Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/323830343a363562303a383030303a3a2f33342d3334203d3e20323639353038.roa
File:                     323830343a363562303a383030303a3a2f33342d3334203d3e20323639353038.roa (raw, json)
Hash identifier:          iJvs8rfWE8S/PUFhBHvMlGo6J1eOCLRTzXMq483PAn4=
Subject key identifier:   22:E3:8A:22:60:61:42:A0:37:C9:42:E5:E2:3F:A5:75:17:92:0E:03
Certificate issuer:       /CN=38025C3CE376357918C078D8E62D989FFD0406EC
Certificate serial:       1D93B93908A68B6041FC2C3FBB328642E926B8A6
Authority key identifier: 38:02:5C:3C:E3:76:35:79:18:C0:78:D8:E6:2D:98:9F:FD:04:06:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38025C3CE376357918C078D8E62D989FFD0406EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/323830343a363562303a383030303a3a2f33342d3334203d3e20323639353038.roa
Signing time:             Fri 14 Mar 2025 21:43:30 +0000
ROA not before:           Fri 14 Mar 2025 21:38:30 +0000
ROA not after:            Fri 13 Mar 2026 21:43:30 +0000
asID:                     269508
IP address blocks:        2804:65b0:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:93:b9:39:08:a6:8b:60:41:fc:2c:3f:bb:32:86:42:e9:26:b8:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38025C3CE376357918C078D8E62D989FFD0406EC
        Validity
            Not Before: Mar 14 21:38:30 2025 GMT
            Not After : Mar 13 21:43:30 2026 GMT
        Subject: CN=22E38A22606142A037C942E5E23FA57517920E03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e4:eb:df:53:67:12:30:3d:46:ce:09:28:30:
                    b0:2d:6f:8c:db:5e:e7:86:9e:6f:55:c5:a5:0f:bd:
                    db:d8:ef:ff:14:80:0b:85:39:06:cb:2e:ba:1c:ab:
                    95:bc:57:a7:97:12:ba:8b:a7:66:18:e3:cb:42:9e:
                    52:da:fe:96:35:9c:40:de:46:ff:69:e3:42:40:e5:
                    98:90:a5:04:2d:34:65:9c:3f:cc:e2:c8:5b:7a:26:
                    2f:45:5a:e6:44:24:20:a3:c5:1a:0d:68:62:5f:cb:
                    95:89:d5:73:21:1c:ed:4a:34:02:c3:c1:9c:0c:91:
                    52:36:a0:f7:d9:90:86:2b:d8:02:0b:90:e3:d1:92:
                    32:47:ff:9d:e6:9b:25:e6:6a:6c:0d:72:95:ac:e2:
                    e0:c3:0b:66:e6:da:6d:8e:82:9a:77:5f:3e:87:83:
                    3d:c8:2c:13:73:c2:a8:7f:54:29:ab:b6:28:c7:ce:
                    36:2b:d0:de:bc:d1:ad:b6:ea:8b:0c:6e:d1:02:fb:
                    80:36:51:33:36:76:2f:18:bd:b6:bb:5b:c9:c6:bc:
                    fb:df:e3:8a:66:dd:e0:bd:95:fe:33:fe:e1:66:70:
                    f6:50:2a:63:4e:72:45:e4:ff:93:4c:52:e2:f3:7d:
                    9d:9b:fe:6a:65:ee:cf:0b:30:6f:7a:e9:24:0d:e0:
                    67:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E3:8A:22:60:61:42:A0:37:C9:42:E5:E2:3F:A5:75:17:92:0E:03
            X509v3 Authority Key Identifier:
                keyid:38:02:5C:3C:E3:76:35:79:18:C0:78:D8:E6:2D:98:9F:FD:04:06:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/38025C3CE376357918C078D8E62D989FFD0406EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38025C3CE376357918C078D8E62D989FFD0406EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/323830343a363562303a383030303a3a2f33342d3334203d3e20323639353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:65b0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         88:31:cf:10:4e:52:df:f0:5f:79:8b:7f:8e:3c:49:84:e7:8f:
         ae:f9:ef:0b:c8:3a:12:94:cf:25:53:4e:2e:9f:57:17:6e:b2:
         85:ce:86:76:47:e8:e2:01:11:b8:df:29:a2:5b:a5:9c:7d:12:
         1f:a3:e8:68:03:8a:fe:79:68:d6:ce:a8:9c:92:5c:25:0b:fd:
         61:78:1e:1d:19:04:b0:db:bf:39:1a:9e:38:39:89:e1:bb:79:
         54:90:e4:73:db:58:20:89:3c:50:71:0a:5d:f2:69:08:0c:cb:
         97:df:a4:43:b1:37:09:56:14:06:eb:bf:df:30:73:2e:b6:8c:
         26:33:35:b6:2c:07:53:1b:21:7b:cb:69:cf:24:de:b1:5a:7a:
         89:a6:90:05:4b:06:84:7e:27:f1:a9:b5:65:93:48:0d:a8:db:
         a9:63:71:e3:94:66:31:da:54:ba:b4:0b:e9:6c:47:50:d2:88:
         fd:1d:f2:3e:23:a9:27:87:bd:fe:7f:65:48:96:68:09:9e:23:
         d4:33:c6:76:19:e0:a0:fb:05:9a:6c:fd:80:7b:a7:4b:4c:49:
         a9:32:c1:fc:5b:1b:00:5b:7f:7a:8e:6f:60:a2:c0:ef:00:70:
         73:8c:88:c2:7d:e0:c8:5d:22:78:f8:ae:41:1b:76:4b:11:bd:
         df:12:98:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:54:24 2025 by rpki-client