Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/323830343a346364343a3a2f33332d3333203d3e20323637333935.roa
File:                     323830343a346364343a3a2f33332d3333203d3e20323637333935.roa (raw, json)
Hash identifier:          vs6KQo8pF1RNyc2rkq7qackE5hDXn1Ksn3AAtI8+Om0=
Subject key identifier:   D9:CE:36:77:8E:4A:3C:13:25:63:AD:44:24:06:88:B7:09:FF:5B:4B
Certificate issuer:       /CN=891F7710A149035BE2C13EAA45697B7BC29B0E36
Certificate serial:       6DCE6F41118DCDAE74E4E0A1E4142FC1AB69FBEA
Authority key identifier: 89:1F:77:10:A1:49:03:5B:E2:C1:3E:AA:45:69:7B:7B:C2:9B:0E:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/891F7710A149035BE2C13EAA45697B7BC29B0E36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/323830343a346364343a3a2f33332d3333203d3e20323637333935.roa
Signing time:             Fri 23 Aug 2024 19:56:49 +0000
ROA not before:           Fri 23 Aug 2024 19:51:49 +0000
ROA not after:            Fri 22 Aug 2025 19:56:49 +0000
asID:                     267395
IP address blocks:        2804:4cd4::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:ce:6f:41:11:8d:cd:ae:74:e4:e0:a1:e4:14:2f:c1:ab:69:fb:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891F7710A149035BE2C13EAA45697B7BC29B0E36
        Validity
            Not Before: Aug 23 19:51:49 2024 GMT
            Not After : Aug 22 19:56:49 2025 GMT
        Subject: CN=D9CE36778E4A3C132563AD44240688B709FF5B4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d2:ed:8e:f6:bd:28:64:36:6a:ed:fe:c9:5e:
                    e1:23:11:f1:fd:a0:74:8b:14:48:e2:64:a0:df:14:
                    ac:f7:83:53:10:1b:91:f5:27:fd:c4:2f:24:6a:9c:
                    0e:f4:17:44:34:71:c3:70:44:0b:af:38:ea:55:59:
                    19:63:b0:99:21:80:96:47:90:a7:e3:82:4b:ff:f7:
                    c5:f0:02:df:30:b5:81:72:43:ae:59:c1:e7:4c:74:
                    6d:23:17:86:62:fd:9b:92:1f:34:a2:a5:aa:03:17:
                    31:81:59:82:da:b6:90:68:88:24:15:70:26:75:b5:
                    81:24:57:fd:00:2d:d7:ed:6e:e1:91:2e:b6:85:37:
                    e1:3d:9a:dd:c9:e2:2a:43:37:11:fd:ee:c9:33:cd:
                    f4:9f:06:5c:6b:8c:90:21:e1:09:6e:45:9c:bc:7e:
                    56:98:8d:f0:10:e0:83:50:c1:a6:ac:c1:51:9a:45:
                    ac:40:0e:d3:cd:87:3f:8c:67:1a:1d:8c:68:64:0c:
                    30:94:39:d0:62:ff:de:50:a3:9b:2d:b5:e9:61:b8:
                    3b:d2:d7:6e:45:52:95:db:e6:2a:d6:ab:da:9f:b0:
                    d2:e5:0f:e4:6c:2f:35:6f:fe:0e:7f:65:1c:8c:bf:
                    54:79:93:ba:9e:bd:67:ac:b1:9e:c0:5f:be:ea:6e:
                    2b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:CE:36:77:8E:4A:3C:13:25:63:AD:44:24:06:88:B7:09:FF:5B:4B
            X509v3 Authority Key Identifier:
                keyid:89:1F:77:10:A1:49:03:5B:E2:C1:3E:AA:45:69:7B:7B:C2:9B:0E:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/891F7710A149035BE2C13EAA45697B7BC29B0E36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/891F7710A149035BE2C13EAA45697B7BC29B0E36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/323830343a346364343a3a2f33332d3333203d3e20323637333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4cd4::/33

    Signature Algorithm: sha256WithRSAEncryption
         37:6a:2d:4d:d6:fe:d8:a8:53:55:3e:ee:54:58:b5:e3:cc:6d:
         bf:c4:e9:b4:aa:1c:73:a6:60:c6:2b:fb:79:93:d2:cf:f2:66:
         b9:a8:fd:dd:bc:8a:d6:cf:d2:04:81:a6:1c:a8:86:38:4c:e0:
         cf:7b:93:79:bc:64:25:f8:e0:8b:26:1c:d0:9c:8a:93:2d:10:
         5a:c7:60:f0:d1:ed:6c:3b:95:c5:06:a7:c4:4f:37:29:1a:c1:
         7f:f2:6e:57:a2:76:c4:4b:81:0a:70:99:3b:24:ff:fa:93:6a:
         75:82:9a:63:b8:f8:15:23:c3:5f:e3:8c:37:91:fb:d7:ba:4c:
         83:4d:e6:cf:cd:86:05:f0:cd:cd:f4:29:52:6e:3a:19:55:86:
         ad:1c:f4:ca:3a:e9:dd:db:3f:e0:8d:95:bd:da:66:67:43:35:
         75:cb:df:5c:ed:e5:0d:52:cb:ab:05:e8:f0:83:80:a1:8d:12:
         9d:d3:a3:c9:10:d1:61:f1:67:3b:a0:e7:8d:cf:92:85:34:cc:
         30:cf:fb:6f:cf:a7:15:1a:91:3b:74:bf:35:24:c5:7e:71:49:
         e8:9f:7e:a2:91:d5:e2:ba:b8:95:9e:a6:0d:a4:a1:f6:26:23:
         7f:bc:2a:4e:1d:39:a3:0e:d8:03:fe:b5:d1:71:5b:7e:d1:40:
         2d:e8:11:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:08 2025 by rpki-client