Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/323830343a6665633a613030303a3a2f33362d3336203d3e20323632343933.roa
File:                     323830343a6665633a613030303a3a2f33362d3336203d3e20323632343933.roa (raw, json)
Hash identifier:          sGPQkKTMo9GZzJt6H481ilBt4OWccKPsg3+GngFQFTE=
Subject key identifier:   8E:DE:44:6F:DC:CB:82:F8:EF:DB:C6:CC:7B:A2:08:FE:A8:38:AC:49
Certificate issuer:       /CN=6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE
Certificate serial:       04C2FFD99CB45BD884C0B997411EDD031CF32F8E
Authority key identifier: 6A:63:DC:AA:5A:F1:11:9C:C8:B4:CD:AE:6A:72:2E:0A:28:DD:C1:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/323830343a6665633a613030303a3a2f33362d3336203d3e20323632343933.roa
Signing time:             Mon 08 Apr 2024 20:10:45 +0000
ROA not before:           Mon 08 Apr 2024 20:05:45 +0000
ROA not after:            Mon 07 Apr 2025 20:10:45 +0000
asID:                     262493
IP address blocks:        2804:fec:a000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:c2:ff:d9:9c:b4:5b:d8:84:c0:b9:97:41:1e:dd:03:1c:f3:2f:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE
        Validity
            Not Before: Apr  8 20:05:45 2024 GMT
            Not After : Apr  7 20:10:45 2025 GMT
        Subject: CN=8EDE446FDCCB82F8EFDBC6CC7BA208FEA838AC49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:84:cc:57:08:94:1a:9c:9d:2f:d7:b0:c2:79:
                    9d:6d:16:4f:8b:e6:f9:ee:c5:44:56:4a:6e:37:e1:
                    bd:1b:f5:51:5b:60:1d:ac:72:15:0d:7a:25:c7:88:
                    ba:11:e3:79:02:62:58:06:c2:91:60:a9:da:27:97:
                    c4:87:61:a1:0f:8c:0c:17:37:54:ed:b1:e2:c2:6f:
                    f4:a1:a1:4d:bc:45:ee:05:51:af:78:d4:c6:71:1c:
                    6d:c5:16:10:8a:e5:b6:11:bd:49:c1:ea:27:b7:02:
                    c1:c8:f5:bd:72:07:d4:18:94:15:77:0e:ce:10:75:
                    45:36:dd:0b:ac:89:43:0d:66:3f:56:64:dd:c9:f4:
                    cf:45:9a:e4:d0:0d:5f:31:4d:82:1f:64:84:21:90:
                    fa:38:34:b2:68:8c:91:28:4c:68:00:05:b6:5b:ea:
                    1c:8c:b7:f9:34:27:ec:4b:a6:85:6e:60:da:60:1e:
                    16:aa:31:9e:a6:35:bb:53:98:c4:3c:2b:61:8d:09:
                    61:b8:66:ee:e6:39:f3:05:97:24:a3:5e:3d:ca:f8:
                    f3:08:38:11:3b:6b:37:f9:2a:cc:2e:6e:e3:27:7d:
                    0c:43:de:07:ab:99:f1:7d:62:68:02:75:be:0d:4f:
                    9a:c9:4b:57:e9:54:cd:86:09:eb:e4:b2:0a:77:34:
                    95:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:DE:44:6F:DC:CB:82:F8:EF:DB:C6:CC:7B:A2:08:FE:A8:38:AC:49
            X509v3 Authority Key Identifier:
                keyid:6A:63:DC:AA:5A:F1:11:9C:C8:B4:CD:AE:6A:72:2E:0A:28:DD:C1:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/323830343a6665633a613030303a3a2f33362d3336203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fec:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5b:a2:13:ad:23:07:ff:b2:f6:40:ea:e0:41:54:a5:00:61:d8:
         3e:0b:5b:d0:18:c2:f0:b6:ec:82:bb:06:04:fd:b7:30:37:07:
         9a:21:dd:91:15:32:41:5e:3b:c5:0d:0c:6f:13:10:77:06:b8:
         0c:0b:d7:10:82:90:2c:35:61:50:58:e9:31:07:76:dd:06:8d:
         32:c8:eb:15:09:72:aa:23:07:3a:3c:f3:0e:69:54:a2:b9:90:
         bf:33:56:95:ef:95:24:dd:09:45:e6:db:cd:f7:9b:ce:be:58:
         5b:57:5c:df:ab:d1:ee:14:b0:c9:e6:81:e6:fc:44:f5:f2:75:
         d6:97:a8:93:9c:f6:17:79:b5:51:bd:e5:98:be:92:35:ee:c6:
         54:a9:06:72:3c:7b:21:31:fb:af:d2:b5:18:90:45:2f:89:19:
         25:11:0b:66:8c:25:34:e3:28:db:ed:a3:72:f9:96:53:40:50:
         4e:af:23:6d:fd:ab:c8:53:2c:fe:96:1d:a7:63:5f:8d:c7:ff:
         4a:50:b2:a7:51:bf:4c:42:27:2e:7b:d8:70:d2:55:5d:cd:42:
         0d:0c:45:65:93:11:21:27:e6:0f:33:e0:af:d5:ae:d9:18:b0:
         60:33:dc:7a:be:24:f9:d8:6a:d3:33:a6:81:53:73:2c:b9:df:
         ee:68:b2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 06:09:55 2025 by rpki-client