Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ETFmaA1MKwtCKDxSmqw3PRrMG7mC7EpLpQxAbohWtEDu/0/323830343a333933303a3a2f33322d3332203d3e20323636303137.roa
File:                     323830343a333933303a3a2f33322d3332203d3e20323636303137.roa (raw, json)
Hash identifier:          iSxX6MBLU/PVtzGabpGGW/uiche1bZXM2S6LmQHcm4o=
Subject key identifier:   0D:1A:DE:C1:D0:7D:59:8B:FC:5E:7B:49:A4:41:5D:10:D0:AB:6E:66
Certificate issuer:       /CN=D2953993A283BAC8CD8FCBB6DFDA8659D546BCE4
Certificate serial:       0FB208839C166C732BDC8E97C90447D458B31769
Authority key identifier: D2:95:39:93:A2:83:BA:C8:CD:8F:CB:B6:DF:DA:86:59:D5:46:BC:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2953993A283BAC8CD8FCBB6DFDA8659D546BCE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ETFmaA1MKwtCKDxSmqw3PRrMG7mC7EpLpQxAbohWtEDu/0/323830343a333933303a3a2f33322d3332203d3e20323636303137.roa
Signing time:             Tue 31 Dec 2024 15:13:25 +0000
ROA not before:           Tue 31 Dec 2024 15:08:25 +0000
ROA not after:            Tue 30 Dec 2025 15:13:25 +0000
asID:                     266017
IP address blocks:        2804:3930::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:b2:08:83:9c:16:6c:73:2b:dc:8e:97:c9:04:47:d4:58:b3:17:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2953993A283BAC8CD8FCBB6DFDA8659D546BCE4
        Validity
            Not Before: Dec 31 15:08:25 2024 GMT
            Not After : Dec 30 15:13:25 2025 GMT
        Subject: CN=0D1ADEC1D07D598BFC5E7B49A4415D10D0AB6E66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d0:35:6a:75:6e:a2:97:ec:44:a6:d8:df:3e:
                    ea:db:91:1e:e1:51:21:17:e5:be:cf:77:08:5b:ac:
                    8d:8d:20:8b:1f:99:7e:c0:5a:bc:62:d4:4a:5f:7e:
                    c0:74:a8:1d:fd:0f:49:01:a5:51:a9:98:fc:3d:9f:
                    cb:19:e5:bd:af:0e:0b:65:23:60:15:2f:34:34:58:
                    01:f5:74:3f:1a:ed:59:46:9a:fe:3f:b3:c6:c0:13:
                    c6:a4:8b:53:79:72:97:aa:89:8d:1e:f7:d0:71:c0:
                    5a:09:45:92:a5:68:aa:d3:40:52:7f:f4:d6:90:bc:
                    c9:9f:64:57:d3:b0:8b:10:fb:fb:1f:d4:00:b4:3b:
                    5d:5f:22:df:ac:9b:43:f0:d3:00:1f:00:12:45:a2:
                    6c:fb:ce:6f:f7:e0:fa:09:0a:42:86:a5:db:e2:71:
                    c9:2d:e3:f3:23:36:e2:51:5a:23:c9:28:70:d8:31:
                    32:b5:94:9c:ac:12:b8:5f:f9:f4:ed:c1:31:fa:4f:
                    a9:43:38:36:f9:a2:0e:59:dc:41:01:46:f2:11:04:
                    29:94:a1:bd:60:9d:a1:d5:e8:40:cd:d8:ee:54:0a:
                    56:c7:37:46:fd:45:ba:cc:89:96:32:d1:78:ef:57:
                    5e:ab:20:51:0d:a3:e7:ae:f8:0f:d5:53:76:7d:aa:
                    f7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:1A:DE:C1:D0:7D:59:8B:FC:5E:7B:49:A4:41:5D:10:D0:AB:6E:66
            X509v3 Authority Key Identifier:
                keyid:D2:95:39:93:A2:83:BA:C8:CD:8F:CB:B6:DF:DA:86:59:D5:46:BC:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ETFmaA1MKwtCKDxSmqw3PRrMG7mC7EpLpQxAbohWtEDu/0/D2953993A283BAC8CD8FCBB6DFDA8659D546BCE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2953993A283BAC8CD8FCBB6DFDA8659D546BCE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ETFmaA1MKwtCKDxSmqw3PRrMG7mC7EpLpQxAbohWtEDu/0/323830343a333933303a3a2f33322d3332203d3e20323636303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3930::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:8c:24:22:06:6e:d8:a3:52:d0:23:cf:92:85:ae:03:98:b1:
         cf:03:e9:7b:90:81:64:6e:33:f7:68:4a:9d:3d:a1:10:a0:9d:
         a0:c8:6c:f5:42:f7:e4:ae:be:c1:b5:57:24:5c:44:63:90:4c:
         ac:66:84:b3:1f:1a:d3:8a:1c:02:5a:aa:68:11:90:7b:97:33:
         9d:dc:30:10:2c:33:45:5f:dd:aa:33:3c:6b:cc:62:7e:e6:59:
         76:62:74:3b:a2:cc:5a:65:35:8a:94:03:6c:ef:96:43:b8:9c:
         44:57:09:f9:43:13:72:f5:41:3c:99:e4:df:eb:65:24:94:21:
         c0:66:33:8c:5f:43:07:c0:b2:37:d1:ac:78:d7:96:d8:24:ad:
         7f:74:d5:6b:f5:32:a6:1d:8f:08:24:03:ff:ec:bd:6e:98:53:
         e8:09:05:24:46:f1:e5:9b:fd:8c:60:0f:d3:c3:86:cf:cc:fe:
         16:02:8f:6f:fc:c2:47:b0:8d:4b:de:51:84:8d:8c:9c:49:08:
         7f:0a:f9:70:37:dc:92:50:c1:c9:3c:53:a6:ec:5f:53:f0:e4:
         e7:1b:f2:00:0a:ae:fe:91:c8:00:8d:6b:2e:94:36:3a:05:58:
         cd:0d:65:e8:94:b8:b4:ba:17:b2:c5:69:84:9a:11:7a:1b:76:
         72:b6:d3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:08:53 2025 by rpki-client