Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/323830343a3638303a3a2f33322d313238203d3e20323632353839.roa
File:                     323830343a3638303a3a2f33322d313238203d3e20323632353839.roa (raw, json)
Hash identifier:          LyXdvv16rXVh76YjJ7N/Y5IAt3EGTyTv7h1oFk5ESLY=
Subject key identifier:   1A:88:56:B5:7E:E7:D2:D2:F5:08:68:EC:19:60:17:16:E0:EC:7E:6E
Certificate issuer:       /CN=C693E96398CDA5F5A4E242A3FD09B13E8AED7697
Certificate serial:       345D16EB328239B7560F4E9F80178985F30AB353
Authority key identifier: C6:93:E9:63:98:CD:A5:F5:A4:E2:42:A3:FD:09:B1:3E:8A:ED:76:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/323830343a3638303a3a2f33322d313238203d3e20323632353839.roa
Signing time:             Fri 07 Mar 2025 19:56:29 +0000
ROA not before:           Fri 07 Mar 2025 19:51:29 +0000
ROA not after:            Fri 06 Mar 2026 19:56:29 +0000
asID:                     262589
IP address blocks:        2804:680::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:5d:16:eb:32:82:39:b7:56:0f:4e:9f:80:17:89:85:f3:0a:b3:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C693E96398CDA5F5A4E242A3FD09B13E8AED7697
        Validity
            Not Before: Mar  7 19:51:29 2025 GMT
            Not After : Mar  6 19:56:29 2026 GMT
        Subject: CN=1A8856B57EE7D2D2F50868EC19601716E0EC7E6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:16:ea:ca:d3:11:c0:a9:46:fe:86:b2:57:91:
                    ed:8d:cf:be:63:dc:cb:39:18:0d:5a:8b:e5:7f:b1:
                    19:6e:1f:e3:4b:22:aa:9d:c2:fe:a4:2f:2d:cb:04:
                    2f:e1:59:d2:09:88:a3:6e:e0:9d:e3:d4:9b:35:7f:
                    f2:1a:56:45:39:9c:64:f3:7f:d9:f3:db:e0:a9:c6:
                    e9:b8:91:ad:b5:c1:80:fa:4d:53:62:a6:d7:88:e7:
                    37:7d:eb:c8:6c:cc:44:7e:e6:bd:10:ba:33:4d:00:
                    0a:2f:3f:45:e7:75:ae:e5:c8:93:cd:36:d3:73:dd:
                    04:ff:91:00:58:25:cb:41:47:6b:e8:34:d6:0f:ff:
                    ea:a3:29:bd:37:eb:a7:71:fd:4c:75:d5:30:cf:a4:
                    70:36:c5:a4:6a:42:16:18:c5:d5:ec:5b:9b:26:00:
                    2a:50:cc:38:ff:3c:49:3d:3e:33:96:c6:8e:01:30:
                    6c:be:93:dd:40:7f:45:1c:7b:ce:0d:52:e3:2f:bf:
                    20:11:cb:bf:92:07:55:74:76:b9:e9:b0:42:6b:a5:
                    f9:d3:21:c6:85:45:e8:8c:19:c9:ad:09:44:93:4e:
                    36:df:0d:8e:63:5b:03:d8:3c:11:1a:f0:d7:5b:2a:
                    a2:2f:df:58:0a:9b:81:38:ae:87:3c:8e:a2:ed:8c:
                    4d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:88:56:B5:7E:E7:D2:D2:F5:08:68:EC:19:60:17:16:E0:EC:7E:6E
            X509v3 Authority Key Identifier:
                keyid:C6:93:E9:63:98:CD:A5:F5:A4:E2:42:A3:FD:09:B1:3E:8A:ED:76:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/323830343a3638303a3a2f33322d313238203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:680::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:c2:93:7c:19:a7:fa:31:93:ba:29:82:20:ad:e0:52:fc:85:
         68:c9:d7:14:33:9c:12:49:7f:e5:4c:88:9e:06:c8:3f:f9:66:
         ea:79:94:9d:a9:8b:d6:93:b1:cb:a1:eb:7d:33:21:24:54:7e:
         44:4f:6b:12:7a:ed:09:ef:74:00:ef:a5:06:9a:9d:99:dd:e4:
         70:fc:29:d3:89:29:94:ad:71:8c:22:d1:5c:7f:c8:39:f5:78:
         98:c2:9c:93:0e:16:b0:9f:a7:fe:79:71:4e:2b:4c:8c:13:f0:
         09:8d:aa:bd:af:1e:74:49:45:8c:87:56:66:4b:33:6a:aa:55:
         3f:96:4e:ec:d4:5a:7d:ca:b3:7b:de:03:c7:56:69:88:f6:84:
         34:1f:21:8a:92:9f:0c:19:9d:06:fe:ae:40:fa:44:ab:27:55:
         5d:1f:1a:91:29:da:bd:21:76:9b:f7:ff:ce:af:41:f2:f1:54:
         81:34:ed:d7:bc:34:ae:dd:39:68:86:c0:9b:24:49:c2:ef:63:
         c3:03:9d:27:3f:2d:c0:66:bd:0b:d4:c8:dd:05:27:26:1b:c3:
         11:a0:48:d8:27:38:99:19:43:58:ee:13:e5:01:4e:eb:ff:63:
         0d:75:93:d3:b5:0e:c6:35:07:83:c5:a3:2c:a7:b5:d6:14:e9:
         16:54:62:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:49:54 2025 by rpki-client