Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/323830343a3935343a3a2f34382d3438203d3e20323633303733.roa
File:                     323830343a3935343a3a2f34382d3438203d3e20323633303733.roa (raw, json)
Hash identifier:          Aeu88TLjV2gd0OoHlOjkx0dtvcGV1KoqcsmGWtH+2n0=
Subject key identifier:   F9:95:C6:1B:69:F8:73:F5:C5:DD:20:BB:D7:E3:4E:7F:A3:41:E8:64
Certificate issuer:       /CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
Certificate serial:       7F8548E5E53B3BFC9AC8C44ED6FE7741B50B4D46
Authority key identifier: 93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/323830343a3935343a3a2f34382d3438203d3e20323633303733.roa
Signing time:             Wed 05 Mar 2025 22:10:20 +0000
ROA not before:           Wed 05 Mar 2025 22:05:20 +0000
ROA not after:            Wed 04 Mar 2026 22:10:20 +0000
asID:                     263073
IP address blocks:        2804:954::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:85:48:e5:e5:3b:3b:fc:9a:c8:c4:4e:d6:fe:77:41:b5:0b:4d:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
        Validity
            Not Before: Mar  5 22:05:20 2025 GMT
            Not After : Mar  4 22:10:20 2026 GMT
        Subject: CN=F995C61B69F873F5C5DD20BBD7E34E7FA341E864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ce:e7:11:09:00:9a:dc:f0:c5:b1:05:3f:4e:
                    18:9f:2b:24:b6:d8:d9:4d:8a:2b:7f:d9:38:2c:4c:
                    a8:54:0b:f1:19:81:2c:73:18:d7:e1:11:eb:1d:0a:
                    29:4d:bb:9b:e9:a6:29:da:30:70:7a:32:64:97:39:
                    7e:ef:4d:40:a7:32:6f:3e:06:7b:a3:9c:48:3c:05:
                    7a:19:0f:df:03:44:fe:fd:55:89:66:a9:38:29:bf:
                    86:ec:20:ba:bb:5d:03:5d:78:60:f6:e4:e3:de:55:
                    c3:67:3b:20:c1:e3:15:db:12:53:42:8d:9f:1a:13:
                    79:3a:75:0d:71:b6:67:3e:6e:fa:47:2c:07:ca:24:
                    d6:56:56:d7:84:6e:26:64:9c:fa:0a:85:40:f8:17:
                    74:be:ac:96:41:4a:74:3e:18:4e:1b:22:64:9b:08:
                    2e:6e:26:fc:2a:85:2b:b9:fe:30:ca:0c:ab:e4:26:
                    60:ab:8f:0a:24:54:7a:30:7d:65:69:61:a1:94:8d:
                    1a:5a:bc:85:a1:6e:da:2a:54:9e:fd:90:09:a6:63:
                    82:74:bf:8f:28:e3:cc:94:da:d0:d6:d1:0c:0c:1c:
                    62:df:60:ca:66:e4:3f:94:c0:56:80:a4:86:46:05:
                    a1:03:e8:30:56:95:ea:8a:5c:90:16:cd:80:66:2b:
                    af:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:95:C6:1B:69:F8:73:F5:C5:DD:20:BB:D7:E3:4E:7F:A3:41:E8:64
            X509v3 Authority Key Identifier:
                keyid:93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/323830343a3935343a3a2f34382d3438203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:954::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:6c:e3:61:76:5f:0d:75:3c:6c:8a:e3:d3:e6:5e:85:48:91:
         60:1d:fe:3f:fc:57:db:50:89:09:de:0c:80:0f:6d:ca:94:44:
         0f:2b:7b:23:33:02:b8:36:e9:72:71:b7:26:00:96:61:99:58:
         27:2a:c6:55:a0:32:32:0f:c9:7b:5c:f7:0d:13:34:64:48:3d:
         c2:50:d7:f9:9b:73:da:9d:33:98:11:a3:4d:54:86:21:b1:d3:
         c5:77:32:d5:16:f2:79:67:f8:98:a0:52:ed:12:37:4d:48:98:
         37:43:0d:7c:46:73:ef:95:73:0f:25:2e:d9:e1:22:1c:c5:8f:
         1e:d8:fd:04:69:74:5a:0a:51:fd:de:53:80:ef:05:e4:dd:8d:
         81:4e:14:1e:5c:f1:93:37:fa:b0:c0:e9:c6:de:b9:0f:db:83:
         3b:c7:d2:4c:29:85:e9:9c:9d:70:7c:1d:ca:dd:f4:73:63:9f:
         a1:03:5a:3e:f5:31:43:f6:09:fc:34:27:50:fc:af:ec:4a:1e:
         94:61:eb:45:6f:ae:60:74:ab:44:68:9f:0d:e4:bc:61:b3:c7:
         8b:65:42:74:4f:e7:1f:27:29:ce:64:41:8c:a2:94:26:73:d3:
         df:7e:63:a4:33:98:bf:a1:45:f7:42:ce:3d:af:c2:ca:87:7c:
         7c:5f:a5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:55:02 2025 by rpki-client