Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FRQrYnt7LbTo9ijxMQ7hVQL6xkCy9dD7qArQ1BJ1N76d/0/323830343a336162383a3a2f33322d3332203d3e20323636313035.roa
File:                     323830343a336162383a3a2f33322d3332203d3e20323636313035.roa (raw, json)
Hash identifier:          sGvJpl9UQ7qea1RJLjho9uUvTqxM3JCFvH0ZdbZ+yhk=
Subject key identifier:   16:7E:7D:34:B2:73:E5:FC:97:09:5E:D3:56:9A:F9:F9:77:68:A3:2C
Certificate issuer:       /CN=C6822FB9E5BC38D4B1DA40A1163F90BDC005D290
Certificate serial:       3C20DD5DDDB43DA7B56033584A9504ABD7F1AA43
Authority key identifier: C6:82:2F:B9:E5:BC:38:D4:B1:DA:40:A1:16:3F:90:BD:C0:05:D2:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6822FB9E5BC38D4B1DA40A1163F90BDC005D290.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRQrYnt7LbTo9ijxMQ7hVQL6xkCy9dD7qArQ1BJ1N76d/0/323830343a336162383a3a2f33322d3332203d3e20323636313035.roa
Signing time:             Mon 15 Jan 2024 14:47:47 +0000
ROA not before:           Mon 15 Jan 2024 14:42:47 +0000
ROA not after:            Mon 13 Jan 2025 14:47:47 +0000
asID:                     266105
IP address blocks:        2804:3ab8::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:20:dd:5d:dd:b4:3d:a7:b5:60:33:58:4a:95:04:ab:d7:f1:aa:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6822FB9E5BC38D4B1DA40A1163F90BDC005D290
        Validity
            Not Before: Jan 15 14:42:47 2024 GMT
            Not After : Jan 13 14:47:47 2025 GMT
        Subject: CN=167E7D34B273E5FC97095ED3569AF9F97768A32C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f7:0b:a3:43:ae:cb:8c:ba:54:f7:c1:81:33:
                    a4:bf:b7:b5:8a:04:4c:94:1a:da:34:80:ec:6b:1c:
                    2f:e2:d2:5b:52:0f:ce:30:ff:ac:40:a9:c1:7b:73:
                    3c:4d:9a:cb:74:ff:e7:55:f0:62:10:60:1c:67:88:
                    72:44:4d:bd:86:cb:ce:6f:2f:8d:bf:a9:29:be:cd:
                    60:44:b8:96:7f:a4:72:fb:52:2c:40:6c:9b:ab:a9:
                    ec:16:a1:d5:c9:82:45:ab:54:e5:dc:7c:8e:a4:8b:
                    47:43:25:c2:fc:8a:0b:db:94:e4:7d:fe:69:78:47:
                    a3:4f:a1:3a:df:0d:71:b6:b5:01:7d:4a:a1:6b:2d:
                    c4:8d:39:9f:e4:09:81:6f:67:a7:7b:dc:da:af:a9:
                    e5:91:4c:1f:e6:a9:a5:53:5e:1c:6c:1f:13:94:3a:
                    f9:e5:bb:22:cf:06:c0:97:42:c6:cc:11:50:9c:e4:
                    95:7a:2e:65:f7:39:37:4a:66:c5:c8:24:37:8b:aa:
                    a6:37:e3:b8:89:fd:30:1d:72:03:0e:48:db:38:63:
                    56:65:15:27:19:cb:a3:d0:48:fc:48:d0:a9:58:b5:
                    16:8d:fd:1a:2a:be:59:97:21:00:e9:48:a6:3f:23:
                    12:49:00:dd:2c:24:e5:9f:5c:f8:8d:63:ed:00:09:
                    4a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:7E:7D:34:B2:73:E5:FC:97:09:5E:D3:56:9A:F9:F9:77:68:A3:2C
            X509v3 Authority Key Identifier:
                keyid:C6:82:2F:B9:E5:BC:38:D4:B1:DA:40:A1:16:3F:90:BD:C0:05:D2:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRQrYnt7LbTo9ijxMQ7hVQL6xkCy9dD7qArQ1BJ1N76d/0/C6822FB9E5BC38D4B1DA40A1163F90BDC005D290.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6822FB9E5BC38D4B1DA40A1163F90BDC005D290.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRQrYnt7LbTo9ijxMQ7hVQL6xkCy9dD7qArQ1BJ1N76d/0/323830343a336162383a3a2f33322d3332203d3e20323636313035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ab8::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:34:6d:15:a7:45:c2:69:e1:62:39:ab:4a:7c:4e:a3:b0:4e:
         39:07:30:55:23:2e:2d:2d:61:cd:bb:a9:3a:05:6b:15:03:fa:
         72:6c:28:11:8c:8d:2a:fd:b3:6a:78:ee:39:ad:2f:7d:5d:e5:
         51:fe:ee:14:e5:83:f8:29:55:3c:be:53:95:d2:80:41:e3:29:
         7d:e1:c3:1d:50:da:e5:82:26:0d:77:fc:c5:5e:d3:67:f5:04:
         ee:48:fa:5b:4e:e6:15:19:27:a2:d6:c7:8a:56:41:c4:24:00:
         88:a8:9d:c0:af:99:a2:da:02:00:4e:c5:4d:6d:98:e2:ad:2c:
         f8:e6:80:38:e0:e0:c9:12:93:b4:bd:a7:f4:ce:d6:f9:42:84:
         07:83:55:aa:d8:55:ab:f9:a2:0d:8a:28:3c:c2:98:f1:1f:9f:
         22:8f:96:0a:eb:94:d0:4b:2e:b9:99:2f:4d:c6:22:e4:ae:69:
         c4:e4:7f:9d:bc:d2:13:63:30:99:af:2a:b8:28:cb:15:e2:b6:
         14:35:cb:5a:33:fc:e7:54:47:84:12:14:d3:62:98:7f:1e:d6:
         30:6d:17:d5:7e:e0:b2:05:f1:03:50:f2:2f:09:b2:b5:cb:06:
         1f:c6:33:aa:30:88:3d:e9:56:96:6e:0a:3c:b3:33:38:3e:97:
         38:f6:05:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:17:28 2025 by rpki-client