Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a363030303a3a2f33362d3336203d3e20323734373236.roa
File:                     323830343a393261383a363030303a3a2f33362d3336203d3e20323734373236.roa (raw, json)
Hash identifier:          9CLW/o4N8FuACgnCyU8wJjsOhCwvN+vnhc4yM4pv75s=
Subject key identifier:   FD:5B:B8:82:2F:E3:8F:6C:78:A3:57:92:3D:95:9D:29:64:58:F6:72
Certificate issuer:       /CN=E235D9D1060516D958BB28952BAAC2B76E4FFCB1
Certificate serial:       13BF09CBB4B4689CD88DED9632ED400E9B9A6907
Authority key identifier: E2:35:D9:D1:06:05:16:D9:58:BB:28:95:2B:AA:C2:B7:6E:4F:FC:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E235D9D1060516D958BB28952BAAC2B76E4FFCB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a363030303a3a2f33362d3336203d3e20323734373236.roa
Signing time:             Fri 14 Mar 2025 17:24:21 +0000
ROA not before:           Fri 14 Mar 2025 17:19:21 +0000
ROA not after:            Fri 13 Mar 2026 17:24:21 +0000
asID:                     274726
IP address blocks:        2804:92a8:6000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:bf:09:cb:b4:b4:68:9c:d8:8d:ed:96:32:ed:40:0e:9b:9a:69:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E235D9D1060516D958BB28952BAAC2B76E4FFCB1
        Validity
            Not Before: Mar 14 17:19:21 2025 GMT
            Not After : Mar 13 17:24:21 2026 GMT
        Subject: CN=FD5BB8822FE38F6C78A357923D959D296458F672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1f:05:a6:03:c6:3d:b0:7f:c5:cf:46:c8:98:
                    bf:4e:35:6d:d3:2e:e6:a6:92:d9:e0:de:9f:01:bf:
                    ee:fb:48:e9:6b:e8:08:75:cd:e3:06:84:be:5c:7c:
                    8b:ff:0b:2e:a4:9b:3c:bd:a7:82:36:af:5b:bc:63:
                    e1:fc:77:bc:af:1c:de:74:03:54:41:34:8f:c5:2b:
                    fe:f0:a0:47:81:c9:23:7a:c0:5f:64:05:2c:b1:5d:
                    8c:25:ed:2b:0c:d2:d0:9d:77:68:d8:57:54:e8:43:
                    a9:19:c0:e1:01:63:c9:5f:8d:8a:b7:4a:ae:cb:a9:
                    4a:37:43:c8:e7:7b:26:59:02:3c:b3:3c:2f:7c:25:
                    d4:18:8c:0f:43:f2:6a:60:96:44:ea:82:d0:0c:75:
                    e5:8d:dc:72:9f:37:a7:c6:e5:b0:9a:38:1f:6a:f3:
                    7f:c8:fe:99:9b:e4:ea:7f:a1:0a:b9:d4:7c:8c:37:
                    19:36:b5:60:d6:44:22:6d:34:e1:5b:15:32:f3:4b:
                    3f:e4:59:6f:aa:ef:cf:ba:d9:4c:cc:bf:36:40:53:
                    d3:9f:f9:19:86:87:a4:65:37:a7:65:4f:18:3e:e9:
                    b8:c8:13:9e:1b:0c:90:cf:71:0d:cd:c5:fe:20:12:
                    1d:4d:75:6a:a9:00:57:60:49:2e:27:e4:fd:39:2c:
                    8f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:5B:B8:82:2F:E3:8F:6C:78:A3:57:92:3D:95:9D:29:64:58:F6:72
            X509v3 Authority Key Identifier:
                keyid:E2:35:D9:D1:06:05:16:D9:58:BB:28:95:2B:AA:C2:B7:6E:4F:FC:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/E235D9D1060516D958BB28952BAAC2B76E4FFCB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E235D9D1060516D958BB28952BAAC2B76E4FFCB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a363030303a3a2f33362d3336203d3e20323734373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:92a8:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a4:c7:dc:a8:b2:57:c8:de:12:1f:f4:1b:fc:03:64:1a:06:77:
         3b:30:7c:72:a8:14:21:95:8f:16:6b:2a:86:8b:53:c5:e7:13:
         e1:9a:69:65:f0:44:cb:4a:87:44:96:00:22:b4:0a:eb:7c:ef:
         ad:16:c0:55:4c:3a:f2:74:fe:9d:b9:c2:9a:56:95:45:78:9f:
         9d:70:c7:49:80:50:53:b6:23:29:88:c2:2f:c2:dc:0b:fc:76:
         93:6c:bf:ee:ff:d8:ee:e4:60:1d:0d:45:56:a9:39:07:f6:44:
         75:38:c2:53:f5:80:82:43:86:51:73:48:61:d8:a1:aa:7b:1b:
         04:e0:06:35:67:33:86:8d:7f:c0:44:c8:4a:ff:20:ca:f5:31:
         8f:02:90:a2:55:e1:6a:92:f5:fb:b9:43:86:03:ca:3d:9d:da:
         9a:c0:e1:0c:7e:53:da:e9:4d:fe:2c:b0:ec:49:a9:63:2e:c5:
         af:9a:5a:49:b2:7d:33:00:31:99:cb:58:5d:1f:32:62:0b:97:
         c5:94:87:cc:02:f2:23:30:ca:51:f7:b8:64:c0:03:68:fe:31:
         93:cd:e9:c7:2e:6d:bf:4b:17:ba:96:10:5f:c2:fa:bf:ed:34:
         9a:80:04:41:34:b2:0a:f0:e2:61:2c:2a:b4:20:43:c7:57:93:
         ad:a8:b5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:40:24 2025 by rpki-client