Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/323830343a316464343a343030303a3a2f33342d3334203d3e20323634333937.roa
File:                     323830343a316464343a343030303a3a2f33342d3334203d3e20323634333937.roa (raw, json)
Hash identifier:          wms6/A1Q4YnWfmZMEBPt8H4hG/ES1/vT9NMaRyoErto=
Subject key identifier:   7A:61:DF:15:D7:55:5B:CA:CE:2A:3F:C0:A0:92:AC:AD:E2:B2:17:9A
Certificate issuer:       /CN=D40D71C26E8C990D22430A76496945930ECE72FE
Certificate serial:       6A903ADA6A04B235F6A89B15A712D0D9D2E282FD
Authority key identifier: D4:0D:71:C2:6E:8C:99:0D:22:43:0A:76:49:69:45:93:0E:CE:72:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40D71C26E8C990D22430A76496945930ECE72FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/323830343a316464343a343030303a3a2f33342d3334203d3e20323634333937.roa
Signing time:             Mon 16 Dec 2024 16:27:46 +0000
ROA not before:           Mon 16 Dec 2024 16:22:46 +0000
ROA not after:            Mon 15 Dec 2025 16:27:46 +0000
asID:                     264397
IP address blocks:        2804:1dd4:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:90:3a:da:6a:04:b2:35:f6:a8:9b:15:a7:12:d0:d9:d2:e2:82:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D40D71C26E8C990D22430A76496945930ECE72FE
        Validity
            Not Before: Dec 16 16:22:46 2024 GMT
            Not After : Dec 15 16:27:46 2025 GMT
        Subject: CN=7A61DF15D7555BCACE2A3FC0A092ACADE2B2179A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5c:ac:36:b9:c6:c3:d3:25:61:a0:16:77:22:
                    f8:3f:84:ed:60:db:6d:5d:67:85:a6:34:17:68:aa:
                    e3:5a:ab:4f:d0:30:6b:51:83:bc:60:3c:65:0c:ee:
                    42:ff:cf:05:b3:2b:77:ea:e8:d6:bc:c1:78:19:69:
                    44:b5:07:68:2b:44:be:4c:3c:2c:7b:7f:de:37:24:
                    93:c4:86:5a:ec:9f:8a:1c:af:02:ed:3a:50:2d:26:
                    df:05:4c:5e:aa:5e:35:88:f4:3e:12:ff:53:bb:31:
                    eb:4b:f9:5b:d0:69:17:2d:cc:a5:1a:3a:c2:30:92:
                    93:02:d9:38:5f:fa:7f:ec:c0:d7:71:9e:34:da:52:
                    56:43:93:7b:5d:68:70:f9:b0:4e:ba:bc:83:8a:1c:
                    6b:23:70:14:53:ce:e6:6f:33:17:d6:38:35:bd:37:
                    82:7b:34:5f:53:6a:6a:7a:7f:ae:3b:c3:5e:72:e6:
                    a9:14:3a:c3:ca:6d:00:e4:7c:5d:29:0b:b9:06:b1:
                    e3:60:c7:bc:ef:d6:0f:04:26:f4:cd:e9:77:08:a5:
                    d9:89:e5:c2:58:20:46:8d:e9:85:7a:d5:dc:91:08:
                    ee:22:99:46:f5:3e:66:4f:91:c5:37:2e:a2:47:a1:
                    8c:a2:cc:95:a1:86:55:9b:ac:b0:db:63:04:9f:9a:
                    7a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:61:DF:15:D7:55:5B:CA:CE:2A:3F:C0:A0:92:AC:AD:E2:B2:17:9A
            X509v3 Authority Key Identifier:
                keyid:D4:0D:71:C2:6E:8C:99:0D:22:43:0A:76:49:69:45:93:0E:CE:72:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/D40D71C26E8C990D22430A76496945930ECE72FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40D71C26E8C990D22430A76496945930ECE72FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/323830343a316464343a343030303a3a2f33342d3334203d3e20323634333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1dd4:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         aa:5f:8d:d4:0a:e3:5a:ec:83:41:15:a8:e4:92:22:06:0d:b9:
         c0:16:dc:fc:b2:12:f4:47:a4:11:74:fe:cf:13:83:97:76:e2:
         fe:aa:35:ba:5d:73:52:9e:9a:4c:15:7f:91:90:0d:04:af:be:
         4b:b9:c8:15:13:96:d4:53:51:af:f2:1a:04:fb:41:97:9d:fd:
         8c:c8:22:93:58:8b:60:ee:8c:f8:6e:85:80:4c:3e:40:71:90:
         0b:65:20:50:a6:db:af:2d:03:12:9e:d7:b1:d5:d3:ea:b5:b9:
         19:4a:d6:24:01:f1:ea:56:5f:55:70:11:28:a8:35:35:cb:c0:
         80:fd:77:db:34:00:82:cb:e4:61:f6:e2:39:8a:6b:8e:3c:bf:
         e3:a7:81:a5:6d:7a:cb:73:2c:72:dd:f2:dc:48:d3:34:9b:0e:
         9e:fa:5b:ad:78:d6:97:a0:04:4a:ad:2e:cc:74:64:91:5d:40:
         05:d6:85:7a:56:ae:c5:c6:74:30:55:4c:8d:fa:33:79:81:ac:
         ec:2d:25:db:2f:a0:bb:ff:29:ad:0b:e3:e6:d4:bb:70:a7:f2:
         57:e2:fe:ec:4d:eb:6f:02:dc:7a:f7:d7:c1:20:64:fd:dc:27:
         15:f7:c9:bd:7a:07:df:7c:61:72:09:08:54:b3:ec:9c:a4:99:
         4f:02:a9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 18:45:50 2025 by rpki-client