Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/323830343a373463303a363a3a2f34382d3438203d3e20323731303031.roa
File:                     323830343a373463303a363a3a2f34382d3438203d3e20323731303031.roa (raw, json)
Hash identifier:          Hsrvj/TB2roXOEb6pFYXm2pkCmxMpu5m6ezauYUI/2E=
Subject key identifier:   DE:6F:E4:E2:D0:ED:BC:DD:C8:D8:0E:6A:A8:F5:0F:FB:B5:58:25:DA
Certificate issuer:       /CN=B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81
Certificate serial:       3EF85C4B03A9AFCAE903872A1A27A0D0C3011E20
Authority key identifier: B6:C5:FB:85:7E:69:A9:04:49:73:FA:30:62:AA:1D:6F:BF:5C:4A:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/323830343a373463303a363a3a2f34382d3438203d3e20323731303031.roa
Signing time:             Thu 06 Mar 2025 02:14:52 +0000
ROA not before:           Thu 06 Mar 2025 02:09:52 +0000
ROA not after:            Thu 05 Mar 2026 02:14:52 +0000
asID:                     271001
IP address blocks:        2804:74c0:6::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:f8:5c:4b:03:a9:af:ca:e9:03:87:2a:1a:27:a0:d0:c3:01:1e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81
        Validity
            Not Before: Mar  6 02:09:52 2025 GMT
            Not After : Mar  5 02:14:52 2026 GMT
        Subject: CN=DE6FE4E2D0EDBCDDC8D80E6AA8F50FFBB55825DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7c:7f:b3:94:29:a9:9f:6d:7d:40:12:86:0c:
                    7a:d1:b6:7b:9e:8b:dd:be:92:a7:80:49:05:ee:74:
                    85:7c:f1:d2:2a:42:11:dc:6b:cf:d2:d0:e7:8e:7a:
                    56:3a:c3:57:48:86:8e:ab:9a:94:18:8b:c2:38:4f:
                    2f:1b:67:18:34:a1:df:62:05:ac:95:02:6c:95:ae:
                    55:18:d2:f2:96:10:ae:c5:ee:cb:06:e3:87:44:f4:
                    0f:52:39:e7:e8:2b:4c:84:f4:c3:ca:ab:ca:55:4f:
                    7e:60:22:78:c0:c6:ff:50:c1:21:69:48:8e:65:9d:
                    d4:21:20:e3:e4:e1:e8:1c:30:29:43:aa:b7:18:e8:
                    fc:e0:1e:b8:83:24:c6:8f:64:a4:53:75:0a:f3:a2:
                    5d:e5:40:83:d1:79:a8:c9:49:7c:47:3b:e5:e6:a5:
                    e3:8c:fa:a1:88:3b:ae:ca:8c:94:05:58:59:f2:78:
                    03:f9:06:12:ab:f8:2a:1a:55:ce:f8:cd:30:c9:af:
                    5c:5e:4f:5d:64:9c:d5:9c:89:1e:c8:8a:59:43:f5:
                    b2:e9:60:c4:fe:3b:8d:a7:8a:b9:89:7a:16:88:09:
                    e0:09:dd:4f:c8:6a:58:70:6b:58:d3:c7:ce:e9:dd:
                    24:28:98:dd:0c:36:5f:85:11:39:9f:71:29:5a:78:
                    4d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:6F:E4:E2:D0:ED:BC:DD:C8:D8:0E:6A:A8:F5:0F:FB:B5:58:25:DA
            X509v3 Authority Key Identifier:
                keyid:B6:C5:FB:85:7E:69:A9:04:49:73:FA:30:62:AA:1D:6F:BF:5C:4A:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/323830343a373463303a363a3a2f34382d3438203d3e20323731303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74c0:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:ed:81:3d:9e:72:58:19:5d:be:56:b7:83:1b:91:89:6b:99:
         56:e9:d3:02:0e:a6:0a:f7:4d:74:a5:c3:80:2d:ba:41:5a:4f:
         b3:28:b6:f2:50:a1:1b:06:fc:3a:69:a0:35:0c:08:70:17:19:
         ff:a2:76:4e:82:c0:fa:98:a9:08:9b:23:fa:9c:b2:60:8a:4c:
         45:0d:6c:90:cf:1d:85:80:3b:21:6b:21:2d:23:03:2b:59:aa:
         21:a6:d7:42:5f:30:34:fd:c4:00:4f:c6:6c:ac:05:2f:17:09:
         83:88:60:92:8f:34:04:14:d5:b9:2e:fd:e2:31:95:c9:84:30:
         90:79:18:27:88:67:e7:10:30:05:12:a6:48:31:f5:bc:ae:4e:
         8e:a1:3e:b8:e3:27:83:96:c2:d0:2d:96:3b:ac:41:79:f4:38:
         4d:5a:21:76:64:02:71:f2:05:80:11:e5:10:8d:67:6b:51:b1:
         93:fe:47:7b:6c:2e:6d:2b:5e:a8:3c:64:07:e2:d3:95:7a:47:
         c0:b9:35:56:89:37:93:7a:b7:26:b2:48:5c:a8:31:1a:54:7e:
         14:02:85:2d:de:29:4f:dc:bb:ae:68:55:76:b5:46:06:e9:5f:
         b5:ea:d5:0b:53:72:67:7a:3c:a9:c8:1e:a2:e4:64:89:c1:4a:
         57:82:ff:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:40:17 2025 by rpki-client