Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FkUJzL2AETagZkNFsea3xVFvHNEnWbhxjF9LGtDncWxC/0/323830343a363839343a3a2f33322d3332203d3e20323639373032.roa
File:                     323830343a363839343a3a2f33322d3332203d3e20323639373032.roa (raw, json)
Hash identifier:          qi6evgnpbtghT8+h9USeklibp9TvxQ/z0xfvHNmrdeY=
Subject key identifier:   FE:02:7D:35:F5:CD:84:89:A2:90:95:6D:BC:1A:AB:71:74:45:2E:00
Certificate issuer:       /CN=F62F4F249754DDD7706E8918C1AF5039A9405FB7
Certificate serial:       58F7999757C25052944E4CAB458F2645AED83C99
Authority key identifier: F6:2F:4F:24:97:54:DD:D7:70:6E:89:18:C1:AF:50:39:A9:40:5F:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62F4F249754DDD7706E8918C1AF5039A9405FB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FkUJzL2AETagZkNFsea3xVFvHNEnWbhxjF9LGtDncWxC/0/323830343a363839343a3a2f33322d3332203d3e20323639373032.roa
Signing time:             Tue 31 Dec 2024 22:36:35 +0000
ROA not before:           Tue 31 Dec 2024 22:31:35 +0000
ROA not after:            Tue 30 Dec 2025 22:36:35 +0000
asID:                     269702
IP address blocks:        2804:6894::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:f7:99:97:57:c2:50:52:94:4e:4c:ab:45:8f:26:45:ae:d8:3c:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F62F4F249754DDD7706E8918C1AF5039A9405FB7
        Validity
            Not Before: Dec 31 22:31:35 2024 GMT
            Not After : Dec 30 22:36:35 2025 GMT
        Subject: CN=FE027D35F5CD8489A290956DBC1AAB7174452E00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d1:2d:6c:12:37:90:b7:cf:1f:d7:a7:0f:a0:
                    0a:67:55:92:ca:c9:f8:fd:9f:f8:3a:c2:ca:f7:f7:
                    7f:a4:45:0e:96:29:d6:f2:98:a9:31:55:0e:9f:e7:
                    56:52:a9:20:55:0c:c2:60:e8:7e:71:02:fd:3a:a2:
                    10:32:a1:99:c8:16:29:19:ca:d1:a5:39:2a:98:76:
                    fa:08:8d:68:2f:43:87:26:42:be:36:d4:28:a3:cf:
                    61:f5:63:3e:68:66:e6:f7:a0:b0:9d:3f:92:13:46:
                    09:7c:af:63:46:95:5f:14:54:24:12:54:50:2a:74:
                    4a:9d:3e:00:01:b2:b7:a2:24:18:5e:2d:93:f3:3f:
                    5d:b2:6f:80:73:eb:44:5b:8a:d5:1b:89:4f:dd:73:
                    21:69:00:1c:97:fd:61:12:e4:0e:48:26:56:c5:81:
                    96:9d:ad:1c:e4:ff:a3:9f:a3:35:dd:3f:20:c6:6d:
                    40:5a:55:98:b2:17:be:db:37:02:da:7b:b9:7e:8c:
                    1e:f3:3e:53:cc:77:00:6d:2a:a5:9d:ca:21:bb:b9:
                    cf:d9:ab:42:f7:26:74:47:17:5f:72:f7:de:77:2a:
                    25:cc:3a:1f:39:5b:ee:ef:bd:2f:9c:d2:18:fa:94:
                    08:8a:5f:68:72:6a:c6:3f:f0:55:d8:ee:06:04:30:
                    8b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:02:7D:35:F5:CD:84:89:A2:90:95:6D:BC:1A:AB:71:74:45:2E:00
            X509v3 Authority Key Identifier:
                keyid:F6:2F:4F:24:97:54:DD:D7:70:6E:89:18:C1:AF:50:39:A9:40:5F:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FkUJzL2AETagZkNFsea3xVFvHNEnWbhxjF9LGtDncWxC/0/F62F4F249754DDD7706E8918C1AF5039A9405FB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62F4F249754DDD7706E8918C1AF5039A9405FB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FkUJzL2AETagZkNFsea3xVFvHNEnWbhxjF9LGtDncWxC/0/323830343a363839343a3a2f33322d3332203d3e20323639373032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6894::/32

    Signature Algorithm: sha256WithRSAEncryption
         ba:be:be:90:cd:c3:20:f7:18:f4:55:33:35:ee:66:ef:2c:b8:
         e9:f6:49:f1:3d:76:10:da:7f:9b:f5:12:1e:69:96:c2:a0:c2:
         aa:36:96:94:8e:fc:e8:2c:38:a4:07:c1:8f:8b:db:e1:30:24:
         c1:2f:29:ed:28:9c:c8:b1:b7:d9:d9:60:f7:9c:58:53:13:a1:
         18:14:25:01:81:29:b2:84:16:b9:cf:22:2d:e4:1f:bc:7e:8b:
         1d:18:39:20:05:bb:fc:a7:31:f1:6c:15:54:ff:3b:e4:70:de:
         d9:5c:38:88:91:2c:02:ba:ac:66:6c:ed:b5:f9:27:35:cd:80:
         a8:93:59:27:89:3a:2a:3c:56:07:c6:0a:ee:37:ba:fd:73:53:
         55:7f:e9:b8:30:3a:cd:14:7c:84:f3:80:90:d4:ba:0f:71:6e:
         f5:e4:59:76:07:21:22:09:3b:83:c5:e8:08:51:f2:5d:1f:d0:
         a4:d3:e0:23:c9:11:db:6e:3e:a3:27:ae:75:9b:e8:ae:0a:52:
         53:b3:0a:da:de:b1:44:ab:2f:30:a1:c6:ed:1b:77:2d:e3:ab:
         1b:e5:9d:3e:9d:cc:50:8f:03:3a:a0:ca:84:40:f8:29:33:1e:
         31:ef:d7:36:40:b3:b3:21:cc:26:5e:74:1d:1d:2a:28:9d:97:
         17:59:45:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 05:27:25 2025 by rpki-client