Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FeywamAHtTsbtFhzLP8A1es3tq9ZLpGaxSwmc8Yw4uhN/1/323830343a376239343a343030303a3a2f33342d3334203d3e20323731343431.roa
File:                     323830343a376239343a343030303a3a2f33342d3334203d3e20323731343431.roa (raw, json)
Hash identifier:          PXYho8iqPBEXmwIPIEJ1RowfYaCJb6JzFRI8fx3egLE=
Subject key identifier:   84:FB:A1:9A:3B:5D:95:34:9D:C2:68:6A:97:CA:8C:7F:DB:14:F8:9B
Certificate issuer:       /CN=03D348CD504673CC24A6139BE73024EECBC0A420
Certificate serial:       74D2D1BCD93583982B1B62F5014C049CD8315C94
Authority key identifier: 03:D3:48:CD:50:46:73:CC:24:A6:13:9B:E7:30:24:EE:CB:C0:A4:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03D348CD504673CC24A6139BE73024EECBC0A420.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FeywamAHtTsbtFhzLP8A1es3tq9ZLpGaxSwmc8Yw4uhN/1/323830343a376239343a343030303a3a2f33342d3334203d3e20323731343431.roa
Signing time:             Thu 06 Mar 2025 14:07:49 +0000
ROA not before:           Thu 06 Mar 2025 14:02:49 +0000
ROA not after:            Thu 05 Mar 2026 14:07:49 +0000
asID:                     271441
IP address blocks:        2804:7b94:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:d2:d1:bc:d9:35:83:98:2b:1b:62:f5:01:4c:04:9c:d8:31:5c:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03D348CD504673CC24A6139BE73024EECBC0A420
        Validity
            Not Before: Mar  6 14:02:49 2025 GMT
            Not After : Mar  5 14:07:49 2026 GMT
        Subject: CN=84FBA19A3B5D95349DC2686A97CA8C7FDB14F89B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:33:e7:c2:e2:f5:44:25:e6:85:e9:6e:d5:d4:
                    13:6c:e5:d0:ca:74:aa:15:0a:a6:a5:c9:84:32:49:
                    de:2c:85:5a:16:49:0a:03:35:a1:75:db:94:46:c5:
                    e8:92:09:2d:0a:af:c4:53:e5:f2:a1:1f:ee:2c:33:
                    d1:9f:90:3b:ee:d1:96:7b:32:6b:3d:3f:d7:4e:1c:
                    3d:71:32:c2:cf:3a:12:74:b9:51:af:62:3b:89:c1:
                    6f:68:42:95:88:a2:e0:7c:e0:d2:9c:10:de:1e:b5:
                    30:83:f7:c7:8f:cc:ae:9f:07:ce:82:9d:a4:17:7c:
                    c8:8a:cb:c3:e6:37:09:7c:15:15:81:49:82:61:fd:
                    d4:99:cd:fc:4f:d5:9e:6c:15:73:49:1d:11:38:c0:
                    81:c5:c3:10:02:82:79:4d:5e:49:28:7c:d0:c6:f7:
                    dc:16:bb:7d:88:e8:4d:6d:37:bc:02:44:aa:2e:17:
                    0f:e8:f4:02:1a:f0:d6:dc:a9:3a:10:57:21:93:eb:
                    cc:f0:34:96:eb:f9:41:eb:92:db:f9:c0:67:29:8a:
                    09:7f:ae:9a:03:09:9a:c4:4c:37:e5:df:91:34:5b:
                    39:66:64:43:01:26:b8:b0:ee:0d:66:67:ca:8e:73:
                    7a:f6:43:f2:d0:d6:c4:82:bc:92:62:1f:2f:a4:45:
                    ba:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:FB:A1:9A:3B:5D:95:34:9D:C2:68:6A:97:CA:8C:7F:DB:14:F8:9B
            X509v3 Authority Key Identifier:
                keyid:03:D3:48:CD:50:46:73:CC:24:A6:13:9B:E7:30:24:EE:CB:C0:A4:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FeywamAHtTsbtFhzLP8A1es3tq9ZLpGaxSwmc8Yw4uhN/1/03D348CD504673CC24A6139BE73024EECBC0A420.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03D348CD504673CC24A6139BE73024EECBC0A420.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FeywamAHtTsbtFhzLP8A1es3tq9ZLpGaxSwmc8Yw4uhN/1/323830343a376239343a343030303a3a2f33342d3334203d3e20323731343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b94:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         34:b8:c7:33:95:f2:ed:2a:9c:09:06:60:50:8c:96:36:da:c5:
         f7:59:39:7d:60:7a:ba:cc:60:db:b0:98:28:12:33:81:5a:6a:
         a1:5c:ed:2c:d7:b3:81:a4:ec:be:82:4f:1e:db:ad:88:29:e3:
         68:f7:19:d0:a4:98:0e:cd:57:ef:f9:96:4c:29:64:5c:b4:d5:
         b8:49:97:65:2d:df:d0:76:ea:ef:90:d7:65:bc:e8:85:1e:e5:
         ce:0d:53:84:37:7c:1b:26:67:9e:d8:87:7f:a6:8c:3e:63:9f:
         ab:9f:b6:67:52:cd:c0:90:48:db:0a:f6:86:b6:c5:6e:82:59:
         4c:c1:b3:b9:ef:7a:4c:72:a3:7a:00:0b:47:56:82:e2:25:3b:
         d5:b9:2a:71:bd:dc:2e:10:c3:4b:c1:30:6d:66:45:44:d7:82:
         dd:b2:cd:2c:5e:53:95:62:da:02:76:44:07:c6:95:22:0a:be:
         60:80:ea:9c:63:53:12:83:bd:b4:c4:db:25:50:83:55:68:b9:
         70:3f:77:b2:d3:00:49:17:b2:f4:74:32:cd:a1:a5:02:44:d6:
         6b:25:e1:e2:8e:e2:b1:1f:44:57:2e:2b:95:db:93:21:25:71:
         d5:cb:a6:32:7e:6e:a5:f3:5c:a5:3d:c1:6a:45:3a:24:c1:10:
         90:7a:fc:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:16:11 2025 by rpki-client