Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/323830343a326233383a633030303a3a2f33342d3334203d3e20323635313431.roa
File:                     323830343a326233383a633030303a3a2f33342d3334203d3e20323635313431.roa (raw, json)
Hash identifier:          FYNLQwaOSsjmRyZ1WIgtL29Krqa95+1LvpLqQ/Rslz0=
Subject key identifier:   D5:E4:05:62:95:84:83:FF:B9:CA:15:B3:89:FF:C9:3A:ED:6C:74:62
Certificate issuer:       /CN=3FE77B8855F61DF2AD68185DD0977BCB42C708F4
Certificate serial:       38A95EEB2D357318DED8281F09F84F8FAF9F30FC
Authority key identifier: 3F:E7:7B:88:55:F6:1D:F2:AD:68:18:5D:D0:97:7B:CB:42:C7:08:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/323830343a326233383a633030303a3a2f33342d3334203d3e20323635313431.roa
Signing time:             Mon 24 Jun 2024 17:44:55 +0000
ROA not before:           Mon 24 Jun 2024 17:39:55 +0000
ROA not after:            Mon 23 Jun 2025 17:44:55 +0000
asID:                     265141
IP address blocks:        2804:2b38:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:a9:5e:eb:2d:35:73:18:de:d8:28:1f:09:f8:4f:8f:af:9f:30:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FE77B8855F61DF2AD68185DD0977BCB42C708F4
        Validity
            Not Before: Jun 24 17:39:55 2024 GMT
            Not After : Jun 23 17:44:55 2025 GMT
        Subject: CN=D5E40562958483FFB9CA15B389FFC93AED6C7462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f1:a7:57:8f:d5:11:b3:37:bf:bc:bc:3b:d6:
                    62:e5:d2:49:b4:4c:2f:54:e1:f7:e5:56:7a:80:57:
                    a6:f9:0f:5c:71:a3:4d:7e:5d:b1:f8:c9:78:18:32:
                    9b:b4:0c:be:bd:0c:c7:b4:03:49:65:57:e1:60:cc:
                    ba:d7:05:57:d1:d6:cb:b6:d3:a7:f3:b3:19:47:63:
                    f2:e7:59:d6:bd:ec:44:5c:47:81:7c:0d:e6:a9:55:
                    1f:6f:bb:a7:55:c9:0d:3a:32:26:15:d8:43:32:72:
                    d7:31:aa:fd:33:e6:8e:ff:0a:9f:28:7f:67:6b:2d:
                    da:8c:73:99:b3:32:e2:11:fa:b4:ff:b7:cb:0a:e0:
                    08:15:06:27:e0:5e:68:a2:1e:a3:fc:95:8e:da:fa:
                    be:f8:56:eb:02:f4:fa:95:ef:e8:8e:7f:f7:8d:4a:
                    f4:55:08:54:fe:2b:4e:e2:f2:22:47:d8:65:e1:af:
                    54:d0:41:4e:e2:a3:72:5e:86:41:7d:14:54:c1:62:
                    16:d4:42:69:cc:92:8b:8e:ed:7e:c6:bd:7f:62:df:
                    ed:df:49:0a:8b:78:c7:66:56:61:75:c2:aa:d5:10:
                    c6:f6:56:01:05:f9:cd:09:9e:f1:e2:80:ed:72:ba:
                    34:13:f8:8b:74:10:fa:b6:20:b5:57:15:ec:3e:06:
                    e0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E4:05:62:95:84:83:FF:B9:CA:15:B3:89:FF:C9:3A:ED:6C:74:62
            X509v3 Authority Key Identifier:
                keyid:3F:E7:7B:88:55:F6:1D:F2:AD:68:18:5D:D0:97:7B:CB:42:C7:08:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/323830343a326233383a633030303a3a2f33342d3334203d3e20323635313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b38:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7d:a9:a8:96:59:d4:4f:38:40:d9:86:a3:bf:35:89:69:00:17:
         51:36:9e:a6:b1:f4:76:25:ae:ef:f3:c0:5f:ea:76:a8:9b:62:
         f9:c7:12:27:30:0d:23:8d:59:86:50:29:5c:07:13:8b:a1:48:
         4a:50:8e:2d:a8:d8:5d:cc:7f:ac:2b:2c:6e:b1:41:cb:8e:cd:
         5c:93:62:15:e9:ad:57:42:b3:b5:72:d6:79:d1:00:52:2a:70:
         c2:b9:37:ab:f7:62:ec:9b:9f:e2:cf:9b:dd:e8:a2:07:d2:36:
         70:f4:79:89:de:17:7d:c1:dd:e1:93:a1:83:33:7a:8f:0b:d3:
         ec:99:d8:dc:63:8f:15:81:a6:e9:c5:8e:88:66:a6:49:81:2d:
         48:43:6e:0c:2a:9c:cb:57:1f:b1:e5:ca:21:71:58:1e:0e:26:
         e9:9a:b3:bf:cf:ac:24:5f:cb:2c:e2:fb:b6:fb:10:46:7d:4a:
         57:f7:87:cb:7e:0a:51:95:f8:1b:e0:5b:06:3b:54:b6:e3:bd:
         3c:9f:75:bc:1e:e6:a0:22:ee:b5:5c:09:86:fc:a6:26:22:e2:
         61:9b:45:64:d6:ec:98:17:e1:d5:ac:1b:6f:be:fb:29:4c:a5:
         03:51:af:92:1e:41:fe:fe:55:c3:dc:32:d9:bd:91:b4:c6:1a:
         ea:62:ee:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:25:18 2025 by rpki-client