Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/323830343a356234303a3a2f33322d313238203d3e20323638383239.roa
File:                     323830343a356234303a3a2f33322d313238203d3e20323638383239.roa (raw, json)
Hash identifier:          6F9VxEwYbXMAK/f2fdAaow+YSp1VhZ72hJaGExe+K0M=
Subject key identifier:   40:9F:05:13:F9:D6:EB:B0:D4:67:4F:04:3B:7E:1A:17:74:3A:86:0C
Certificate issuer:       /CN=39E85F0FE1363D1C06C587486EEDD5B362BE6AF8
Certificate serial:       694EAA5E12858A9EE2CCFA3DAB173836E45AD054
Authority key identifier: 39:E8:5F:0F:E1:36:3D:1C:06:C5:87:48:6E:ED:D5:B3:62:BE:6A:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E85F0FE1363D1C06C587486EEDD5B362BE6AF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/323830343a356234303a3a2f33322d313238203d3e20323638383239.roa
Signing time:             Wed 13 Nov 2024 17:43:34 +0000
ROA not before:           Wed 13 Nov 2024 17:38:34 +0000
ROA not after:            Wed 12 Nov 2025 17:43:34 +0000
asID:                     268829
IP address blocks:        2804:5b40::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:4e:aa:5e:12:85:8a:9e:e2:cc:fa:3d:ab:17:38:36:e4:5a:d0:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39E85F0FE1363D1C06C587486EEDD5B362BE6AF8
        Validity
            Not Before: Nov 13 17:38:34 2024 GMT
            Not After : Nov 12 17:43:34 2025 GMT
        Subject: CN=409F0513F9D6EBB0D4674F043B7E1A17743A860C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d9:17:01:2c:57:3c:0b:60:4b:8b:89:b7:e6:
                    5a:5f:89:fc:24:c1:70:5d:f3:24:cd:bd:72:b3:44:
                    4e:a4:6e:c1:d7:8d:bb:43:ae:b4:15:b4:34:15:02:
                    60:e1:b8:df:b9:c9:db:a9:69:a1:7d:e6:05:9a:15:
                    c8:17:fd:d2:53:75:2c:52:24:4f:4a:0b:ec:2b:42:
                    6a:df:e5:a3:bf:59:10:ef:10:c4:7b:ba:53:8d:85:
                    4e:05:8e:46:2f:5a:66:0b:c5:b0:0b:04:38:9a:de:
                    5d:a5:88:26:9f:01:94:69:cc:ad:b1:99:30:8c:aa:
                    dd:74:54:3e:4c:5b:c9:30:f2:03:f6:6c:52:a7:7d:
                    76:2e:29:c5:54:1b:ba:6c:df:2f:0a:f9:f7:2a:0c:
                    a4:94:b6:f5:b0:90:62:d7:ca:1b:a7:f0:6e:c4:9d:
                    5f:fa:10:96:56:89:cb:e4:00:8b:22:2f:da:84:33:
                    ad:3f:dc:7f:79:5f:60:24:db:2c:d3:6b:35:c8:3e:
                    bd:09:e9:e6:fb:75:21:ef:cb:84:99:7b:a0:1e:2e:
                    64:59:13:5f:b0:cb:05:0a:a9:ff:5f:23:c4:47:b3:
                    6c:bd:95:15:5c:7e:71:61:8b:24:d6:ac:ec:95:1a:
                    4c:15:2f:14:35:ce:aa:ef:96:93:8e:09:70:e7:3f:
                    cf:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:9F:05:13:F9:D6:EB:B0:D4:67:4F:04:3B:7E:1A:17:74:3A:86:0C
            X509v3 Authority Key Identifier:
                keyid:39:E8:5F:0F:E1:36:3D:1C:06:C5:87:48:6E:ED:D5:B3:62:BE:6A:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/39E85F0FE1363D1C06C587486EEDD5B362BE6AF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E85F0FE1363D1C06C587486EEDD5B362BE6AF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/323830343a356234303a3a2f33322d313238203d3e20323638383239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b40::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:2b:a5:21:c2:93:a6:26:22:5a:c0:6a:c9:60:eb:c7:85:b2:
         0d:33:c7:87:57:37:3f:68:77:87:80:7a:1f:c2:08:40:a5:40:
         da:7a:04:1f:c0:ec:67:3d:6f:1f:54:af:0f:51:3b:a6:51:a7:
         84:d7:47:a8:0b:19:ce:e7:39:3a:14:57:b4:6e:de:2b:72:15:
         9b:1e:bb:c9:dc:e8:bf:cd:b8:a6:29:13:42:d3:47:09:8b:ef:
         ec:d9:94:fe:00:68:f1:c0:9a:d2:e6:6e:4f:93:25:6b:d8:da:
         85:a3:e6:70:d8:1a:8d:9d:0a:26:0d:9f:d7:b2:e4:ff:1d:17:
         f4:48:76:f8:7e:36:83:b7:d5:4b:61:e6:da:f4:25:44:ad:10:
         e3:8f:3f:c3:dc:9e:76:b4:cf:a7:4f:af:b9:60:ed:6c:87:a4:
         ec:99:ea:28:23:9f:54:12:45:35:63:c9:b3:10:7f:49:d6:d0:
         c5:8b:ef:4b:84:70:79:c6:04:e5:27:81:f9:89:e3:59:b3:bc:
         3a:d1:0e:6a:43:90:21:63:6a:62:33:a6:f0:b7:b5:a3:b1:7b:
         bc:8f:11:8d:bc:5c:e7:22:d5:8d:79:48:f7:bf:72:66:b1:fe:
         6d:10:8d:a0:09:8c:e4:cb:1f:9d:4d:bb:be:66:b7:0e:00:59:
         4f:2c:cd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:30 2025 by rpki-client