Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/323830343a346630303a3a2f33322d3438203d3e20323638323937.roa
File:                     323830343a346630303a3a2f33322d3438203d3e20323638323937.roa (raw, json)
Hash identifier:          gpBHJ3VySehTXdRCUwXm/prJatby7bg3id7UMVgDEE4=
Subject key identifier:   2D:93:9F:83:73:6E:AB:49:B0:3E:BD:72:BD:FB:FE:6C:03:A4:49:44
Certificate issuer:       /CN=38CD1F71C2A8E33D887C099EBB046A7EB10C6C22
Certificate serial:       60781EBE342ECE6BF6F646BA59F5CABA758DDD72
Authority key identifier: 38:CD:1F:71:C2:A8:E3:3D:88:7C:09:9E:BB:04:6A:7E:B1:0C:6C:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/323830343a346630303a3a2f33322d3438203d3e20323638323937.roa
Signing time:             Mon 10 Feb 2025 11:47:16 +0000
ROA not before:           Mon 10 Feb 2025 11:42:16 +0000
ROA not after:            Mon 09 Feb 2026 11:47:16 +0000
asID:                     268297
IP address blocks:        2804:4f00::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:78:1e:be:34:2e:ce:6b:f6:f6:46:ba:59:f5:ca:ba:75:8d:dd:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38CD1F71C2A8E33D887C099EBB046A7EB10C6C22
        Validity
            Not Before: Feb 10 11:42:16 2025 GMT
            Not After : Feb  9 11:47:16 2026 GMT
        Subject: CN=2D939F83736EAB49B03EBD72BDFBFE6C03A44944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:93:fa:67:a9:96:b6:ab:a9:46:a5:b4:0b:4f:
                    a0:85:a4:81:f5:a7:1f:84:84:d8:3f:00:96:4c:c7:
                    e4:b7:54:96:d5:41:34:0b:b4:d1:86:fa:5a:dc:a8:
                    47:ff:30:72:15:d6:90:ee:6d:0b:cb:83:95:f6:e6:
                    1a:79:d7:cf:bf:66:d0:3c:ec:d9:57:cf:30:25:08:
                    85:29:2f:36:1a:22:40:f1:24:84:fd:9f:33:d3:3f:
                    48:44:4c:47:66:32:86:ac:3b:9d:29:aa:fa:ff:83:
                    8f:b0:3f:bc:81:35:f7:c6:67:8f:63:0b:c7:91:54:
                    fc:51:e9:94:97:36:22:2c:db:3b:80:cb:d2:fa:0f:
                    7b:15:be:8a:a8:d8:e0:99:11:05:93:b3:e2:80:72:
                    1c:ef:55:76:b6:a1:2e:dd:b9:b3:bd:c4:a2:7f:d0:
                    2d:a8:b6:3a:6f:12:b4:39:f9:43:b0:2c:6f:8f:88:
                    93:3c:70:c6:19:44:ed:05:46:bc:74:30:2c:5f:ed:
                    27:d0:a7:6f:d0:d3:a0:00:6e:2a:32:97:87:4d:7f:
                    8a:2b:6e:ac:f0:e3:c8:6f:e6:bb:ca:bd:f1:2f:80:
                    53:32:26:4d:d2:36:b0:a1:90:63:18:1b:ae:0d:50:
                    4a:80:8e:81:9c:b9:43:88:8d:cd:46:c3:8e:3d:e6:
                    1f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:93:9F:83:73:6E:AB:49:B0:3E:BD:72:BD:FB:FE:6C:03:A4:49:44
            X509v3 Authority Key Identifier:
                keyid:38:CD:1F:71:C2:A8:E3:3D:88:7C:09:9E:BB:04:6A:7E:B1:0C:6C:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/323830343a346630303a3a2f33322d3438203d3e20323638323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f00::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:48:45:a3:79:c8:6c:df:e7:62:99:dd:b2:6e:a6:6a:fb:1a:
         7a:07:3b:f4:1d:ec:01:35:61:13:98:9d:02:13:31:00:c4:56:
         dc:60:fa:c4:95:a3:b7:77:19:9a:6d:9a:e4:59:7f:85:2f:98:
         9e:9f:9d:1b:9e:3e:48:7b:6c:29:d8:7a:31:2d:d8:cd:c0:46:
         42:84:f2:3e:64:ba:72:bf:81:53:de:a6:c3:da:de:8d:c1:0a:
         d1:8e:7f:58:26:ff:e3:00:c0:1c:06:b2:97:b3:2e:69:d4:28:
         93:c9:05:0f:ef:6e:00:27:7f:47:2a:79:82:a6:05:46:5d:cf:
         60:78:6c:11:15:be:84:76:31:8c:8f:8e:41:6d:71:b5:52:3c:
         ba:d8:35:ca:68:6c:3e:54:d9:40:35:a5:39:a5:1f:5c:f3:47:
         26:d6:a4:98:5b:b8:2e:5e:ac:68:9a:3e:b3:dc:1d:ee:3f:36:
         53:89:f0:4a:21:62:e0:a4:23:44:eb:2d:b0:49:14:92:7a:d3:
         ae:33:30:13:2e:0c:66:33:3c:4e:bb:94:ac:94:fc:21:ca:dc:
         e1:d6:e0:e3:15:94:59:13:90:28:b6:69:6f:2e:29:b5:a5:f8:
         b6:ec:91:f7:16:16:1b:75:36:fa:31:45:fb:4e:27:17:c1:3d:
         50:4b:8f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:21:28 2025 by rpki-client