Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/323830343a346364343a343030303a3a2f33342d3334203d3e20323637333935.roa
File:                     323830343a346364343a343030303a3a2f33342d3334203d3e20323637333935.roa (raw, json)
Hash identifier:          JpTy8XU4FcWCWGBWw0+hIQ8scbg+NzpihQTX+2840BM=
Subject key identifier:   0E:57:1C:F2:DE:F9:0E:12:25:E4:4C:8B:9D:68:EF:C7:95:DB:55:86
Certificate issuer:       /CN=891F7710A149035BE2C13EAA45697B7BC29B0E36
Certificate serial:       6B2B47AA95F93A60DA1D8657D0FB486366F99C86
Authority key identifier: 89:1F:77:10:A1:49:03:5B:E2:C1:3E:AA:45:69:7B:7B:C2:9B:0E:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/891F7710A149035BE2C13EAA45697B7BC29B0E36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/323830343a346364343a343030303a3a2f33342d3334203d3e20323637333935.roa
Signing time:             Fri 23 Aug 2024 19:56:52 +0000
ROA not before:           Fri 23 Aug 2024 19:51:52 +0000
ROA not after:            Fri 22 Aug 2025 19:56:52 +0000
asID:                     267395
IP address blocks:        2804:4cd4:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:2b:47:aa:95:f9:3a:60:da:1d:86:57:d0:fb:48:63:66:f9:9c:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891F7710A149035BE2C13EAA45697B7BC29B0E36
        Validity
            Not Before: Aug 23 19:51:52 2024 GMT
            Not After : Aug 22 19:56:52 2025 GMT
        Subject: CN=0E571CF2DEF90E1225E44C8B9D68EFC795DB5586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5a:5c:6f:4a:68:79:b8:3a:8c:98:e0:48:4a:
                    74:e6:53:d6:c5:d6:7d:55:58:52:5f:bc:70:2a:da:
                    1f:f5:dc:54:c2:41:fb:df:60:f9:26:a4:fc:86:30:
                    5a:cf:ef:ca:ba:1f:1d:30:20:ef:d3:5b:b3:1c:98:
                    dc:64:87:af:2a:31:6e:77:3c:7a:e9:cf:de:76:b4:
                    78:6b:83:12:c9:62:0b:2f:fc:79:16:c7:9e:6f:40:
                    eb:df:32:74:7a:b6:9f:31:05:01:cb:e7:68:c9:f6:
                    6e:21:93:39:82:fd:44:93:76:da:50:a4:9c:fb:9c:
                    17:f2:4b:fa:89:bc:6f:60:27:c5:91:13:49:b6:f5:
                    91:fb:29:58:7c:e5:54:2d:7d:0b:7d:5d:25:5d:79:
                    21:61:0e:d0:32:f6:29:a0:33:41:e0:58:5f:fd:3a:
                    fe:58:7a:ca:a2:86:6c:95:00:d2:da:6e:24:d8:71:
                    31:6d:41:c8:19:92:c0:f6:54:21:7e:71:78:3d:7f:
                    91:64:61:43:6c:bf:91:1c:a4:15:80:21:40:39:49:
                    b3:62:bf:3c:46:16:27:6d:cc:31:aa:cd:f6:a3:b9:
                    bb:0f:41:88:fb:c1:43:ed:32:70:ec:cc:fd:48:79:
                    e8:96:9e:53:df:3f:96:4f:ce:66:79:28:33:88:35:
                    9a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:57:1C:F2:DE:F9:0E:12:25:E4:4C:8B:9D:68:EF:C7:95:DB:55:86
            X509v3 Authority Key Identifier:
                keyid:89:1F:77:10:A1:49:03:5B:E2:C1:3E:AA:45:69:7B:7B:C2:9B:0E:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/891F7710A149035BE2C13EAA45697B7BC29B0E36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/891F7710A149035BE2C13EAA45697B7BC29B0E36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/323830343a346364343a343030303a3a2f33342d3334203d3e20323637333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4cd4:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         17:7a:cd:af:07:e1:81:c2:d5:fe:d6:ea:b3:3a:79:d5:13:c6:
         7e:b6:3b:c9:08:7e:21:ee:5b:d3:d7:c9:6c:f2:7a:dd:d0:1e:
         5c:4d:8c:8c:f3:eb:94:b6:bd:22:ae:dc:04:33:80:a0:e4:94:
         91:90:03:cf:04:23:49:88:20:c9:ef:83:99:8b:fe:53:2a:e3:
         28:3c:84:cf:c2:23:ac:70:61:f3:e4:4e:05:2e:83:33:83:d9:
         43:1c:a1:31:f5:29:4b:07:21:f5:37:8a:48:96:6d:67:df:83:
         d2:41:d0:b4:2e:b2:1b:3d:3c:ba:e6:14:b8:3a:49:17:e3:89:
         33:6a:1e:f2:3f:d1:9a:e6:3a:9a:4e:61:f7:f5:b3:0c:3c:cd:
         e8:43:f5:f4:2d:79:dc:47:22:47:c5:d3:48:31:04:57:3a:17:
         d6:89:9e:c1:b7:8f:68:0d:cf:e5:75:b4:16:09:7f:bb:70:22:
         a8:11:58:03:ae:8e:bb:4c:c7:3b:ca:97:3d:b6:d9:bb:4f:22:
         39:1a:7b:01:05:df:dd:c6:90:1f:92:bd:91:fc:19:ec:e1:b9:
         98:d2:8c:a0:38:6b:20:db:23:63:1f:ac:44:a6:57:ef:6e:7a:
         c5:6c:af:ec:f6:37:c5:65:ca:37:47:f6:7e:95:e3:44:cb:7b:
         08:37:90:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:41 2025 by rpki-client