Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a643030343a3a2f34382d3438203d3e20323634333434.roa
File:                     323830343a323637343a643030343a3a2f34382d3438203d3e20323634333434.roa (raw, json)
Hash identifier:          iMkFbEhXybyD/zVb/FNh66r8LWW+FTCEx/BahPWXDDw=
Subject key identifier:   FB:58:7C:EA:ED:DC:15:11:C5:D7:F0:16:F8:B0:81:7A:4F:0E:2C:2B
Certificate issuer:       /CN=6F414F9210A10E5720E75030635478050D4C7C97
Certificate serial:       6EE072E09B45B7B8ED28C9D4433929AC04D219A4
Authority key identifier: 6F:41:4F:92:10:A1:0E:57:20:E7:50:30:63:54:78:05:0D:4C:7C:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F414F9210A10E5720E75030635478050D4C7C97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a643030343a3a2f34382d3438203d3e20323634333434.roa
Signing time:             Wed 05 Mar 2025 20:56:25 +0000
ROA not before:           Wed 05 Mar 2025 20:51:25 +0000
ROA not after:            Wed 04 Mar 2026 20:56:25 +0000
asID:                     264344
IP address blocks:        2804:2674:d004::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:e0:72:e0:9b:45:b7:b8:ed:28:c9:d4:43:39:29:ac:04:d2:19:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F414F9210A10E5720E75030635478050D4C7C97
        Validity
            Not Before: Mar  5 20:51:25 2025 GMT
            Not After : Mar  4 20:56:25 2026 GMT
        Subject: CN=FB587CEAEDDC1511C5D7F016F8B0817A4F0E2C2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:40:55:d7:9c:09:ac:55:7e:66:c5:e0:2e:8a:
                    54:4d:a6:eb:31:de:42:dc:c6:2b:54:e8:34:ca:bc:
                    66:7c:dc:1c:c7:29:25:34:04:1f:95:dd:b8:96:04:
                    84:3a:07:27:c3:72:21:0f:7d:e7:bc:5f:87:9c:92:
                    b6:c7:91:79:da:c4:62:fd:b6:b9:c4:24:d3:6e:0f:
                    5d:9d:d7:85:04:f5:13:3d:78:bc:48:86:c6:02:c7:
                    ac:4a:6d:9c:65:97:55:c7:62:51:f2:33:f1:95:8d:
                    da:b1:88:1e:d0:5a:03:c0:33:f6:c1:20:47:0c:d5:
                    6f:35:63:a3:7d:82:c2:86:15:b4:e9:22:52:2d:d6:
                    b4:06:34:50:08:a3:dd:fd:03:b7:e2:5d:6d:88:92:
                    bd:2a:96:1c:41:39:11:e4:1e:98:15:58:dd:4f:cb:
                    c0:b4:00:71:a5:7d:50:67:13:04:89:a8:38:02:58:
                    ce:be:09:ea:11:97:4e:22:66:c4:fd:86:02:58:05:
                    d1:d4:b6:79:4f:1c:4c:ca:ea:fb:1f:e1:27:64:13:
                    ec:90:ca:d1:75:09:2a:ab:8f:87:e3:13:ec:72:88:
                    f0:51:cc:68:3c:b1:f2:fd:42:91:4b:64:d9:39:76:
                    05:bc:89:13:3a:f9:5a:ba:52:0d:e6:c3:56:e4:41:
                    0e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:58:7C:EA:ED:DC:15:11:C5:D7:F0:16:F8:B0:81:7A:4F:0E:2C:2B
            X509v3 Authority Key Identifier:
                keyid:6F:41:4F:92:10:A1:0E:57:20:E7:50:30:63:54:78:05:0D:4C:7C:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/6F414F9210A10E5720E75030635478050D4C7C97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F414F9210A10E5720E75030635478050D4C7C97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a643030343a3a2f34382d3438203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:d004::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:a7:9e:d0:08:87:b3:0e:71:32:9a:2c:18:a2:12:b3:8c:b5:
         49:de:22:83:a6:f7:06:a9:42:aa:86:55:cc:f4:b8:6d:e8:e9:
         a3:bf:7a:1d:2a:10:c2:cf:9a:75:9d:72:85:39:bd:4e:49:de:
         49:a3:b5:d6:7c:a4:3e:7c:0f:0e:72:7a:9d:ab:22:ad:aa:28:
         a1:01:bb:7c:8c:27:c6:6d:42:76:fa:56:2b:fb:87:05:48:e6:
         c4:32:6f:75:e6:d8:5a:3c:67:40:8b:2b:14:31:d1:e3:4e:ca:
         2c:e5:d8:10:d9:9e:68:ba:28:be:9d:e4:1e:03:26:3c:b1:15:
         5d:05:78:f7:af:8b:31:b5:1f:df:29:21:37:1b:78:9f:72:e3:
         ea:59:8a:62:87:cf:db:ef:25:b8:c8:58:99:6c:ad:f0:68:4d:
         ee:0b:8f:2d:10:9a:09:24:c0:e3:e9:bf:78:9b:36:ee:02:5f:
         33:5b:c2:98:8b:96:bd:0e:2b:6a:85:a4:aa:3b:21:e9:76:72:
         61:bc:28:64:ac:93:04:1b:af:3a:ec:b4:65:ff:16:b4:5f:78:
         55:42:1d:bf:80:c1:af:91:93:32:ed:f6:21:e7:03:30:b0:37:
         98:ec:32:cc:ef:10:fe:65:de:72:e8:1b:1f:30:cd:96:29:ae:
         8d:7b:d1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:11:41 2025 by rpki-client