Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/323830343a363564343a3a2f33322d3332203d3e20323639353137.roa
File:                     323830343a363564343a3a2f33322d3332203d3e20323639353137.roa (raw, json)
Hash identifier:          756/sKuyIxnt/HVQntOX9T7bRX3pPHQgYXNQDNlwl/k=
Subject key identifier:   0A:57:D6:73:30:7E:87:93:AA:2B:D5:11:A5:17:5A:27:32:FA:1F:1F
Certificate issuer:       /CN=F3FB9757ABE985717A1ED2B2112ECDA2A257E007
Certificate serial:       781E361C0D1E2DB6257002794ED3501400F9256B
Authority key identifier: F3:FB:97:57:AB:E9:85:71:7A:1E:D2:B2:11:2E:CD:A2:A2:57:E0:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/323830343a363564343a3a2f33322d3332203d3e20323639353137.roa
Signing time:             Sun 16 Feb 2025 13:29:18 +0000
ROA not before:           Sun 16 Feb 2025 13:24:18 +0000
ROA not after:            Sun 15 Feb 2026 13:29:18 +0000
asID:                     269517
IP address blocks:        2804:65d4::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:1e:36:1c:0d:1e:2d:b6:25:70:02:79:4e:d3:50:14:00:f9:25:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3FB9757ABE985717A1ED2B2112ECDA2A257E007
        Validity
            Not Before: Feb 16 13:24:18 2025 GMT
            Not After : Feb 15 13:29:18 2026 GMT
        Subject: CN=0A57D673307E8793AA2BD511A5175A2732FA1F1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:25:ad:a4:f7:46:d6:c4:4d:49:ff:5e:0e:bc:
                    37:00:1d:cb:06:81:d7:10:e8:b8:3b:50:36:16:d0:
                    52:5b:60:7e:d0:fc:df:9a:13:f6:c1:74:3c:63:f6:
                    88:ab:5c:70:3e:54:01:6b:0b:15:97:71:6c:4d:f5:
                    26:cc:ac:e2:1e:69:56:cd:5c:6d:42:f6:6d:56:c1:
                    6d:06:0f:71:e5:c1:e6:73:88:fa:05:de:7b:34:e0:
                    7f:f4:ea:8c:c7:63:64:b2:b0:4e:2e:b7:af:52:ea:
                    6c:6d:db:54:42:05:27:94:45:d7:63:29:da:54:6c:
                    79:7b:69:89:dc:2e:dc:6f:24:c7:1b:93:02:5d:3d:
                    ab:21:6c:c0:b1:db:8a:44:db:7a:0e:d4:7d:47:6e:
                    49:1f:c0:a6:b0:e9:78:d6:e0:53:b0:88:d0:b5:2b:
                    07:95:e8:d0:be:3c:72:73:cd:09:32:e2:75:6f:8b:
                    90:48:f5:e3:59:dd:34:2a:b2:86:6a:7e:f3:41:60:
                    4f:0f:d7:c6:fd:54:b6:00:0a:1a:1b:2c:f8:01:74:
                    e7:77:48:5f:74:23:31:dd:14:95:9f:02:28:a4:fa:
                    bc:50:04:04:38:6e:f0:91:06:9e:d7:10:70:e2:35:
                    b3:e8:dc:f2:cc:66:9a:c6:3c:25:07:c8:26:f7:80:
                    ac:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:57:D6:73:30:7E:87:93:AA:2B:D5:11:A5:17:5A:27:32:FA:1F:1F
            X509v3 Authority Key Identifier:
                keyid:F3:FB:97:57:AB:E9:85:71:7A:1E:D2:B2:11:2E:CD:A2:A2:57:E0:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/323830343a363564343a3a2f33322d3332203d3e20323639353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:65d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:96:38:f3:05:fe:3b:dc:46:74:be:7b:f1:27:86:a9:26:8d:
         a4:d4:1e:e1:20:f6:1a:78:e3:88:65:5d:93:50:87:7a:de:72:
         48:64:07:bc:e4:fb:8f:68:80:f6:47:74:c8:98:e8:7e:05:49:
         aa:db:3c:3f:ef:b1:81:c1:c1:b0:d1:3f:ff:3f:6f:d0:37:9a:
         0a:24:81:3a:06:79:c8:c8:d9:97:c6:d4:91:5e:6d:fa:61:01:
         e3:0f:a8:2f:7a:01:7c:57:3c:21:0b:16:4a:ff:ec:1b:9e:9a:
         af:5b:e8:f7:ee:90:4e:bc:0a:f0:d6:cc:f1:d2:01:4a:61:f6:
         e2:e1:76:6d:09:21:a6:ff:0c:68:35:25:ed:22:51:cd:e1:1e:
         04:e2:6c:17:1c:41:23:74:10:11:31:e4:2d:99:97:5f:98:d3:
         57:32:78:30:fd:8d:25:bc:dc:43:d0:db:a0:8f:d8:ad:58:9b:
         f5:5e:a8:59:54:e3:a2:8b:be:ed:5f:ed:77:34:88:bd:7a:42:
         58:1e:b7:c2:20:52:52:12:f1:2b:9d:5e:18:a4:15:ca:2b:53:
         f9:9c:fa:b4:a6:b1:16:36:6a:39:c6:72:d1:96:2c:f8:4c:b7:
         6c:92:7a:30:8c:79:ca:69:b7:00:29:6b:95:5a:b3:f8:90:7b:
         83:97:94:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:42:10 2025 by rpki-client