Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/323830343a3935343a34303a3a2f34382d3438203d3e20323633303733.roa
File:                     323830343a3935343a34303a3a2f34382d3438203d3e20323633303733.roa (raw, json)
Hash identifier:          4+5HBVaH5HAeF267xRM5LqW36fQJNJu1fxHZ5Y1LKyc=
Subject key identifier:   6D:23:2A:2F:E3:0E:39:4E:0A:7F:39:FE:06:6F:F2:71:A2:7A:7A:78
Certificate issuer:       /CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
Certificate serial:       0FB07711DFB6DBF3D975FD414C0742E3CE61948D
Authority key identifier: 93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/323830343a3935343a34303a3a2f34382d3438203d3e20323633303733.roa
Signing time:             Wed 05 Mar 2025 22:10:14 +0000
ROA not before:           Wed 05 Mar 2025 22:05:14 +0000
ROA not after:            Wed 04 Mar 2026 22:10:14 +0000
asID:                     263073
IP address blocks:        2804:954:40::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:b0:77:11:df:b6:db:f3:d9:75:fd:41:4c:07:42:e3:ce:61:94:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
        Validity
            Not Before: Mar  5 22:05:14 2025 GMT
            Not After : Mar  4 22:10:14 2026 GMT
        Subject: CN=6D232A2FE30E394E0A7F39FE066FF271A27A7A78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b8:73:f7:48:26:d3:08:fd:bc:ae:80:d3:72:
                    98:4e:e9:42:77:f2:6d:4d:71:c9:1d:bb:2f:fd:ba:
                    4e:97:ff:db:87:04:6a:43:ab:8c:a9:b0:d8:ad:62:
                    71:5f:3d:64:31:46:38:fb:e3:33:26:b1:d1:8c:bf:
                    ef:06:e7:53:e1:f0:e2:ed:87:84:9c:4a:d6:3f:79:
                    82:d4:96:b9:16:35:56:d5:81:ee:aa:d8:dd:5e:0f:
                    96:0a:eb:a8:58:c8:b5:ce:73:d3:c8:92:46:63:65:
                    21:15:f4:a6:cf:b6:72:f7:d2:1e:47:c6:f6:d6:5c:
                    ba:3d:59:9f:dc:60:0b:69:ca:ac:b0:8a:b7:86:ee:
                    d7:d5:12:dc:02:d1:8a:83:b8:b1:58:54:ad:3c:27:
                    a3:85:43:2c:6b:d3:94:e8:e2:cd:3e:04:97:63:09:
                    84:03:d3:6f:ec:7c:57:06:33:db:e2:82:43:16:d6:
                    8b:52:60:67:53:e0:b9:e3:58:f9:66:79:c7:60:ea:
                    df:4f:6f:bd:e6:a7:70:7f:6d:77:c7:ea:23:6a:ad:
                    ac:81:0c:2c:8c:3c:77:5a:5e:93:e8:5d:27:d2:36:
                    ee:ff:a8:9b:d7:de:e5:ed:45:b8:41:06:96:b2:1f:
                    fc:ff:d4:38:7c:3e:9c:df:d2:09:14:76:2a:fc:95:
                    3f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:23:2A:2F:E3:0E:39:4E:0A:7F:39:FE:06:6F:F2:71:A2:7A:7A:78
            X509v3 Authority Key Identifier:
                keyid:93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/323830343a3935343a34303a3a2f34382d3438203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:954:40::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:e6:0a:cb:97:1f:30:4e:9b:d7:76:50:49:1f:3f:5f:6b:68:
         51:4e:6f:c7:bc:be:7e:a8:08:4e:5a:a4:55:09:aa:7f:43:c5:
         1e:ac:8b:1a:b0:82:8a:d7:2c:45:b0:d8:4b:f3:17:82:86:4d:
         af:88:f4:8f:ef:29:32:87:1b:58:b6:49:37:44:a5:6f:7c:21:
         9a:e6:73:61:51:57:b8:81:9a:4c:d9:9a:d4:f6:94:a8:c3:64:
         eb:31:e6:62:46:aa:dd:65:e1:48:9d:b8:4e:7e:7d:91:78:61:
         fd:ae:8d:1e:1d:c2:b9:5a:37:ce:31:6f:3d:e6:68:db:7d:18:
         39:e7:49:9c:f8:25:55:f0:15:19:dc:a9:db:e5:04:4e:f8:bd:
         93:2f:37:d2:34:4f:01:95:ed:82:f4:98:77:e3:a3:57:a6:82:
         8e:8c:bc:8a:72:f6:d9:b2:03:13:1d:a0:af:59:9a:48:7d:5a:
         f3:45:1d:70:0a:ab:d5:20:95:34:75:c5:6b:02:0c:84:44:6a:
         f9:a1:13:e4:e1:e4:3c:84:16:64:ce:5b:b3:f9:72:bf:68:a6:
         0d:01:67:02:a4:7c:25:92:e1:1c:7e:e7:00:e3:1a:23:38:1e:
         7c:d4:96:1f:3c:46:0f:21:bb:40:dc:a6:ed:e5:c4:38:a5:40:
         b7:31:4c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:22:53 2025 by rpki-client