Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/323830343a323738383a3a2f33332d3333203d3e20323633393037.roa
File:                     323830343a323738383a3a2f33332d3333203d3e20323633393037.roa (raw, json)
Hash identifier:          RMLH27n2jrE2q2ZI43SqAM63VCU6Ae7Pq+AE2nrfaeg=
Subject key identifier:   08:47:E1:30:67:5E:8C:E0:29:D9:88:3A:A5:5E:D3:BD:45:78:E5:FB
Certificate issuer:       /CN=F0DB15D3F66BA725DE7E70733346C03C0E4D1408
Certificate serial:       3C9A0F100D7A884FE6A1400607B4F511A0DF7107
Authority key identifier: F0:DB:15:D3:F6:6B:A7:25:DE:7E:70:73:33:46:C0:3C:0E:4D:14:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/323830343a323738383a3a2f33332d3333203d3e20323633393037.roa
Signing time:             Mon 30 Sep 2024 13:27:24 +0000
ROA not before:           Mon 30 Sep 2024 13:22:24 +0000
ROA not after:            Mon 29 Sep 2025 13:27:24 +0000
asID:                     263907
IP address blocks:        2804:2788::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:9a:0f:10:0d:7a:88:4f:e6:a1:40:06:07:b4:f5:11:a0:df:71:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0DB15D3F66BA725DE7E70733346C03C0E4D1408
        Validity
            Not Before: Sep 30 13:22:24 2024 GMT
            Not After : Sep 29 13:27:24 2025 GMT
        Subject: CN=0847E130675E8CE029D9883AA55ED3BD4578E5FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1c:b2:99:f0:91:97:45:a4:3a:b6:ef:2f:01:
                    6a:01:a4:8a:29:e2:6c:89:9e:fa:2e:bc:60:4a:0d:
                    05:45:83:dd:6c:e5:fb:1b:89:2b:e4:db:a9:7f:3d:
                    01:2f:da:2b:ec:5f:8e:45:29:49:24:67:d2:0b:11:
                    b9:ef:bf:7a:7a:76:a2:a8:bb:c7:87:ba:fc:e5:0e:
                    38:07:c6:b9:9a:59:fe:ce:da:2b:1a:ab:f9:83:2e:
                    93:39:94:17:10:a1:f0:98:6c:df:d9:31:17:ba:08:
                    cd:04:a7:92:a0:89:86:f8:25:6c:bc:6d:ab:1d:0c:
                    47:c9:fc:27:64:42:bf:c2:00:53:fe:07:2d:0c:16:
                    87:76:ee:86:b5:88:9a:bd:47:78:bd:85:0f:85:01:
                    7e:83:34:07:50:72:02:11:4c:93:68:f5:55:03:31:
                    fc:38:38:33:25:4f:91:68:59:1a:8d:6b:33:57:d8:
                    48:73:f4:cf:c8:ea:e0:2f:3b:f1:ff:75:a3:52:99:
                    8a:c4:a0:59:30:1d:ae:af:c2:6d:8d:3a:20:48:bf:
                    1e:cf:be:43:71:6b:a7:79:18:15:38:9b:42:5c:fc:
                    95:69:a1:47:2d:bb:8f:83:1b:ba:f5:7b:23:26:65:
                    8f:8a:d5:85:6a:64:b7:25:8a:6c:2c:51:aa:84:cb:
                    b6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:47:E1:30:67:5E:8C:E0:29:D9:88:3A:A5:5E:D3:BD:45:78:E5:FB
            X509v3 Authority Key Identifier:
                keyid:F0:DB:15:D3:F6:6B:A7:25:DE:7E:70:73:33:46:C0:3C:0E:4D:14:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/323830343a323738383a3a2f33332d3333203d3e20323633393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2788::/33

    Signature Algorithm: sha256WithRSAEncryption
         9d:33:fd:62:9b:9e:05:b0:5f:ac:cb:41:a4:d1:fd:69:a4:62:
         a1:d9:20:9c:c7:9c:83:c9:0e:89:af:45:17:e8:58:60:53:e8:
         82:e6:d8:2b:bc:0e:6f:b4:fc:13:03:88:02:e2:48:64:73:be:
         88:f7:42:61:d0:5e:5b:62:20:fe:7b:6c:84:be:61:9d:89:a8:
         5c:cf:74:b2:53:93:8c:03:bd:fa:77:56:1d:06:af:f1:d8:5b:
         6d:cf:ca:42:7f:94:d5:be:4f:66:7c:d7:a7:75:42:70:7f:cd:
         7f:21:44:2b:c9:ea:bb:86:a3:7a:e1:7d:6e:63:60:e2:12:62:
         87:7f:a5:4c:19:bd:11:0b:a0:8b:f5:5e:1b:dc:7f:87:a8:2f:
         c7:cd:bb:38:44:5f:71:9b:03:9e:25:58:bb:b4:7b:8f:68:11:
         19:09:e1:5c:72:83:13:96:cb:89:a4:6d:5f:8c:26:33:96:7d:
         81:69:22:16:d9:8f:78:38:90:2f:28:04:a0:d8:2f:81:c7:c0:
         4f:be:01:f7:84:5b:7c:b7:a7:86:e6:9d:64:7a:58:f9:7c:da:
         da:23:1b:4d:f9:cb:96:8f:31:e2:48:4d:f5:ed:19:90:0c:9e:
         17:1e:61:2c:bb:48:e3:d7:24:ec:2a:a4:e2:37:3d:eb:1c:1d:
         68:22:c9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:37:57 2025 by rpki-client