Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/1/323830343a353434343a3a2f33322d3332203d3e20323638363338.roa
File:                     323830343a353434343a3a2f33322d3332203d3e20323638363338.roa (raw, json)
Hash identifier:          q8NxLp4W5GXH2dPakVMZ1hSzXDETxvP4qIAxvFbJaGw=
Subject key identifier:   3F:ED:E7:12:88:A3:A9:B5:1F:7A:FC:98:3B:F1:3C:EA:99:FA:A9:5A
Certificate issuer:       /CN=F06C066D74E657CF6914B5961E1CF64DD57EFAB1
Certificate serial:       324B4190404916E4099B508A25A416B548337230
Authority key identifier: F0:6C:06:6D:74:E6:57:CF:69:14:B5:96:1E:1C:F6:4D:D5:7E:FA:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F06C066D74E657CF6914B5961E1CF64DD57EFAB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/1/323830343a353434343a3a2f33322d3332203d3e20323638363338.roa
Signing time:             Thu 06 Mar 2025 14:06:02 +0000
ROA not before:           Thu 06 Mar 2025 14:01:02 +0000
ROA not after:            Thu 05 Mar 2026 14:06:02 +0000
asID:                     268638
IP address blocks:        2804:5444::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:4b:41:90:40:49:16:e4:09:9b:50:8a:25:a4:16:b5:48:33:72:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F06C066D74E657CF6914B5961E1CF64DD57EFAB1
        Validity
            Not Before: Mar  6 14:01:02 2025 GMT
            Not After : Mar  5 14:06:02 2026 GMT
        Subject: CN=3FEDE71288A3A9B51F7AFC983BF13CEA99FAA95A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:63:cf:f1:d0:ad:e5:27:ab:5c:95:74:43:e1:
                    8e:64:41:08:64:f7:38:9f:0d:8d:b3:ce:11:ca:11:
                    f9:b7:97:5f:e4:93:aa:61:7e:ac:ac:f4:b4:98:61:
                    04:14:97:66:28:6d:8a:93:a7:6c:a6:f1:a0:37:77:
                    f6:1e:c9:47:de:63:5e:f5:f2:a5:41:43:5d:26:65:
                    3c:6e:ed:0d:6e:87:ad:33:98:2e:b6:31:89:60:81:
                    86:a8:d9:e0:c1:ab:32:36:ce:2e:cf:fd:07:d5:a8:
                    cb:4f:9b:48:6d:93:8f:ff:e6:13:4a:45:ab:61:19:
                    75:36:0f:33:a7:b5:5f:3d:2c:b6:ea:db:6a:63:b2:
                    1c:9a:6d:28:fe:57:be:c1:0f:50:dd:94:f0:08:34:
                    b8:e8:db:2f:a6:ff:5b:30:42:2a:a5:11:3b:73:9f:
                    9d:03:60:09:aa:ec:14:36:63:ec:06:f1:e1:7e:18:
                    54:f0:98:90:4a:64:6e:d9:09:7d:d1:09:a0:22:7a:
                    13:4f:2d:1c:12:46:8b:0b:49:74:b8:20:9d:aa:05:
                    b3:ca:31:d7:10:ae:26:f9:dd:21:94:2b:ca:5e:11:
                    3f:dd:ae:53:fd:3a:58:2c:c2:0a:69:27:3c:2c:91:
                    b4:ca:97:7a:e2:ab:5c:0d:97:10:ca:38:eb:c3:50:
                    10:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:ED:E7:12:88:A3:A9:B5:1F:7A:FC:98:3B:F1:3C:EA:99:FA:A9:5A
            X509v3 Authority Key Identifier:
                keyid:F0:6C:06:6D:74:E6:57:CF:69:14:B5:96:1E:1C:F6:4D:D5:7E:FA:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/1/F06C066D74E657CF6914B5961E1CF64DD57EFAB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F06C066D74E657CF6914B5961E1CF64DD57EFAB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/1/323830343a353434343a3a2f33322d3332203d3e20323638363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5444::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:f8:07:dc:b6:d8:23:dd:e9:32:03:43:8e:fa:ea:07:58:95:
         7e:fd:15:5d:88:22:d7:db:84:ea:65:30:8b:b3:e9:9a:96:73:
         a0:27:a2:ba:d4:09:2c:84:27:ce:35:08:c6:a8:64:52:4b:52:
         28:8d:39:02:66:1f:01:7f:92:f8:0c:bc:3d:ee:63:3d:a3:8f:
         65:18:6b:30:ad:6b:31:1b:7e:3a:57:75:43:51:03:12:21:dd:
         e1:b3:1d:63:65:90:01:84:dc:a9:3c:71:38:22:ea:11:b0:db:
         f4:12:b1:fe:33:50:fe:3a:1a:d7:38:fe:df:a9:5e:4a:02:80:
         3e:5e:d7:75:bc:1f:68:1c:9f:5f:62:89:67:1a:c8:05:c7:97:
         3e:b2:77:f4:74:05:20:63:fb:68:16:9b:71:01:49:07:16:5c:
         e4:40:e8:df:38:8a:93:27:b2:27:ff:da:2f:8c:5c:8d:da:0c:
         32:91:19:b5:d8:90:e7:31:55:ba:7c:80:aa:60:12:77:f4:58:
         7d:15:a0:70:66:aa:67:41:02:7e:62:d4:3f:d8:ff:4c:a2:52:
         76:4e:9e:8a:49:3d:85:66:25:98:88:07:13:5f:d9:66:83:43:
         b6:48:5f:5f:ba:e8:b6:8d:5e:f2:35:f4:4a:a9:cf:2a:1d:00:
         92:4e:10:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:15:43 2025 by rpki-client