Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FcoSW4kL7xcm77jJAg7AVjQUfX6bWkteNvkV7KHQK5yz/0/323830343a356630383a3a2f33322d3332203d3e20323639303732.roa
File:                     323830343a356630383a3a2f33322d3332203d3e20323639303732.roa (raw, json)
Hash identifier:          vtwSjPp75d+Xb0iw8HIt+RArkjwQMA4c7s6PulYJB2E=
Subject key identifier:   2A:7E:39:F4:21:F6:4C:C4:E9:13:2B:D5:2F:9C:BB:18:F7:54:D8:D2
Certificate issuer:       /CN=64F420F8784014FABFBC1041CAA9D39011085982
Certificate serial:       6964C9949944B111ABD9C90278C3DE6E59C850BC
Authority key identifier: 64:F4:20:F8:78:40:14:FA:BF:BC:10:41:CA:A9:D3:90:11:08:59:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/64F420F8784014FABFBC1041CAA9D39011085982.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FcoSW4kL7xcm77jJAg7AVjQUfX6bWkteNvkV7KHQK5yz/0/323830343a356630383a3a2f33322d3332203d3e20323639303732.roa
Signing time:             Wed 10 May 2023 21:03:16 +0000
ROA not before:           Wed 10 May 2023 20:58:16 +0000
ROA not after:            Wed 08 May 2024 21:03:16 +0000
asID:                     269072
IP address blocks:        2804:5f08::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:64:c9:94:99:44:b1:11:ab:d9:c9:02:78:c3:de:6e:59:c8:50:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64F420F8784014FABFBC1041CAA9D39011085982
        Validity
            Not Before: May 10 20:58:16 2023 GMT
            Not After : May  8 21:03:16 2024 GMT
        Subject: CN=2A7E39F421F64CC4E9132BD52F9CBB18F754D8D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b3:8b:7f:2b:5a:92:28:cc:6f:2f:f5:12:9e:
                    ce:47:18:2c:71:d3:cc:df:d3:6d:56:61:fe:70:bd:
                    27:4f:84:2b:51:85:c5:a3:4a:79:cf:1d:26:cf:3f:
                    d7:96:89:f8:17:e8:bf:cd:f6:31:22:46:39:e0:fd:
                    57:7e:30:28:9b:e3:f1:27:f5:70:e9:9c:63:20:f4:
                    16:c2:ca:9d:c8:57:d7:42:87:34:e4:08:9e:3e:95:
                    87:4d:1b:d2:48:e6:b2:f9:e8:90:76:4d:0c:f3:38:
                    32:f5:60:b1:1d:ea:a2:74:26:85:58:66:99:ad:cb:
                    c4:42:33:4a:1f:3b:54:4c:fc:97:8d:7f:35:0c:82:
                    d5:34:af:67:81:db:92:49:ca:91:60:52:f9:7e:bc:
                    3a:8b:7e:e8:16:9b:ed:20:83:55:a9:3a:8e:56:82:
                    63:5d:4d:e0:ba:fe:63:7e:25:a4:75:35:d5:56:09:
                    fd:4b:9a:22:c8:7e:7c:18:03:14:46:0a:c1:e0:bd:
                    c3:bc:e4:ea:37:b1:2b:5d:80:52:83:c6:2b:6d:d6:
                    3e:42:c3:d7:ff:78:25:e6:ae:c8:11:98:15:15:8c:
                    dd:86:c0:6c:4c:b3:13:0d:b5:1e:bf:25:ff:24:6c:
                    06:0f:8d:51:99:da:d7:68:16:40:e9:86:a1:38:4d:
                    11:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:7E:39:F4:21:F6:4C:C4:E9:13:2B:D5:2F:9C:BB:18:F7:54:D8:D2
            X509v3 Authority Key Identifier:
                keyid:64:F4:20:F8:78:40:14:FA:BF:BC:10:41:CA:A9:D3:90:11:08:59:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FcoSW4kL7xcm77jJAg7AVjQUfX6bWkteNvkV7KHQK5yz/0/64F420F8784014FABFBC1041CAA9D39011085982.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/64F420F8784014FABFBC1041CAA9D39011085982.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FcoSW4kL7xcm77jJAg7AVjQUfX6bWkteNvkV7KHQK5yz/0/323830343a356630383a3a2f33322d3332203d3e20323639303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f08::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:3d:50:d2:8a:c1:9e:cb:ab:a6:8e:b5:80:7c:9f:c1:36:dc:
         cf:8d:1b:8d:d7:3f:b7:29:da:32:fc:2e:ef:2e:a7:28:6f:34:
         2a:cd:3a:c6:4a:3f:dc:ba:f7:f7:bb:52:1d:3d:ab:43:83:14:
         5f:f5:9b:d3:f4:45:7b:2f:40:42:fc:7f:65:33:40:7a:3d:d2:
         df:99:de:f0:19:10:29:fc:e9:ab:60:36:59:f6:51:be:a2:1c:
         9e:11:4d:c4:c4:4b:c1:45:ee:a4:bd:41:9a:25:75:48:fb:9e:
         14:7a:7e:fa:33:53:33:d2:55:00:78:65:13:0e:3f:d9:c4:1e:
         4a:5e:b1:59:50:a2:51:d5:2e:09:9c:7b:7b:da:fb:53:99:f5:
         47:eb:6d:0f:40:b3:3b:ca:25:f8:c6:ea:90:af:f7:a9:72:e6:
         b9:44:18:40:a7:cb:d8:c2:33:38:b7:68:6f:cd:a6:e2:14:37:
         38:e6:b6:12:21:33:58:b0:e8:5b:dc:a2:24:18:f7:aa:05:cd:
         72:b2:0a:9f:24:5b:f8:88:4b:f4:e5:aa:d9:ed:6a:62:1c:ac:
         c1:42:8f:a0:e3:4c:bd:c9:4a:50:cb:ba:65:88:06:f2:d4:1d:
         6b:70:81:b1:39:52:bc:13:54:56:3b:c5:3a:38:c3:62:fa:7c:
         d6:fe:cc:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:36:43 2025 by rpki-client