Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/323830343a333635633a3a2f33322d3332203d3e20323636333433.roa
File:                     323830343a333635633a3a2f33322d3332203d3e20323636333433.roa (raw, json)
Hash identifier:          o9LcFJU76n14XJ1DNB5AU0EkxbkZxFoRsVSJ5naa4r0=
Subject key identifier:   2D:77:5C:9B:58:3C:64:60:B2:04:0B:9E:C7:B4:4B:8F:EF:97:FD:7F
Certificate issuer:       /CN=68230C14403321CC6C2237C576CF7E50D2BAC9B4
Certificate serial:       7D1D037451BCD280FAA6D988D118B88FF95E8C7D
Authority key identifier: 68:23:0C:14:40:33:21:CC:6C:22:37:C5:76:CF:7E:50:D2:BA:C9:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68230C14403321CC6C2237C576CF7E50D2BAC9B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/323830343a333635633a3a2f33322d3332203d3e20323636333433.roa
Signing time:             Thu 23 Jan 2025 12:48:55 +0000
ROA not before:           Thu 23 Jan 2025 12:43:55 +0000
ROA not after:            Thu 22 Jan 2026 12:48:55 +0000
asID:                     266343
IP address blocks:        2804:365c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:1d:03:74:51:bc:d2:80:fa:a6:d9:88:d1:18:b8:8f:f9:5e:8c:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68230C14403321CC6C2237C576CF7E50D2BAC9B4
        Validity
            Not Before: Jan 23 12:43:55 2025 GMT
            Not After : Jan 22 12:48:55 2026 GMT
        Subject: CN=2D775C9B583C6460B2040B9EC7B44B8FEF97FD7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a8:ca:58:7b:f7:98:07:ac:72:42:62:79:94:
                    f1:b0:cb:86:1b:d7:6b:07:11:45:dd:cf:f3:8e:00:
                    c6:13:8f:cb:12:33:a6:57:4b:5b:ad:e9:46:ea:89:
                    7a:71:1e:85:d4:69:ba:b8:65:2b:e2:cc:8f:88:4b:
                    56:9a:3c:68:fc:56:1f:98:8d:18:e6:33:0b:24:69:
                    ab:ad:68:5b:07:57:30:a3:9c:03:bc:31:51:09:88:
                    e2:27:69:c7:c3:b7:4d:53:59:3f:ab:b2:3b:44:dd:
                    52:2d:10:d1:41:16:8e:c0:1f:12:3e:47:01:fc:da:
                    02:f4:c6:06:b4:1b:97:21:52:cc:c3:8d:89:e2:4f:
                    37:c0:8e:7e:b0:9f:3c:2d:cd:17:01:0f:ab:31:82:
                    b0:54:06:51:86:bf:6d:33:70:bd:73:44:f8:31:2c:
                    9a:63:7b:4d:db:bf:c5:34:08:c6:f0:6b:09:9c:18:
                    af:1d:25:68:e7:78:aa:3c:a2:11:91:fe:95:17:e4:
                    1f:81:c4:f4:f3:00:c9:6b:83:44:13:ff:94:f1:5e:
                    3f:cd:73:a1:63:5d:41:52:b0:61:70:b5:65:b1:83:
                    90:f8:6c:e3:58:04:00:32:05:e7:09:eb:98:4a:ba:
                    d4:08:4a:07:ce:4f:8f:6f:4b:62:2b:12:ef:b9:93:
                    4e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:77:5C:9B:58:3C:64:60:B2:04:0B:9E:C7:B4:4B:8F:EF:97:FD:7F
            X509v3 Authority Key Identifier:
                keyid:68:23:0C:14:40:33:21:CC:6C:22:37:C5:76:CF:7E:50:D2:BA:C9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/68230C14403321CC6C2237C576CF7E50D2BAC9B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68230C14403321CC6C2237C576CF7E50D2BAC9B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/323830343a333635633a3a2f33322d3332203d3e20323636333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:365c::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:6e:0c:aa:55:59:4b:6f:18:7f:78:5b:61:d2:f3:01:12:7c:
         a3:c3:26:0c:20:94:61:d5:42:49:67:a9:b4:2d:a3:9d:ab:b8:
         92:0a:95:ea:16:1a:fc:70:5f:96:68:7d:71:81:6a:c8:b1:08:
         ca:80:fe:24:27:df:00:93:d5:f8:dc:2b:b3:8a:99:3f:e8:5e:
         13:c6:b4:f7:b9:42:71:af:fd:f2:42:c7:e6:c9:82:c1:8a:9f:
         85:39:73:99:02:82:5f:1c:14:91:42:20:cc:0b:60:77:80:c6:
         aa:13:98:28:ab:b6:fc:01:15:2c:89:f4:48:85:ba:a2:bb:7c:
         34:fa:a3:92:9f:46:6a:0c:1d:fd:ae:b0:83:6e:df:fc:6f:47:
         a9:1d:bc:ce:a9:00:7d:d8:b3:79:41:a4:17:13:ac:13:2d:ce:
         18:93:21:f1:f4:3e:ae:12:3c:f7:ea:5c:58:ef:9d:0a:48:10:
         59:2d:5b:25:d8:28:4b:50:f5:a8:7a:14:44:ef:d5:ea:5f:24:
         93:dd:80:64:18:c7:8f:f7:fa:ea:85:0c:7c:d1:b3:2c:6c:bc:
         8e:bb:32:65:ed:6a:97:7f:59:e0:7f:27:dc:be:5a:5a:08:d6:
         10:dc:0c:87:5f:55:e6:8a:e6:ba:eb:4e:00:1c:99:7d:cd:55:
         fe:03:73:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:55:50 2025 by rpki-client