c:68:a2:43:27:14:4d:18:70:d0:55:12:ed:e2:95:79:20:
         0f:97:05:f9:b7:dc:ef:69:4d:d3:f4:69:e6:94:2a:5a:94:55:
         ac:73:68:64:c9:71:26:87:27:3e:4f:d2:18:d4:ed:c1:fc:8e:
         75:73:61:a5:09:96:cc:7f:4e:e3:59:db:fb:69:7a:34:d7:9f:
         d2:f1:9c:6b:78:d4:ee:46:6a:83:30:41:f8:2f:99:1b:01:eb:
         e7:ea:2b:8b:2e:2d:27:8a:e0:00:ac:7b:2e:cc:dc:1d:e6:b1:
         58:71:1d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 09:21:05 2025 by rpki-client