Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9rFbKoycy9w6yB2fKvKmUkuGRR3vDpkNN9qxu4ofFT9/0/323830343a353463633a3a2f33322d313238203d3e20323638363730.roa
File:                     323830343a353463633a3a2f33322d313238203d3e20323638363730.roa (raw, json)
Hash identifier:          TR+B8XL/8U5OmjM36aYW2kp3AuoyErqakxgqeRISu5Q=
Subject key identifier:   04:75:68:AC:00:90:8B:D5:71:9D:8A:3A:5E:13:9A:30:96:0D:5E:D6
Certificate issuer:       /CN=63D91D63AA405003A381126D88C9CFAAA8693918
Certificate serial:       2335EFA6F3AD9B336B362E3094ED981125AFCCA6
Authority key identifier: 63:D9:1D:63:AA:40:50:03:A3:81:12:6D:88:C9:CF:AA:A8:69:39:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63D91D63AA405003A381126D88C9CFAAA8693918.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9rFbKoycy9w6yB2fKvKmUkuGRR3vDpkNN9qxu4ofFT9/0/323830343a353463633a3a2f33322d313238203d3e20323638363730.roa
Signing time:             Wed 05 Mar 2025 13:28:49 +0000
ROA not before:           Wed 05 Mar 2025 13:23:49 +0000
ROA not after:            Wed 04 Mar 2026 13:28:49 +0000
asID:                     268670
IP address blocks:        2804:54cc::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:35:ef:a6:f3:ad:9b:33:6b:36:2e:30:94:ed:98:11:25:af:cc:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63D91D63AA405003A381126D88C9CFAAA8693918
        Validity
            Not Before: Mar  5 13:23:49 2025 GMT
            Not After : Mar  4 13:28:49 2026 GMT
        Subject: CN=047568AC00908BD5719D8A3A5E139A30960D5ED6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5e:3d:82:16:12:aa:2d:30:32:43:8f:9a:ec:
                    a8:a0:21:ac:3d:9f:cc:e6:06:d1:28:e0:73:c5:89:
                    e9:df:5f:a9:87:75:37:50:d2:8e:99:c1:8a:ac:ff:
                    4f:2a:f4:61:bf:57:ef:ab:a9:dd:06:10:25:9c:0f:
                    51:f5:78:97:e0:17:b2:67:a8:a8:9b:a8:92:26:bf:
                    a7:bc:4a:79:5a:fb:ea:af:de:a0:77:53:a3:15:db:
                    96:f0:12:f2:a5:01:24:a7:89:44:83:80:36:a6:38:
                    ec:1c:63:c5:1d:d5:ba:2d:de:86:ca:dc:37:00:c0:
                    e6:aa:5d:0b:fb:92:d1:21:f4:a0:4e:09:85:0e:ec:
                    fe:4e:4f:78:60:e4:2c:a3:11:8f:cf:62:12:e0:64:
                    84:9a:b2:22:86:de:7b:ea:19:6c:f9:b0:e9:29:ea:
                    f3:5c:a3:89:4d:48:fc:9e:ae:9c:c7:d6:3c:57:69:
                    59:fe:68:d3:ce:ee:56:b8:0a:56:a1:2a:1b:23:46:
                    9b:0f:75:09:ac:bb:76:a2:09:c4:32:0f:69:b1:e8:
                    f6:16:71:fb:59:e9:2d:33:76:89:3a:79:bb:05:7c:
                    af:38:4b:9d:3d:9e:20:b1:fe:81:e1:c0:13:a8:0d:
                    1b:e8:05:bd:3f:8d:28:31:85:42:5b:13:51:9c:47:
                    6a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:75:68:AC:00:90:8B:D5:71:9D:8A:3A:5E:13:9A:30:96:0D:5E:D6
            X509v3 Authority Key Identifier:
                keyid:63:D9:1D:63:AA:40:50:03:A3:81:12:6D:88:C9:CF:AA:A8:69:39:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9rFbKoycy9w6yB2fKvKmUkuGRR3vDpkNN9qxu4ofFT9/0/63D91D63AA405003A381126D88C9CFAAA8693918.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63D91D63AA405003A381126D88C9CFAAA8693918.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9rFbKoycy9w6yB2fKvKmUkuGRR3vDpkNN9qxu4ofFT9/0/323830343a353463633a3a2f33322d313238203d3e20323638363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:b9:2e:0f:81:69:0f:d8:30:97:32:f0:fe:ac:64:64:c7:86:
         be:83:cc:da:6f:91:51:fb:79:9e:79:ee:32:b0:4c:ca:60:d7:
         de:e7:9d:07:1b:e4:e1:4b:f2:fb:e4:d3:d1:4c:b0:07:3b:c6:
         54:b1:ee:77:11:e5:1b:1a:95:74:59:de:d3:7b:8f:87:47:10:
         56:7b:be:e8:ad:e8:95:54:1f:25:17:f6:43:f6:1f:f9:83:43:
         f1:22:36:16:bc:3a:5e:e1:f7:c1:c7:f7:78:d5:ed:d2:ca:0e:
         d0:f5:a8:15:bd:62:44:d2:b0:30:cc:93:92:e0:53:01:0e:71:
         c5:4f:95:97:19:46:8b:a2:a7:36:b3:73:fb:5b:a9:bb:ce:5c:
         a7:4a:3d:e5:5a:1c:95:75:49:90:a3:aa:dc:2a:f7:da:8a:62:
         54:4d:0b:fe:93:bb:36:3c:3f:b1:79:8c:6b:31:e8:4f:03:db:
         16:43:d6:44:a5:17:48:2f:e9:38:4c:20:61:12:c3:f6:c5:13:
         3d:01:12:23:22:ee:e3:2b:50:89:a0:1a:0e:28:7f:27:f0:de:
         0f:d0:64:8c:11:46:dd:a9:4b:d4:c4:e2:99:9c:51:e7:dd:79:
         a1:dc:7f:5d:03:b2:e3:33:96:16:a6:aa:3a:f4:92:5d:25:b5:
         6c:38:f8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:29:17 2025 by rpki-client