Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/323830343a333237383a343030303a3a2f33342d3334203d3e20323635303830.roa
File:                     323830343a333237383a343030303a3a2f33342d3334203d3e20323635303830.roa (raw, json)
Hash identifier:          1OquXXyiQf1ycmNmWlmHq//CLggEMkOAvIiSAbzZjXM=
Subject key identifier:   9E:D6:04:9C:6E:47:EB:F2:17:EF:52:74:F4:F3:D8:58:A0:AB:75:07
Certificate issuer:       /CN=D606CC74EC936AA8ED7F384A9E1B7C0A945C0A38
Certificate serial:       687601C3CC9F878764C58819EA8170F604CAD252
Authority key identifier: D6:06:CC:74:EC:93:6A:A8:ED:7F:38:4A:9E:1B:7C:0A:94:5C:0A:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D606CC74EC936AA8ED7F384A9E1B7C0A945C0A38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/323830343a333237383a343030303a3a2f33342d3334203d3e20323635303830.roa
Signing time:             Mon 10 Feb 2025 17:25:10 +0000
ROA not before:           Mon 10 Feb 2025 17:20:10 +0000
ROA not after:            Mon 09 Feb 2026 17:25:10 +0000
asID:                     265080
IP address blocks:        2804:3278:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:76:01:c3:cc:9f:87:87:64:c5:88:19:ea:81:70:f6:04:ca:d2:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D606CC74EC936AA8ED7F384A9E1B7C0A945C0A38
        Validity
            Not Before: Feb 10 17:20:10 2025 GMT
            Not After : Feb  9 17:25:10 2026 GMT
        Subject: CN=9ED6049C6E47EBF217EF5274F4F3D858A0AB7507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a9:a6:ff:3c:56:35:0b:12:1b:e7:07:d3:93:
                    e2:59:72:e1:48:30:e7:53:08:a4:0c:51:cd:0c:01:
                    f0:cd:01:8f:cc:71:74:1e:18:b9:e6:86:14:ad:7f:
                    f9:fe:0b:7d:05:56:8d:1a:ea:28:87:9e:1d:6e:09:
                    8d:22:dc:d3:cb:fa:10:3d:5d:5c:c7:7d:5d:d5:17:
                    64:bd:e4:07:fc:4c:93:8e:5c:ec:7f:bf:bf:ec:45:
                    96:4e:39:b1:21:20:a6:b3:3e:4a:42:2b:f7:08:35:
                    fd:95:5d:ae:93:17:7b:c8:f3:fe:a9:35:ac:d5:b9:
                    bc:bc:49:a7:1a:57:32:7b:3b:24:1a:4a:bb:fe:7f:
                    23:39:5b:07:ff:f0:88:d6:1e:fe:32:1d:2d:bf:0c:
                    80:cc:ed:a6:a4:ef:c7:ba:3b:d0:26:0f:81:84:3c:
                    12:54:7e:6e:25:f2:28:d2:8a:8f:35:4b:41:09:72:
                    51:71:39:d2:d1:50:3e:64:80:73:00:f3:5e:c0:6b:
                    0a:f4:14:c0:79:b8:4c:22:47:d8:04:b3:87:92:d9:
                    1b:49:71:46:27:60:02:0f:dd:61:d9:25:64:83:cd:
                    0a:56:f8:d2:53:65:90:47:ee:90:a4:a1:22:46:3c:
                    f5:20:de:c7:44:f4:01:60:43:60:b7:8b:9e:31:7d:
                    da:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D6:04:9C:6E:47:EB:F2:17:EF:52:74:F4:F3:D8:58:A0:AB:75:07
            X509v3 Authority Key Identifier:
                keyid:D6:06:CC:74:EC:93:6A:A8:ED:7F:38:4A:9E:1B:7C:0A:94:5C:0A:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/D606CC74EC936AA8ED7F384A9E1B7C0A945C0A38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D606CC74EC936AA8ED7F384A9E1B7C0A945C0A38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/323830343a333237383a343030303a3a2f33342d3334203d3e20323635303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3278:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6b:95:95:7d:31:4e:d9:23:16:85:31:d0:df:12:2f:79:d0:5b:
         f5:c0:38:21:fb:ae:38:26:a2:53:f8:7d:97:12:ac:58:24:07:
         98:0d:6a:cf:b8:50:9d:36:3b:36:b6:d3:42:dd:1c:eb:4a:a5:
         9e:64:e4:d2:55:34:62:0e:52:1f:c0:62:5a:d7:7f:f8:cb:c1:
         74:08:5a:00:75:f0:eb:2d:50:e6:86:d4:8c:48:61:0b:c1:42:
         12:2a:b9:8a:dc:d8:67:c7:39:7c:04:a1:a6:7e:ab:ed:d5:05:
         b4:ec:a8:2c:b6:82:c1:49:0f:c3:c2:38:d6:75:7d:da:32:81:
         a8:65:d2:c4:49:31:7e:90:bd:18:5a:78:9e:29:dd:94:e1:f3:
         fa:dd:35:79:1a:36:99:23:70:62:bc:ed:dc:ad:a6:83:0e:4f:
         a4:3e:32:f3:8f:4a:32:7f:d5:11:0d:40:ed:b0:d5:71:15:26:
         56:43:c8:99:1f:7e:bf:9b:a9:da:f1:6f:9d:80:50:dd:ef:c5:
         6e:bb:88:29:49:62:0d:6a:97:1e:f0:56:4b:2a:26:08:3e:b8:
         53:0a:0e:95:45:27:40:6d:87:2c:1b:bf:77:41:18:9e:74:38:
         f8:97:53:7c:7b:e8:21:48:81:31:7f:54:6f:89:5d:78:9f:4d:
         2e:f2:f1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:39:12 2025 by rpki-client