Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/323830343a363562303a633030303a3a2f33342d3334203d3e20323639353038.roa
File:                     323830343a363562303a633030303a3a2f33342d3334203d3e20323639353038.roa (raw, json)
Hash identifier:          iiboG93cUwq9aiXqtF/C+qU239+P73vFA7fCFy9GPHA=
Subject key identifier:   52:32:DC:55:C1:F8:17:FA:14:22:8E:04:D5:18:27:B7:57:B7:B3:69
Certificate issuer:       /CN=38025C3CE376357918C078D8E62D989FFD0406EC
Certificate serial:       26D6F7F912FA01053D41265FF53AF52A333A5585
Authority key identifier: 38:02:5C:3C:E3:76:35:79:18:C0:78:D8:E6:2D:98:9F:FD:04:06:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38025C3CE376357918C078D8E62D989FFD0406EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/323830343a363562303a633030303a3a2f33342d3334203d3e20323639353038.roa
Signing time:             Fri 14 Mar 2025 21:43:30 +0000
ROA not before:           Fri 14 Mar 2025 21:38:30 +0000
ROA not after:            Fri 13 Mar 2026 21:43:30 +0000
asID:                     269508
IP address blocks:        2804:65b0:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:d6:f7:f9:12:fa:01:05:3d:41:26:5f:f5:3a:f5:2a:33:3a:55:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38025C3CE376357918C078D8E62D989FFD0406EC
        Validity
            Not Before: Mar 14 21:38:30 2025 GMT
            Not After : Mar 13 21:43:30 2026 GMT
        Subject: CN=5232DC55C1F817FA14228E04D51827B757B7B369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b3:73:c7:1a:f7:f0:88:41:b9:78:00:df:95:
                    86:d3:16:05:52:ed:44:48:60:1a:5b:84:c0:4a:dd:
                    68:35:25:63:f5:69:51:05:f5:51:83:75:f5:aa:33:
                    56:9c:8d:aa:2f:de:46:ae:d4:ec:ff:06:37:da:c0:
                    42:16:16:be:18:ce:20:c0:84:97:d6:db:7e:a7:e7:
                    0c:b1:57:b4:04:fd:e8:bb:84:be:63:a9:13:65:c6:
                    e8:10:ae:bd:6b:74:a2:31:a2:d2:73:70:72:8a:c4:
                    06:d7:e6:44:3d:00:38:0c:42:d1:2d:95:98:36:03:
                    cc:17:35:76:7e:f6:f2:a2:88:b7:57:85:95:93:a3:
                    b8:0e:f1:a6:ce:b3:28:ff:ef:d2:59:9b:5b:53:6b:
                    04:28:34:af:01:48:d5:30:fc:5c:47:e0:46:ef:4d:
                    21:e0:3e:31:6f:0f:6e:4c:02:65:e0:59:5a:b6:87:
                    0f:b1:52:23:e5:77:c6:55:4a:ae:a3:1d:a7:1f:1a:
                    93:4f:32:48:ec:52:5f:57:99:9e:21:54:e8:c4:33:
                    fc:9e:1e:5a:f7:3b:c6:2d:ae:bf:9d:23:13:c7:80:
                    d7:e5:b1:f6:f8:18:cc:dd:bf:6d:8d:0a:a8:59:98:
                    b1:19:ae:12:0e:85:f9:c3:7c:fb:2a:ef:01:ae:3f:
                    77:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:32:DC:55:C1:F8:17:FA:14:22:8E:04:D5:18:27:B7:57:B7:B3:69
            X509v3 Authority Key Identifier:
                keyid:38:02:5C:3C:E3:76:35:79:18:C0:78:D8:E6:2D:98:9F:FD:04:06:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/38025C3CE376357918C078D8E62D989FFD0406EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38025C3CE376357918C078D8E62D989FFD0406EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/323830343a363562303a633030303a3a2f33342d3334203d3e20323639353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:65b0:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         60:9d:ae:c1:80:a9:59:f2:63:8a:c5:65:fd:e4:5d:bd:09:0a:
         52:b9:a0:65:0b:be:62:ac:75:24:4c:f5:9e:08:b6:2d:61:1b:
         46:a5:8e:d7:72:b5:14:19:3c:85:fa:52:c7:d3:ec:83:6e:0d:
         cc:3c:1f:b2:3f:14:78:25:70:96:52:89:48:e9:ca:5c:fa:e8:
         8d:27:b6:77:b8:e6:3e:8b:a5:da:7c:16:b8:ea:bf:c5:fe:89:
         b5:8f:a3:4d:26:e8:76:9e:ad:1f:d2:29:58:ca:b1:d0:80:9c:
         10:31:88:53:68:52:67:69:0c:c5:f9:18:a5:77:2c:1a:f4:23:
         05:ed:85:8b:bf:f7:7b:3e:7c:36:fc:2e:7c:b8:a9:d6:4c:fd:
         78:21:71:f5:bb:be:22:40:57:0c:50:b3:ce:c4:c1:c6:74:87:
         dc:a6:84:49:a2:eb:43:34:60:40:18:87:e6:66:1d:14:aa:02:
         88:cc:14:38:51:3a:47:28:a7:44:31:5d:e1:77:eb:71:9c:ca:
         3c:42:26:42:bc:9a:20:08:5f:ea:fb:26:18:32:5d:df:7b:11:
         d5:28:93:bb:b5:c8:f2:80:ce:c5:c4:ba:00:9d:5b:69:df:b1:
         62:e8:6c:92:38:03:b0:04:90:80:ae:21:3f:f5:bd:63:02:e8:
         16:b0:d2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:44:15 2025 by rpki-client