Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DA7MqrDpFx9Jk8N8kGEZDb2jij8ygvfZnhCtxY6BVAua/0/323830343a366336383a3a2f33322d3338203d3e20323730343636.roa
File:                     323830343a366336383a3a2f33322d3338203d3e20323730343636.roa (raw, json)
Hash identifier:          VHAZqP6YG7GwtrCUR8RBXZKxOYRsXQ76Kr+zXIZnWfg=
Subject key identifier:   DA:27:4C:A8:52:32:80:5F:43:85:D1:74:50:9B:60:4D:48:7B:D5:CF
Certificate issuer:       /CN=088F5B84BDC57FA62F1769CACB1CDED1DF9BABB9
Certificate serial:       0D34D33D1335F08D9340DC41F75181FEC85E8CC2
Authority key identifier: 08:8F:5B:84:BD:C5:7F:A6:2F:17:69:CA:CB:1C:DE:D1:DF:9B:AB:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/088F5B84BDC57FA62F1769CACB1CDED1DF9BABB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DA7MqrDpFx9Jk8N8kGEZDb2jij8ygvfZnhCtxY6BVAua/0/323830343a366336383a3a2f33322d3338203d3e20323730343636.roa
Signing time:             Tue 09 Apr 2024 17:09:54 +0000
ROA not before:           Tue 09 Apr 2024 17:04:54 +0000
ROA not after:            Tue 08 Apr 2025 17:09:54 +0000
asID:                     270466
IP address blocks:        2804:6c68::/32 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:34:d3:3d:13:35:f0:8d:93:40:dc:41:f7:51:81:fe:c8:5e:8c:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088F5B84BDC57FA62F1769CACB1CDED1DF9BABB9
        Validity
            Not Before: Apr  9 17:04:54 2024 GMT
            Not After : Apr  8 17:09:54 2025 GMT
        Subject: CN=DA274CA85232805F4385D174509B604D487BD5CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1c:62:9f:9b:39:ad:da:68:b8:b4:08:6a:88:
                    29:ab:7d:82:f7:e3:c5:2f:ea:0a:48:7e:6b:18:84:
                    2e:f8:a8:c9:0d:30:2d:58:46:ad:d6:32:5f:16:a7:
                    7e:1a:17:5f:aa:b7:78:9c:82:16:6f:25:de:c1:ef:
                    ff:53:fa:1e:81:9f:8d:cb:0f:97:02:0b:6c:d1:8b:
                    04:21:c8:ac:56:b3:6f:db:dc:a4:cc:ad:e9:1a:3e:
                    62:fd:35:5f:d8:f0:43:8f:59:3f:2f:09:4c:8c:d5:
                    7f:13:8e:82:14:8b:f7:55:2d:cd:3f:ac:34:57:b1:
                    fc:79:58:ad:f2:46:03:cc:38:c0:d0:9c:60:b3:b0:
                    c3:c3:20:39:e2:3f:d1:d0:94:20:53:fa:7b:cb:32:
                    bc:b7:03:00:57:95:bc:57:63:56:28:a6:ba:f5:9c:
                    4a:4d:2d:d8:bd:68:55:66:78:bf:7a:9d:e0:59:4d:
                    3c:98:a6:d7:d3:04:30:8d:62:a3:9c:7f:81:46:a2:
                    19:46:1f:d2:c0:18:0e:4c:4b:ed:d1:12:ee:b8:21:
                    94:68:2b:54:91:ae:07:27:0b:53:66:bf:eb:9b:68:
                    1f:a3:77:3e:94:74:78:f9:0d:bc:0e:60:61:ff:f8:
                    da:ec:04:23:de:7b:07:d8:ef:61:80:53:98:be:38:
                    82:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:27:4C:A8:52:32:80:5F:43:85:D1:74:50:9B:60:4D:48:7B:D5:CF
            X509v3 Authority Key Identifier:
                keyid:08:8F:5B:84:BD:C5:7F:A6:2F:17:69:CA:CB:1C:DE:D1:DF:9B:AB:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DA7MqrDpFx9Jk8N8kGEZDb2jij8ygvfZnhCtxY6BVAua/0/088F5B84BDC57FA62F1769CACB1CDED1DF9BABB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/088F5B84BDC57FA62F1769CACB1CDED1DF9BABB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DA7MqrDpFx9Jk8N8kGEZDb2jij8ygvfZnhCtxY6BVAua/0/323830343a366336383a3a2f33322d3338203d3e20323730343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c68::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:32:a9:e6:46:69:31:54:41:ce:b8:ed:d7:a1:26:84:fa:1d:
         f2:25:d4:43:17:c0:c9:a1:b6:0c:f7:fc:d7:2d:2e:8f:f2:c4:
         87:51:8e:d4:fa:64:eb:a6:82:38:74:20:45:ec:31:51:47:f5:
         92:7c:ea:e7:f0:f2:22:1d:16:d8:c6:c0:2e:56:a0:4e:cf:3e:
         d5:75:b7:f2:b5:07:93:64:1d:0b:94:99:17:67:f0:49:a2:33:
         9f:72:01:86:b9:21:6c:5b:f0:ec:13:29:da:9b:4d:e0:a6:f5:
         47:51:8c:b8:3a:78:2b:22:0f:12:49:f2:b6:f0:a4:26:65:a6:
         25:97:8b:e1:ce:7f:e2:d5:4e:f0:6f:14:bb:cf:69:7e:d9:1b:
         49:d3:77:73:10:9a:cc:7f:d7:2e:db:85:71:ad:25:88:f8:0c:
         92:2c:04:e6:d1:a5:4b:88:89:2d:85:64:8c:48:fa:41:c3:76:
         e5:2a:21:3c:57:59:49:28:78:3f:92:15:1c:63:56:6b:ce:a6:
         86:7c:43:45:7a:dc:ab:17:36:1d:a6:e3:f3:f9:24:55:bf:93:
         c2:5b:2f:0a:7b:3e:55:5d:93:be:15:7e:ac:84:0c:30:8c:6b:
         5a:b5:bd:b1:96:ba:21:32:d1:c0:10:99:2e:f0:18:48:27:df:
         a5:7d:47:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:31:48 2025 by rpki-client