Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FJvgz9KfoQYQAj5kKgJNqb2tUud5ayA4QqAmSGxevUdu/0/323830343a373263343a383030303a3a2f33342d3334203d3e20323730383734.roa
File:                     323830343a373263343a383030303a3a2f33342d3334203d3e20323730383734.roa (raw, json)
Hash identifier:          orAFe940hRnEG1RKXpyzWjeT4+vdO+yTwq9E4qNaZHc=
Subject key identifier:   88:4D:4F:AB:7F:61:67:B7:D7:70:D4:D6:5F:0C:33:37:95:D4:5E:35
Certificate issuer:       /CN=5F384CAF597EE6AD61C526C86D22E586C1935FA0
Certificate serial:       19E2F5379D80D0A79CC5335895980D10E4F62A5E
Authority key identifier: 5F:38:4C:AF:59:7E:E6:AD:61:C5:26:C8:6D:22:E5:86:C1:93:5F:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F384CAF597EE6AD61C526C86D22E586C1935FA0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FJvgz9KfoQYQAj5kKgJNqb2tUud5ayA4QqAmSGxevUdu/0/323830343a373263343a383030303a3a2f33342d3334203d3e20323730383734.roa
Signing time:             Mon 13 May 2024 04:17:31 +0000
ROA not before:           Mon 13 May 2024 04:12:31 +0000
ROA not after:            Mon 12 May 2025 04:17:31 +0000
asID:                     270874
IP address blocks:        2804:72c4:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:e2:f5:37:9d:80:d0:a7:9c:c5:33:58:95:98:0d:10:e4:f6:2a:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F384CAF597EE6AD61C526C86D22E586C1935FA0
        Validity
            Not Before: May 13 04:12:31 2024 GMT
            Not After : May 12 04:17:31 2025 GMT
        Subject: CN=884D4FAB7F6167B7D770D4D65F0C333795D45E35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:36:54:0b:01:79:81:57:2a:72:43:f9:24:c7:
                    d8:74:02:cb:9e:e6:54:41:a0:e7:90:5e:e1:2b:ac:
                    21:c2:27:71:2e:3c:1c:e7:79:89:5e:52:d7:78:f7:
                    b9:c0:ae:7a:be:40:26:e0:e4:fd:ad:ab:c0:7b:fc:
                    6a:b9:80:3a:9d:dc:b6:e1:3d:be:e5:b9:f4:0f:12:
                    3a:72:a7:c1:d0:ac:21:b5:68:0e:14:29:75:bc:52:
                    09:70:1a:8d:14:bb:27:55:75:08:1e:1b:12:7d:1c:
                    b5:47:f7:c7:d5:57:6e:ff:22:22:c9:48:59:7a:6a:
                    9b:a6:d1:6f:a7:23:b4:38:e2:e1:60:82:f8:d0:45:
                    00:a9:85:4a:1a:02:72:a1:de:21:59:b8:e7:d1:5e:
                    ad:25:03:29:4f:1d:ca:0b:3d:b4:2b:81:2a:03:ca:
                    c1:7d:08:4e:ec:59:4d:55:01:6b:e1:1f:ca:85:1a:
                    fe:c3:22:2b:82:99:69:6d:a1:a8:7c:09:4d:4d:43:
                    20:88:76:35:00:69:00:96:6b:48:fd:bd:2e:02:3c:
                    2c:90:81:8f:dc:75:44:6b:d9:87:58:5a:78:af:c9:
                    d8:ee:ec:e9:b4:b0:ec:ec:41:6e:6b:24:33:61:1c:
                    e4:a7:13:df:8d:fb:53:a1:e1:60:ba:8e:00:aa:62:
                    05:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:4D:4F:AB:7F:61:67:B7:D7:70:D4:D6:5F:0C:33:37:95:D4:5E:35
            X509v3 Authority Key Identifier:
                keyid:5F:38:4C:AF:59:7E:E6:AD:61:C5:26:C8:6D:22:E5:86:C1:93:5F:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FJvgz9KfoQYQAj5kKgJNqb2tUud5ayA4QqAmSGxevUdu/0/5F384CAF597EE6AD61C526C86D22E586C1935FA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F384CAF597EE6AD61C526C86D22E586C1935FA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FJvgz9KfoQYQAj5kKgJNqb2tUud5ayA4QqAmSGxevUdu/0/323830343a373263343a383030303a3a2f33342d3334203d3e20323730383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:72c4:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         ab:b7:bb:c1:0e:0f:27:57:65:7b:05:5e:15:09:d1:fd:ae:53:
         3f:9c:91:2b:6d:c5:d5:93:54:df:5f:d4:ce:b9:4f:05:b3:47:
         93:3c:ed:44:84:1d:68:2a:f0:cf:98:a6:17:c5:3b:a6:ea:b8:
         c4:d9:1e:df:9b:81:7c:6d:e2:ec:81:14:94:17:58:99:bb:5c:
         df:9a:1a:ff:ad:b9:5a:75:ab:c7:aa:69:58:4d:72:67:ed:0b:
         d5:38:cf:b8:00:ee:39:72:8f:3c:c8:9a:46:ff:9f:ac:b3:b2:
         a3:27:ff:19:6b:e7:bf:7a:47:84:b4:5b:1e:69:7d:ae:32:7a:
         cb:2b:7b:26:20:aa:74:bd:52:38:02:43:7e:33:4f:a6:6a:66:
         1e:5a:ed:17:c9:3a:85:02:62:53:c0:42:5f:ae:58:fa:71:be:
         f3:2f:48:e4:65:23:e1:c8:31:d2:0a:68:7e:d8:38:64:51:4f:
         05:e4:e6:f4:f5:02:61:9e:bc:34:10:a0:f4:d0:d1:b4:10:11:
         36:14:41:86:2b:f7:af:87:26:a7:58:45:f6:c4:b6:e8:3c:8c:
         2e:72:7d:01:68:80:3e:3b:52:ce:a0:4d:16:32:d8:18:f7:bc:
         9d:ea:bf:63:83:bb:76:05:ad:6f:44:22:89:3d:1b:01:d6:b1:
         d5:50:90:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 06:02:15 2025 by rpki-client