Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATkdqEFa9Po6oWF79RU4QwkpKbQ5ENnZMQC67bwVq4NQ/0/323830343a366239633a383030303a3a2f33332d3333203d3e20323730343132.roa
File:                     323830343a366239633a383030303a3a2f33332d3333203d3e20323730343132.roa (raw, json)
Hash identifier:          TI37/qpLxfSEirLDvHmI9ID0FSwvT1hgY9nE1QhIsdc=
Subject key identifier:   1F:F7:39:1F:9A:7C:5F:A5:5D:22:F7:4B:D5:3B:FC:77:12:47:1D:B5
Certificate issuer:       /CN=E725E9B4F82190D8D57184CFCE7A132D323D9AAB
Certificate serial:       3968F63FF2D6C367B44070A4095F23EB0584EF84
Authority key identifier: E7:25:E9:B4:F8:21:90:D8:D5:71:84:CF:CE:7A:13:2D:32:3D:9A:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E725E9B4F82190D8D57184CFCE7A132D323D9AAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATkdqEFa9Po6oWF79RU4QwkpKbQ5ENnZMQC67bwVq4NQ/0/323830343a366239633a383030303a3a2f33332d3333203d3e20323730343132.roa
Signing time:             Fri 17 Jan 2025 21:05:45 +0000
ROA not before:           Fri 17 Jan 2025 21:00:45 +0000
ROA not after:            Fri 16 Jan 2026 21:05:45 +0000
asID:                     270412
IP address blocks:        2804:6b9c:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:68:f6:3f:f2:d6:c3:67:b4:40:70:a4:09:5f:23:eb:05:84:ef:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E725E9B4F82190D8D57184CFCE7A132D323D9AAB
        Validity
            Not Before: Jan 17 21:00:45 2025 GMT
            Not After : Jan 16 21:05:45 2026 GMT
        Subject: CN=1FF7391F9A7C5FA55D22F74BD53BFC7712471DB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1d:f1:fb:39:1c:4a:90:61:67:43:b2:4b:05:
                    d1:45:03:25:3e:52:a8:84:5f:73:19:2a:c5:70:9f:
                    2a:39:b4:fe:49:79:67:16:b4:b5:cf:01:4b:30:79:
                    b4:69:b7:82:31:ab:77:50:53:01:7b:e6:ba:ff:b9:
                    e9:10:60:17:df:a3:09:7c:d1:6a:6a:c0:b2:3a:a5:
                    9c:f0:36:8e:4f:ae:9e:3a:39:11:55:c3:86:43:0e:
                    77:91:e0:69:53:99:12:92:01:e9:04:27:d5:6e:3b:
                    70:70:9b:cb:16:fa:79:ce:96:fd:e2:76:99:fa:1c:
                    35:f3:7c:4d:6f:fa:01:30:df:d4:44:17:6c:c0:7b:
                    58:96:bd:3c:6b:42:54:80:4a:cd:fd:15:e4:e5:17:
                    03:18:fa:db:2d:c7:13:6c:83:c5:3d:33:79:33:a4:
                    bc:3b:4f:ae:04:9c:44:5c:d2:eb:12:02:fc:b4:90:
                    90:01:d6:e9:d9:88:a2:7b:fa:c6:4c:88:05:c4:71:
                    42:53:17:dd:24:47:49:33:c6:dd:16:92:e5:c4:fd:
                    9e:c0:2b:d9:55:5e:01:0b:7a:50:ea:43:84:2a:c4:
                    11:5a:a6:f0:9d:98:3a:ed:f2:78:37:94:05:1c:51:
                    ca:e3:46:d4:1f:7b:0d:92:7e:d1:31:cf:b2:6c:2a:
                    43:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F7:39:1F:9A:7C:5F:A5:5D:22:F7:4B:D5:3B:FC:77:12:47:1D:B5
            X509v3 Authority Key Identifier:
                keyid:E7:25:E9:B4:F8:21:90:D8:D5:71:84:CF:CE:7A:13:2D:32:3D:9A:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATkdqEFa9Po6oWF79RU4QwkpKbQ5ENnZMQC67bwVq4NQ/0/E725E9B4F82190D8D57184CFCE7A132D323D9AAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E725E9B4F82190D8D57184CFCE7A132D323D9AAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATkdqEFa9Po6oWF79RU4QwkpKbQ5ENnZMQC67bwVq4NQ/0/323830343a366239633a383030303a3a2f33332d3333203d3e20323730343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6b9c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         36:6e:3d:e0:81:f8:80:0f:e5:4e:46:e8:c8:eb:b5:15:e4:02:
         0c:ed:5f:0f:ff:68:64:b6:f4:2a:62:97:71:92:46:bf:93:78:
         2e:ec:f8:b4:3d:26:20:a2:48:9e:e9:53:f0:12:58:d2:0e:d7:
         0b:12:0e:3d:02:ca:ac:ed:6a:e8:0b:23:47:f7:ed:cb:01:a7:
         7a:28:d2:52:09:a6:cd:1b:ee:5d:9a:11:18:c9:4c:dd:b5:14:
         48:17:21:9f:54:cc:b2:ae:8b:f7:bf:eb:ef:b8:d2:3d:24:c4:
         69:4b:ec:b9:4e:60:ed:be:5b:c5:54:84:1e:6a:f7:90:bf:53:
         5d:6a:ea:48:e7:e0:a7:7b:ab:0f:fd:da:6b:b5:ba:28:a1:cc:
         00:fe:28:8d:1a:d2:2d:3b:8b:2c:c0:7c:63:49:db:29:88:29:
         bb:05:d5:64:1c:47:09:2c:15:da:ba:41:07:81:a0:cb:b5:06:
         7e:d0:f1:b3:84:b1:3b:f8:db:04:34:ab:ba:3b:20:4b:28:ff:
         20:00:c8:d3:79:47:bf:68:5f:a4:e7:63:b2:4b:4d:32:d3:35:
         b1:42:19:dd:e1:61:fa:70:b5:46:4b:e0:3e:3b:bb:3f:0d:91:
         59:29:c9:a4:e8:7d:16:23:c1:a2:57:20:0e:65:b7:a1:dc:65:
         7c:46:fa:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:22:19 2025 by rpki-client