Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FahecLnNNriXCTfJig3zoAzi7BrgMnmPLZ68454ki3Dq/0/323830343a363333383a3a2f33322d3332203d3e20323639333437.roa
File:                     323830343a363333383a3a2f33322d3332203d3e20323639333437.roa (raw, json)
Hash identifier:          Wrfe08Xxi7WplK8iPrd65qVmewnxaJ4r+S6AoEW3rmw=
Subject key identifier:   28:DC:E0:E5:87:72:93:F1:55:AD:DF:63:BB:8C:6D:25:07:D1:B4:E5
Certificate issuer:       /CN=6DD53C4867079833703A1EDF2B50AADA5DE39710
Certificate serial:       7EC4990505AA2275103E47614BB3A9CA7154975A
Authority key identifier: 6D:D5:3C:48:67:07:98:33:70:3A:1E:DF:2B:50:AA:DA:5D:E3:97:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DD53C4867079833703A1EDF2B50AADA5DE39710.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FahecLnNNriXCTfJig3zoAzi7BrgMnmPLZ68454ki3Dq/0/323830343a363333383a3a2f33322d3332203d3e20323639333437.roa
Signing time:             Sat 22 Feb 2025 19:11:54 +0000
ROA not before:           Sat 22 Feb 2025 19:06:54 +0000
ROA not after:            Sat 21 Feb 2026 19:11:54 +0000
asID:                     269347
IP address blocks:        2804:6338::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:c4:99:05:05:aa:22:75:10:3e:47:61:4b:b3:a9:ca:71:54:97:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DD53C4867079833703A1EDF2B50AADA5DE39710
        Validity
            Not Before: Feb 22 19:06:54 2025 GMT
            Not After : Feb 21 19:11:54 2026 GMT
        Subject: CN=28DCE0E5877293F155ADDF63BB8C6D2507D1B4E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:69:6e:88:dd:67:4e:11:c3:66:fa:e0:b5:a3:
                    e2:76:2f:94:5a:c2:f6:e8:e1:25:71:14:8e:d8:37:
                    9d:c6:1b:d1:e4:88:6a:43:9d:ff:97:5f:3d:dd:57:
                    a0:1c:74:7c:26:d6:f3:57:55:6c:99:1f:9f:10:12:
                    0c:00:82:d5:b0:f7:5a:0d:85:08:f2:eb:51:7f:fe:
                    b8:b9:05:46:96:11:68:3a:f8:3e:78:26:20:65:c7:
                    33:90:48:0d:25:cb:d9:59:9d:09:f5:d8:31:5e:36:
                    ee:cb:e3:33:ab:96:8b:46:4d:6a:30:a9:21:68:a6:
                    cd:0c:f5:0b:a4:f9:0d:4f:b0:62:49:14:eb:4a:00:
                    a1:d8:f5:b7:8b:94:9e:7d:f4:61:20:74:be:56:23:
                    1a:30:5e:48:5e:92:b6:2d:cf:8a:1a:bd:af:fe:00:
                    96:18:0a:d7:be:57:14:c5:13:ab:7c:be:a4:1b:95:
                    1d:fa:9e:3c:32:95:90:9a:62:a5:b6:6b:8c:24:82:
                    91:0b:2b:fe:53:06:7c:d4:dc:e6:cc:cd:f8:ba:da:
                    73:56:60:03:d3:e6:66:c7:dc:9f:07:2c:b4:36:d9:
                    12:ef:ae:e7:f8:4c:f5:99:c2:e6:df:45:f3:22:c9:
                    0a:3e:45:98:b2:5c:6e:d0:f8:72:04:f1:38:05:72:
                    be:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:DC:E0:E5:87:72:93:F1:55:AD:DF:63:BB:8C:6D:25:07:D1:B4:E5
            X509v3 Authority Key Identifier:
                keyid:6D:D5:3C:48:67:07:98:33:70:3A:1E:DF:2B:50:AA:DA:5D:E3:97:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FahecLnNNriXCTfJig3zoAzi7BrgMnmPLZ68454ki3Dq/0/6DD53C4867079833703A1EDF2B50AADA5DE39710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DD53C4867079833703A1EDF2B50AADA5DE39710.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FahecLnNNriXCTfJig3zoAzi7BrgMnmPLZ68454ki3Dq/0/323830343a363333383a3a2f33322d3332203d3e20323639333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6338::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:85:2d:db:1d:c7:0f:1f:e6:b4:77:de:ba:58:55:cb:21:da:
         31:4e:33:a7:34:c7:a8:84:3e:50:50:7f:d5:10:c7:44:89:6d:
         bf:3b:c1:5d:c6:af:95:04:76:76:5b:fb:79:92:f2:a4:36:ec:
         12:b9:24:80:b1:81:61:c7:e0:c6:d7:f5:e1:80:49:b6:58:c5:
         e8:8a:5f:9d:e8:dd:96:b0:b3:58:89:d3:7d:68:b2:84:3a:a0:
         84:36:0b:6e:59:18:b4:7f:6d:df:b2:43:6a:e4:7b:93:8e:20:
         4a:89:1a:44:65:7c:ec:eb:93:a8:ac:7c:ca:c2:16:ea:4f:ee:
         b0:77:28:d4:36:9e:55:96:9c:65:c2:9f:1c:cd:56:dc:e5:e1:
         a2:51:34:20:47:93:63:e0:53:75:77:b7:4d:55:dc:b6:50:19:
         bd:a7:8f:a1:b7:c3:2d:7b:bf:10:29:a6:e9:3c:a8:58:68:a9:
         c5:37:30:06:c2:55:23:66:7d:b7:2b:43:ce:92:e4:a8:82:3b:
         38:e8:13:b8:35:5a:cc:10:9e:70:82:8a:5a:30:ba:83:38:ce:
         d9:78:50:20:e9:91:06:ec:64:af:49:e3:de:1d:cf:dd:46:82:
         3a:81:53:fc:57:90:02:3e:d5:69:32:80:ea:c6:0d:7d:ce:ef:
         c1:cc:39:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:42:40 2025 by rpki-client