Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/323830343a333664343a343030303a3a2f33342d3334203d3e20323636333735.roa
File:                     323830343a333664343a343030303a3a2f33342d3334203d3e20323636333735.roa (raw, json)
Hash identifier:          7H/LCEZUp1ce018heWQjz4SPLXWLUno/WwF/EpYi4UU=
Subject key identifier:   B6:A6:06:E2:31:80:11:06:13:56:BA:44:9C:1E:B8:50:52:2B:0C:21
Certificate issuer:       /CN=191C80ED60706578C5B838B1955F974B67CB4E4D
Certificate serial:       775731F7B62778EA78971CE6416C3FDD277813E8
Authority key identifier: 19:1C:80:ED:60:70:65:78:C5:B8:38:B1:95:5F:97:4B:67:CB:4E:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/191C80ED60706578C5B838B1955F974B67CB4E4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/323830343a333664343a343030303a3a2f33342d3334203d3e20323636333735.roa
Signing time:             Tue 11 Feb 2025 13:58:38 +0000
ROA not before:           Tue 11 Feb 2025 13:53:38 +0000
ROA not after:            Tue 10 Feb 2026 13:58:38 +0000
asID:                     266375
IP address blocks:        2804:36d4:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:57:31:f7:b6:27:78:ea:78:97:1c:e6:41:6c:3f:dd:27:78:13:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191C80ED60706578C5B838B1955F974B67CB4E4D
        Validity
            Not Before: Feb 11 13:53:38 2025 GMT
            Not After : Feb 10 13:58:38 2026 GMT
        Subject: CN=B6A606E2318011061356BA449C1EB850522B0C21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:67:5a:c8:75:14:d3:e4:b0:f7:c3:f1:dc:45:
                    f0:49:a4:c1:03:3a:2f:35:d9:9e:3f:19:90:ac:ad:
                    fc:a8:18:14:d0:34:d0:5a:28:04:1c:cb:0a:02:a0:
                    52:85:f0:cf:7f:2a:56:3d:78:f8:74:f3:82:ba:c4:
                    c3:9f:da:93:8f:16:a8:9e:25:2d:3d:0f:98:76:4e:
                    54:11:b5:0d:b0:9d:b5:24:28:75:5c:9b:69:8c:6f:
                    96:8f:d2:07:f8:99:8d:c5:b0:33:b2:67:73:18:2b:
                    df:75:22:e6:3d:7c:07:ed:20:31:17:3c:d8:8f:52:
                    62:26:76:2d:2f:a0:4b:35:9a:c3:eb:4a:34:64:ad:
                    02:b5:f2:bf:5c:ae:76:95:12:35:15:9b:98:98:8f:
                    ca:0c:65:aa:f7:09:d1:1f:1c:3e:c4:d8:83:ed:f4:
                    67:c4:4e:a6:f1:45:81:5f:35:36:7f:b7:ef:2f:03:
                    06:df:58:be:92:de:46:9a:d3:0d:b1:15:25:81:57:
                    77:9e:ee:f7:c0:a3:d5:e2:d3:e5:c2:8d:5e:64:18:
                    74:88:65:d2:6c:a9:96:d7:13:c2:61:f0:64:72:d1:
                    5f:c5:87:bf:53:0e:8f:1d:85:4f:03:05:fe:5d:33:
                    39:7a:fc:35:ab:9a:79:5a:63:87:24:ec:9e:04:fb:
                    ea:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A6:06:E2:31:80:11:06:13:56:BA:44:9C:1E:B8:50:52:2B:0C:21
            X509v3 Authority Key Identifier:
                keyid:19:1C:80:ED:60:70:65:78:C5:B8:38:B1:95:5F:97:4B:67:CB:4E:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/191C80ED60706578C5B838B1955F974B67CB4E4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/191C80ED60706578C5B838B1955F974B67CB4E4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/323830343a333664343a343030303a3a2f33342d3334203d3e20323636333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:36d4:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         4e:3b:2d:38:c5:7e:78:34:35:f9:60:58:44:9e:2e:61:89:0d:
         8d:16:47:d1:1e:fc:e4:84:85:00:b5:14:a2:46:db:bc:31:d8:
         3e:e5:6a:28:ee:0f:2e:b5:1b:9a:38:f3:48:fb:c2:28:27:1f:
         0a:fb:64:f1:a1:4e:d3:c1:0b:a3:aa:33:bd:87:7d:84:81:6b:
         10:0e:df:fd:d1:8f:f0:41:b9:a8:6d:b6:c1:ae:02:0e:ee:03:
         1e:28:b7:d5:97:f8:94:6c:31:41:4b:22:d6:ef:11:6d:5b:76:
         af:0f:3c:53:2b:02:b7:08:e5:09:05:fe:41:85:8b:59:0f:d7:
         3a:d4:14:46:38:11:34:58:df:2e:e9:bc:03:b8:df:23:fb:0b:
         6b:d1:99:db:81:3c:9a:21:e5:90:c3:4c:df:fa:7c:9d:cf:ad:
         d4:4a:c8:65:af:0d:1e:f1:fc:75:c9:53:e4:48:39:6c:4f:88:
         84:13:9c:af:98:20:c6:1d:bd:b6:ee:d0:90:60:3c:c8:ee:58:
         8c:8a:15:c3:53:69:41:09:7d:a7:c6:a8:23:58:02:51:31:76:
         36:3c:ef:10:dd:92:fd:8e:da:d0:01:f8:7d:c4:01:12:d1:7a:
         9b:43:51:b9:1c:6c:5b:e8:b2:da:12:21:82:59:2d:9c:37:df:
         d9:a2:b4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:08:41 2025 by rpki-client