Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/323830343a313337303a3a2f33322d3438203d3e203631393031.roa
File:                     323830343a313337303a3a2f33322d3438203d3e203631393031.roa (raw, json)
Hash identifier:          3GhsA4DWkmNk4W3Mcl4Sn8HGZwh/GhMQN8naGMIG7YA=
Subject key identifier:   FE:F7:13:6A:DA:80:4D:D4:51:16:79:53:44:DD:67:B8:F0:4E:8F:FD
Certificate issuer:       /CN=67ABA859CE6CBA21AD52947722B1512ECD25200B
Certificate serial:       1CC3C39376C7138834357084F1B353FAAED2427C
Authority key identifier: 67:AB:A8:59:CE:6C:BA:21:AD:52:94:77:22:B1:51:2E:CD:25:20:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67ABA859CE6CBA21AD52947722B1512ECD25200B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/323830343a313337303a3a2f33322d3438203d3e203631393031.roa
Signing time:             Tue 12 Mar 2024 18:12:40 +0000
ROA not before:           Tue 12 Mar 2024 18:07:40 +0000
ROA not after:            Tue 11 Mar 2025 18:12:40 +0000
asID:                     61901
IP address blocks:        2804:1370::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:c3:c3:93:76:c7:13:88:34:35:70:84:f1:b3:53:fa:ae:d2:42:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67ABA859CE6CBA21AD52947722B1512ECD25200B
        Validity
            Not Before: Mar 12 18:07:40 2024 GMT
            Not After : Mar 11 18:12:40 2025 GMT
        Subject: CN=FEF7136ADA804DD45116795344DD67B8F04E8FFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e6:da:71:6f:4f:fe:e8:db:7b:d9:da:f1:22:
                    9a:23:16:40:c1:a1:c2:f1:21:7e:d0:fe:65:7f:61:
                    43:7a:55:a7:4c:a0:c4:eb:5a:1d:79:10:54:47:7d:
                    a0:c4:18:17:e2:9e:33:25:1d:cb:94:96:78:23:76:
                    94:a3:6e:e9:8b:30:ee:9b:56:c5:7d:ac:af:23:b8:
                    79:e1:93:1a:fe:77:89:12:5f:33:df:de:93:d5:7d:
                    7c:48:65:f1:47:ac:28:66:0e:5a:aa:7b:4c:60:b2:
                    46:29:61:a0:a0:0e:fd:d9:4c:e2:ca:5c:78:91:30:
                    97:a0:15:71:c4:b2:11:3a:89:b2:ab:d5:56:9e:fa:
                    3d:0f:c2:76:cd:07:53:74:90:45:52:59:43:06:d6:
                    11:b3:59:4d:dc:30:e4:5d:3e:c4:25:c0:2d:44:33:
                    8d:76:76:c2:4e:73:5a:0c:db:a5:de:08:eb:ea:6b:
                    d3:ab:9f:6e:9f:da:77:26:74:03:11:7b:b4:9d:42:
                    52:b7:c3:81:54:84:12:1a:b5:b0:2d:52:c8:c8:cf:
                    66:19:e7:1f:bf:11:55:c6:72:09:4f:11:2a:bd:9f:
                    dd:08:62:63:22:d4:1e:30:a4:49:52:92:aa:cf:88:
                    91:ef:de:a2:3b:50:49:dd:f8:bc:a6:0a:1a:41:f2:
                    7b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F7:13:6A:DA:80:4D:D4:51:16:79:53:44:DD:67:B8:F0:4E:8F:FD
            X509v3 Authority Key Identifier:
                keyid:67:AB:A8:59:CE:6C:BA:21:AD:52:94:77:22:B1:51:2E:CD:25:20:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/67ABA859CE6CBA21AD52947722B1512ECD25200B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67ABA859CE6CBA21AD52947722B1512ECD25200B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/323830343a313337303a3a2f33322d3438203d3e203631393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1370::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:f2:33:00:47:4c:cb:01:9b:2d:1c:bf:64:c2:b3:e4:4f:66:
         81:8e:59:59:33:8b:1b:40:cb:1b:da:19:cb:b1:52:47:22:0d:
         36:f3:b1:eb:3e:d1:a2:32:2b:90:64:69:95:45:f3:ac:38:a3:
         c9:1d:1b:60:bd:e4:0d:97:d2:c0:8f:d4:9d:57:61:f3:8f:5f:
         66:80:72:1d:d8:7e:00:c7:5e:f8:88:67:87:6c:5a:11:18:65:
         1b:e2:3c:34:74:c6:3b:82:57:ca:cc:94:10:78:38:9a:25:d6:
         fc:bf:d3:c1:21:66:65:18:a7:5b:23:d3:e6:f2:e3:55:12:f5:
         a8:e6:76:e9:68:a1:08:36:54:40:6c:6d:c3:24:21:dd:f6:ae:
         0c:95:01:c5:82:77:4e:a7:12:bc:c0:3c:12:46:e3:cb:11:da:
         8b:af:84:e5:c6:bf:ef:0e:8f:3a:98:6b:7b:08:75:b1:d9:b8:
         c0:1c:20:67:b4:b8:a0:96:91:26:74:24:c3:99:5e:0c:e3:3a:
         c1:a2:cb:ee:02:79:07:2f:22:74:e9:28:6e:10:f2:15:ff:fa:
         99:46:30:7b:35:b5:10:df:b6:3b:9d:a0:79:77:85:cf:6c:be:
         25:21:39:ed:c6:89:fa:17:8b:9e:5e:53:85:c3:db:7d:28:69:
         0b:b9:e0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:45 2025 by rpki-client