Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/323830343a3831633a3a2f33322d3438203d3e20323632333436.roa
File:                     323830343a3831633a3a2f33322d3438203d3e20323632333436.roa (raw, json)
Hash identifier:          CNiIZxl/3E62K6LTCXfWr6Ed/xVAfg9Q3TQDVI/WH1c=
Subject key identifier:   C6:9D:F2:5E:F0:D2:4D:D4:E7:76:15:1C:E1:82:CA:46:1F:49:80:36
Certificate issuer:       /CN=D6BB4A91FBEFB5DEB7F910E0E53465EE643DEFEE
Certificate serial:       454DCF6BCF5BFD5B77FB157BAD714129B97980B4
Authority key identifier: D6:BB:4A:91:FB:EF:B5:DE:B7:F9:10:E0:E5:34:65:EE:64:3D:EF:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6BB4A91FBEFB5DEB7F910E0E53465EE643DEFEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/323830343a3831633a3a2f33322d3438203d3e20323632333436.roa
Signing time:             Mon 28 Oct 2024 17:32:38 +0000
ROA not before:           Mon 28 Oct 2024 17:27:38 +0000
ROA not after:            Mon 27 Oct 2025 17:32:38 +0000
asID:                     262346
IP address blocks:        2804:81c::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:4d:cf:6b:cf:5b:fd:5b:77:fb:15:7b:ad:71:41:29:b9:79:80:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6BB4A91FBEFB5DEB7F910E0E53465EE643DEFEE
        Validity
            Not Before: Oct 28 17:27:38 2024 GMT
            Not After : Oct 27 17:32:38 2025 GMT
        Subject: CN=C69DF25EF0D24DD4E776151CE182CA461F498036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d9:14:10:6d:c8:4a:2d:ab:86:64:23:73:ef:
                    21:67:af:6b:ff:5e:00:c3:48:b8:5e:4b:63:c4:fc:
                    14:3a:fb:b3:3e:31:cc:a5:6b:c2:64:55:a7:67:bb:
                    b6:a1:94:dd:1b:44:bb:87:f8:2c:47:10:c5:10:90:
                    47:3e:b3:4c:1d:ac:5f:f1:aa:25:84:43:cd:46:f7:
                    d4:4a:e6:d5:a5:b5:05:bf:4a:e9:d8:d7:16:fe:6a:
                    c0:4d:d6:07:92:cd:51:15:37:26:c0:02:48:8c:92:
                    40:98:57:4a:e3:7a:d8:4b:33:ad:74:c1:74:c2:07:
                    f2:aa:c8:80:6f:32:04:53:05:c2:58:2e:a2:8f:7e:
                    e4:e1:12:65:d4:18:cf:cb:f4:54:54:a0:a5:5a:03:
                    d6:df:ee:5c:cb:e7:16:91:db:ae:1c:ab:a2:7e:2e:
                    5b:b4:8b:0b:89:3e:da:63:7c:f3:90:38:20:8b:b2:
                    20:69:d7:ea:7f:92:26:0d:87:5c:c5:23:ff:79:dd:
                    dd:c8:2b:c6:46:e2:42:64:bd:ea:6c:6b:35:9b:24:
                    8d:e7:b7:6a:d2:4a:00:ea:54:ab:d1:6a:ed:45:c6:
                    c1:09:0d:8c:c8:79:06:28:7a:a5:69:82:1d:53:03:
                    1d:13:98:46:86:e4:10:55:a3:79:2e:5f:a4:ae:42:
                    cb:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:9D:F2:5E:F0:D2:4D:D4:E7:76:15:1C:E1:82:CA:46:1F:49:80:36
            X509v3 Authority Key Identifier:
                keyid:D6:BB:4A:91:FB:EF:B5:DE:B7:F9:10:E0:E5:34:65:EE:64:3D:EF:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/D6BB4A91FBEFB5DEB7F910E0E53465EE643DEFEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6BB4A91FBEFB5DEB7F910E0E53465EE643DEFEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/323830343a3831633a3a2f33322d3438203d3e20323632333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:81c::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:eb:41:0e:28:c9:cd:a9:de:d5:3a:93:94:47:dc:a3:f0:3e:
         8a:e3:a4:fe:af:e6:1d:08:57:9d:39:7e:01:31:55:12:b1:bd:
         c6:d9:76:24:b0:49:22:86:e3:c9:50:c2:06:6a:66:46:ea:01:
         85:35:47:49:9f:21:d8:13:97:23:c0:36:bf:11:e1:36:5c:98:
         b4:c1:2b:97:91:73:d3:e3:79:7f:fc:a0:12:81:89:92:fc:8f:
         23:51:a8:89:96:e7:75:55:3f:e4:f3:0b:23:2c:9a:b9:7d:ef:
         fe:00:65:27:ac:91:e8:cb:61:ff:77:c6:86:4d:ef:c7:d5:f9:
         76:7f:92:00:a3:38:50:60:a6:48:18:10:b7:bc:68:0c:92:e7:
         f8:bb:88:7c:08:76:4b:b9:e3:d0:70:9a:15:f2:55:25:ef:67:
         ba:35:73:7f:7b:7b:f6:52:0d:af:50:da:d0:91:c0:e4:55:81:
         6e:3a:df:34:45:b4:8d:6f:2e:0b:89:34:dd:7f:8b:be:66:f5:
         3e:92:1d:fa:dd:8d:3d:c8:8b:0a:7f:74:f1:d5:9c:a9:01:63:
         de:c3:af:9b:d9:aa:c4:11:1c:4b:d3:84:96:ad:ca:bb:ad:fb:
         7b:a7:69:33:5d:4d:2d:73:6a:58:79:b5:8f:17:77:8b:2a:6c:
         52:9d:62:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:38:25 2025 by rpki-client