Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/323830343a366663383a3a2f33322d3438203d3e20323730363834.roa
File:                     323830343a366663383a3a2f33322d3438203d3e20323730363834.roa (raw, json)
Hash identifier:          hLr7njmOtWR0y+W5d4GnNpP/p7e2Wdgph5uEae8g33c=
Subject key identifier:   9F:68:C7:5D:AC:08:84:E9:74:FB:B3:3A:F0:6D:9F:D7:04:67:D9:F1
Certificate issuer:       /CN=F365DB0174F24492BBABCEFE755F363C309D4654
Certificate serial:       158F2C982F8839FF3FFC4E65057810BDFE4AECFD
Authority key identifier: F3:65:DB:01:74:F2:44:92:BB:AB:CE:FE:75:5F:36:3C:30:9D:46:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F365DB0174F24492BBABCEFE755F363C309D4654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/323830343a366663383a3a2f33322d3438203d3e20323730363834.roa
Signing time:             Thu 13 Feb 2025 21:04:00 +0000
ROA not before:           Thu 13 Feb 2025 20:59:00 +0000
ROA not after:            Thu 12 Feb 2026 21:04:00 +0000
asID:                     270684
IP address blocks:        2804:6fc8::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:8f:2c:98:2f:88:39:ff:3f:fc:4e:65:05:78:10:bd:fe:4a:ec:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365DB0174F24492BBABCEFE755F363C309D4654
        Validity
            Not Before: Feb 13 20:59:00 2025 GMT
            Not After : Feb 12 21:04:00 2026 GMT
        Subject: CN=9F68C75DAC0884E974FBB33AF06D9FD70467D9F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:45:9d:25:54:c9:1c:36:52:db:d9:b0:4a:4e:
                    5d:dd:18:91:60:b4:d4:d3:94:23:7a:8c:f4:8e:fb:
                    de:4b:73:6f:9b:07:a7:64:3b:21:ca:22:a7:68:d0:
                    a8:08:30:8a:7e:ff:76:95:fd:97:6e:7b:8b:ba:c5:
                    25:91:9f:f4:70:77:b8:3b:ee:b7:ce:3c:25:c5:ec:
                    59:ae:46:03:20:23:87:2c:ea:d4:65:0f:6e:d4:20:
                    6d:92:a8:2d:86:4f:40:99:6d:03:24:6e:a2:02:ce:
                    41:fe:55:37:e0:d3:87:9c:2c:40:8b:c6:bb:15:e8:
                    d9:e3:ee:a7:d9:93:b2:94:fd:e0:cb:d4:3e:58:97:
                    73:46:7b:c7:0f:6b:ec:f9:27:8a:bf:20:6e:8d:7c:
                    dc:f7:a1:d0:ad:db:3c:7d:55:61:41:6c:97:ea:22:
                    ed:b2:83:6c:00:56:5b:4d:9a:4b:4b:80:8d:0e:01:
                    ea:b4:fb:39:82:00:c7:0f:e1:0e:82:ec:14:71:2d:
                    57:95:9a:30:3c:ea:c0:62:ae:8a:39:3c:a9:35:0a:
                    72:11:a7:f0:43:21:61:4d:2f:16:f4:71:1e:ca:ee:
                    de:cd:92:e9:86:a1:5c:a5:d5:23:de:6f:e1:5e:4f:
                    56:4e:cb:74:10:ac:5a:c4:b3:90:38:69:98:41:b8:
                    22:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:68:C7:5D:AC:08:84:E9:74:FB:B3:3A:F0:6D:9F:D7:04:67:D9:F1
            X509v3 Authority Key Identifier:
                keyid:F3:65:DB:01:74:F2:44:92:BB:AB:CE:FE:75:5F:36:3C:30:9D:46:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/F365DB0174F24492BBABCEFE755F363C309D4654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F365DB0174F24492BBABCEFE755F363C309D4654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/323830343a366663383a3a2f33322d3438203d3e20323730363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6fc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:54:ce:1c:71:4d:c0:d6:cb:de:00:35:db:cb:7c:04:b4:e2:
         a9:c0:df:93:46:fa:bd:ee:00:34:d8:76:f5:5b:cf:c7:7e:9d:
         5e:82:7f:a6:09:a9:b0:0a:b6:5a:46:94:f0:9e:c8:21:81:57:
         39:8b:e3:7c:52:a9:77:3e:8b:47:9b:5c:3b:28:5a:e3:ab:2c:
         0d:94:c5:e5:6b:95:b0:2f:c6:43:6d:fe:80:1f:98:49:81:2f:
         44:bc:60:73:1b:6b:50:59:5e:91:9e:8a:13:c3:dc:cb:5a:73:
         cf:b7:d1:df:cf:7c:f2:2a:05:c9:0e:71:7d:9b:d5:83:8b:47:
         a5:22:21:f5:15:f0:03:15:ea:43:6c:5f:04:06:26:76:9a:39:
         cd:e8:1d:2e:c3:ca:19:df:28:ba:26:f0:2d:76:11:32:04:a7:
         ac:92:0d:b5:56:16:a1:6e:98:98:0a:2a:be:9c:36:6d:a4:36:
         61:8b:2c:f7:bb:f2:91:b8:95:6b:b4:36:de:dd:5d:e7:2e:83:
         21:7f:ed:98:92:28:8e:bf:19:1e:8b:d5:3e:05:c1:57:32:7d:
         4a:d8:e9:73:38:fe:f7:24:ab:89:f4:bb:b3:bd:77:a7:84:9e:
         65:53:35:b4:15:f7:d4:ab:ec:3e:3d:27:2c:da:d0:4b:72:a6:
         4f:6f:36:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:04:47 2025 by rpki-client