Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/1/323830343a313638383a653430303a3a2f33392d3339203d3e20323633323930.roa
File:                     323830343a313638383a653430303a3a2f33392d3339203d3e20323633323930.roa (raw, json)
Hash identifier:          BX+vnOqSp5OQaS08ngTv/r8bM/RaQl1T74x0eoUVPt8=
Subject key identifier:   AE:5E:69:5A:4F:40:AE:EA:FD:61:49:80:A2:E1:AF:8D:4A:D7:F8:95
Certificate issuer:       /CN=A27C713EEC3E4E5F319E67684ECFC96BEB54F973
Certificate serial:       643D2FF3317ADFB2F5265B81F3E9D33AF5BCA106
Authority key identifier: A2:7C:71:3E:EC:3E:4E:5F:31:9E:67:68:4E:CF:C9:6B:EB:54:F9:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A27C713EEC3E4E5F319E67684ECFC96BEB54F973.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/1/323830343a313638383a653430303a3a2f33392d3339203d3e20323633323930.roa
Signing time:             Mon 02 Jun 2025 21:19:23 +0000
ROA not before:           Mon 02 Jun 2025 21:14:23 +0000
ROA not after:            Mon 01 Jun 2026 21:19:23 +0000
asID:                     263290
IP address blocks:        2804:1688:e400::/39 maxlen: 39
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:3d:2f:f3:31:7a:df:b2:f5:26:5b:81:f3:e9:d3:3a:f5:bc:a1:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A27C713EEC3E4E5F319E67684ECFC96BEB54F973
        Validity
            Not Before: Jun  2 21:14:23 2025 GMT
            Not After : Jun  1 21:19:23 2026 GMT
        Subject: CN=AE5E695A4F40AEEAFD614980A2E1AF8D4AD7F895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c4:22:dd:91:ea:32:15:86:76:78:3c:c8:68:
                    c2:91:79:28:b3:37:2f:18:1b:d2:42:d3:73:1b:0a:
                    bb:ac:2d:04:98:11:91:40:cd:b9:cd:ac:87:2d:b5:
                    a3:1e:44:fd:8c:c6:30:0c:e8:f4:42:05:7e:74:ef:
                    5a:b5:32:f0:f1:c9:5c:48:ed:a6:d8:2e:4e:a8:05:
                    4b:46:f8:3d:05:3a:2a:d4:bd:1f:4c:40:06:3f:ed:
                    6b:a4:22:54:2e:25:f2:f7:5c:b6:d4:a1:7d:6d:02:
                    31:d0:1d:20:f5:ee:8b:05:46:45:35:e8:a5:af:a2:
                    d3:8a:7c:4c:90:2d:bb:a8:1b:6b:23:72:15:cf:cb:
                    ef:c1:83:02:a9:e4:7b:94:51:40:6d:af:ee:10:91:
                    c7:c8:f3:22:e5:20:a7:bc:36:a5:8d:4c:73:67:2d:
                    ee:a8:da:10:2f:17:58:3c:81:a4:50:41:14:41:99:
                    f3:e8:0c:27:be:20:11:6d:fc:d4:81:4c:8c:24:0f:
                    86:79:70:ad:b4:1d:13:28:8b:6e:de:19:d2:8e:14:
                    1e:1b:2e:2c:83:72:1a:ba:02:0d:0f:15:e8:d5:35:
                    04:75:3d:95:bd:5c:3c:73:b3:c2:3b:0d:3f:9d:ee:
                    ea:39:92:35:b0:9d:46:ba:0e:4f:f1:fc:ae:87:a6:
                    16:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:5E:69:5A:4F:40:AE:EA:FD:61:49:80:A2:E1:AF:8D:4A:D7:F8:95
            X509v3 Authority Key Identifier:
                keyid:A2:7C:71:3E:EC:3E:4E:5F:31:9E:67:68:4E:CF:C9:6B:EB:54:F9:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/1/A27C713EEC3E4E5F319E67684ECFC96BEB54F973.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A27C713EEC3E4E5F319E67684ECFC96BEB54F973.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/1/323830343a313638383a653430303a3a2f33392d3339203d3e20323633323930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1688:e400::/39

    Signature Algorithm: sha256WithRSAEncryption
         34:f9:aa:cf:a2:3a:49:ec:84:e0:e3:5a:19:15:f5:bb:fc:d9:
         2c:b4:f2:9a:f3:89:c0:2b:a7:ac:9d:f2:ef:49:fd:0d:e9:39:
         43:3f:94:4c:a0:78:74:d1:bf:fa:5e:d3:7b:89:fc:d0:cb:c5:
         56:fb:3b:f8:cb:6e:2d:50:5e:3a:c3:2d:f6:34:15:62:0c:98:
         95:54:d3:5c:e0:5e:27:f8:b4:06:ce:40:0f:48:bb:c4:47:27:
         40:3d:e7:cf:db:ad:49:4a:c8:34:9c:dc:4b:79:73:62:3b:e5:
         69:1a:77:43:54:74:06:fa:80:d4:55:74:05:16:f7:ec:90:78:
         65:b2:7f:6e:72:d8:c2:df:e5:c9:b1:6a:d5:e3:d3:0a:a3:5f:
         d2:2b:36:2f:ef:f1:49:cb:3f:d4:ad:7e:3a:e3:82:1c:6d:53:
         9b:5b:47:f7:cc:19:37:10:a7:06:6f:74:39:02:d6:7b:1b:a5:
         74:1a:e2:97:2f:cb:cb:b8:f5:cc:c3:95:23:32:cd:b3:37:08:
         7e:70:1e:97:de:50:26:d1:57:c3:3c:82:6b:65:bd:25:1d:96:
         be:cc:f1:ea:7f:fd:2c:40:5b:36:0f:17:80:64:df:8f:97:d0:
         1a:96:eb:0a:ee:28:39:c9:f7:98:01:09:3c:1e:d0:ac:03:1e:
         df:58:11:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:43:53 2025 by rpki-client