Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/323830343a323934383a323030303a3a2f33362d3336203d3e20323634303031.roa
File:                     323830343a323934383a323030303a3a2f33362d3336203d3e20323634303031.roa (raw, json)
Hash identifier:          MyweTGGMApOGgrBk8QiLUxgy6Y6wmMFfK/XQlDixG20=
Subject key identifier:   FE:0D:E6:0F:D0:28:E8:DF:B2:EF:48:29:15:C6:F3:70:D6:E5:50:C2
Certificate issuer:       /CN=E4E679E110DA011F952FB409E81E8EC81BAE43EF
Certificate serial:       06BCB4BEDB7D8138A00CD80A38EAB1412299D323
Authority key identifier: E4:E6:79:E1:10:DA:01:1F:95:2F:B4:09:E8:1E:8E:C8:1B:AE:43:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/323830343a323934383a323030303a3a2f33362d3336203d3e20323634303031.roa
Signing time:             Fri 28 Mar 2025 13:58:03 +0000
ROA not before:           Fri 28 Mar 2025 13:53:03 +0000
ROA not after:            Fri 27 Mar 2026 13:58:03 +0000
asID:                     264001
IP address blocks:        2804:2948:2000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:bc:b4:be:db:7d:81:38:a0:0c:d8:0a:38:ea:b1:41:22:99:d3:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4E679E110DA011F952FB409E81E8EC81BAE43EF
        Validity
            Not Before: Mar 28 13:53:03 2025 GMT
            Not After : Mar 27 13:58:03 2026 GMT
        Subject: CN=FE0DE60FD028E8DFB2EF482915C6F370D6E550C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a4:84:34:73:21:f3:db:52:3b:bc:84:da:a9:
                    46:6e:20:6a:27:4e:dd:31:7a:ef:0f:83:62:bd:15:
                    e3:16:6a:4a:ae:c4:fd:da:e2:bd:e9:cf:28:91:c6:
                    fc:e0:b3:ba:5a:48:bd:7d:22:bb:93:13:36:8c:35:
                    d9:e9:9d:53:13:14:b9:f6:96:64:e6:25:3b:07:e2:
                    59:8d:6c:42:85:b8:54:68:5b:b7:a3:ae:84:1f:1d:
                    93:1b:88:68:f6:f3:12:e8:f7:a9:3f:e1:7a:37:96:
                    07:a0:aa:16:57:92:e7:8f:ee:42:85:aa:7c:65:e2:
                    47:06:2c:c3:10:9e:e8:33:1e:87:87:62:0b:b9:30:
                    fe:cb:15:ec:f4:6e:9d:01:e2:49:75:a9:e8:98:13:
                    66:5d:c2:94:77:77:27:e3:e2:a1:21:bf:96:50:52:
                    d7:d2:ed:bc:ae:32:c4:19:36:12:97:b5:69:62:cf:
                    00:b5:f8:e3:d0:cb:de:53:ea:b0:dd:eb:23:29:ae:
                    dd:a1:bd:36:14:e2:83:58:a2:98:30:c3:f4:ad:4d:
                    16:6a:76:7e:5e:8e:d2:89:88:03:83:e6:9e:05:01:
                    87:aa:d3:69:ea:c8:b8:fa:66:0b:31:5d:5a:9b:9e:
                    cb:8e:9b:0f:71:57:f8:ae:41:d8:f8:41:96:f7:78:
                    94:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:0D:E6:0F:D0:28:E8:DF:B2:EF:48:29:15:C6:F3:70:D6:E5:50:C2
            X509v3 Authority Key Identifier:
                keyid:E4:E6:79:E1:10:DA:01:1F:95:2F:B4:09:E8:1E:8E:C8:1B:AE:43:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/323830343a323934383a323030303a3a2f33362d3336203d3e20323634303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2948:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         28:a6:f1:25:ea:aa:12:e4:9e:9f:8f:85:f7:e6:2c:52:f3:e4:
         9c:f1:17:3a:fd:92:03:1a:8e:14:ce:e0:78:1c:41:6c:51:08:
         e3:dd:24:91:91:50:a3:2a:a7:55:0e:fd:a5:74:73:43:bf:e3:
         94:ca:42:d3:7e:25:71:e4:ee:f2:b0:dc:99:d7:40:bb:07:45:
         26:1b:34:9a:e1:8a:85:26:55:2f:11:e8:45:e6:2c:e3:d1:29:
         54:9b:5b:0a:5d:ac:6e:65:43:69:22:ff:c4:2b:1a:f7:e6:fa:
         3a:42:27:ef:a8:48:61:f5:c4:99:b9:13:60:1c:a8:b3:c7:9c:
         61:3c:3e:44:c8:38:9b:47:0f:ae:6b:97:11:f4:44:dd:20:8d:
         bd:10:3a:84:25:8f:8f:d6:79:a4:18:59:53:77:16:ec:c7:4c:
         e3:1a:52:38:9d:ce:3a:06:7d:81:0f:dd:5a:02:fe:0d:15:c7:
         be:b7:7d:28:3c:d7:9b:54:33:11:b6:63:c6:d8:af:09:48:c0:
         7f:c1:9b:14:11:b5:dc:5c:10:33:a2:24:ef:91:ff:42:5a:e1:
         85:14:27:e4:e0:bb:ce:74:a0:15:fb:0f:dd:6a:86:6a:56:98:
         58:b9:ee:8b:f3:07:bc:bc:0b:7c:e2:2a:25:52:46:5b:81:f3:
         5d:b1:a7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:24:06 2025 by rpki-client