Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fsjjm6QSV9ecHJyqvHR7uwf4ECdAZ84SMikunf8rZsmA/0/323830343a383865383a333030303a3a2f33362d3336203d3e20323733353638.roa
File:                     323830343a383865383a333030303a3a2f33362d3336203d3e20323733353638.roa (raw, json)
Hash identifier:          TKrp2tVkWhqteC4ozPgCrow9Eb+6KD+en1wk55TduLo=
Subject key identifier:   B8:D4:82:58:EF:35:81:25:A8:B5:08:47:0B:30:72:98:23:8E:49:EA
Certificate issuer:       /CN=6F4A647AFA002C03109D6A323355E36ABA9C7284
Certificate serial:       425B70BD53B98C3F2A24022EFA97553185567B33
Authority key identifier: 6F:4A:64:7A:FA:00:2C:03:10:9D:6A:32:33:55:E3:6A:BA:9C:72:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F4A647AFA002C03109D6A323355E36ABA9C7284.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fsjjm6QSV9ecHJyqvHR7uwf4ECdAZ84SMikunf8rZsmA/0/323830343a383865383a333030303a3a2f33362d3336203d3e20323733353638.roa
Signing time:             Tue 31 Oct 2023 18:38:54 +0000
ROA not before:           Tue 31 Oct 2023 18:33:54 +0000
ROA not after:            Tue 29 Oct 2024 18:38:54 +0000
asID:                     273568
IP address blocks:        2804:88e8:3000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:5b:70:bd:53:b9:8c:3f:2a:24:02:2e:fa:97:55:31:85:56:7b:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F4A647AFA002C03109D6A323355E36ABA9C7284
        Validity
            Not Before: Oct 31 18:33:54 2023 GMT
            Not After : Oct 29 18:38:54 2024 GMT
        Subject: CN=B8D48258EF358125A8B508470B307298238E49EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e0:9a:1c:54:b4:d2:93:54:a2:f2:c5:c0:3e:
                    79:e5:2c:99:17:7d:66:b6:92:ba:5f:33:37:19:1c:
                    29:c8:28:57:b3:3c:d9:f7:6b:f1:b2:99:06:1d:b9:
                    29:92:dc:d2:01:69:f6:12:86:7d:d8:69:5b:ad:f4:
                    c8:d6:88:9a:f9:eb:e7:96:15:98:84:9d:1e:9b:78:
                    16:2c:8f:8c:d3:41:97:37:df:8a:a5:cc:c3:32:d0:
                    95:9a:69:c5:7b:5f:99:28:85:70:c6:3e:0e:41:db:
                    e6:c7:02:22:49:5d:6c:ca:78:31:65:bd:8e:9e:ae:
                    cc:01:a6:2b:42:47:f4:ed:18:18:f9:d9:40:72:ab:
                    14:ab:fa:b7:f6:81:bb:6c:88:f6:1c:74:e9:ac:c3:
                    e4:3c:9e:68:4f:97:40:fd:f9:b7:82:a4:b9:9a:ca:
                    64:57:f9:10:b5:4f:f3:bc:0a:c0:53:db:78:c8:48:
                    4b:9d:e1:8e:54:b8:81:e6:d1:fc:fa:0a:75:b6:85:
                    00:1f:e0:0f:a1:9c:ac:d1:23:60:39:9e:83:42:d8:
                    fb:f1:48:51:f7:c5:9d:21:58:08:04:45:f8:f7:44:
                    8a:4d:21:75:a0:4a:d0:2e:29:35:44:03:7c:51:2b:
                    e8:23:56:82:c7:69:10:a5:cf:97:c9:8d:47:2f:78:
                    69:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D4:82:58:EF:35:81:25:A8:B5:08:47:0B:30:72:98:23:8E:49:EA
            X509v3 Authority Key Identifier:
                keyid:6F:4A:64:7A:FA:00:2C:03:10:9D:6A:32:33:55:E3:6A:BA:9C:72:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fsjjm6QSV9ecHJyqvHR7uwf4ECdAZ84SMikunf8rZsmA/0/6F4A647AFA002C03109D6A323355E36ABA9C7284.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F4A647AFA002C03109D6A323355E36ABA9C7284.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fsjjm6QSV9ecHJyqvHR7uwf4ECdAZ84SMikunf8rZsmA/0/323830343a383865383a333030303a3a2f33362d3336203d3e20323733353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:88e8:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         20:3b:ec:8f:8c:6d:c2:22:c7:13:fc:02:aa:b8:01:33:81:e3:
         93:39:8b:73:8b:30:c6:80:19:17:de:d8:72:ac:f6:81:dc:73:
         79:dc:d1:f8:4b:8b:cb:19:33:3b:c4:fa:34:0e:4c:b4:1d:38:
         93:c6:e8:b4:00:3f:53:cb:97:3e:b9:80:3f:9c:c1:04:57:ce:
         00:f5:bb:5f:8f:98:95:a3:03:70:37:ee:e5:66:f1:a4:3b:5d:
         85:68:87:da:12:2c:83:76:3e:31:a3:8b:a8:46:be:6a:cb:0d:
         b7:ec:04:86:43:f8:ff:b2:ae:98:db:a8:35:b6:28:09:0c:d0:
         4e:87:df:1f:67:31:bd:cd:46:ac:cf:0a:c2:c4:c1:03:69:0c:
         a7:95:4e:30:34:a9:9a:78:a7:8d:57:57:d0:6a:ea:64:a8:a9:
         88:3b:86:e0:5e:ff:52:f9:75:a8:09:1b:48:8a:db:a1:c6:8f:
         6f:25:89:db:f5:9d:dc:ab:77:0b:76:be:26:52:38:d0:aa:ae:
         0b:c1:32:38:6e:a0:b4:f2:40:98:46:8a:7a:bc:c9:fb:4d:07:
         0d:4f:01:d1:0b:35:35:84:a8:66:a2:d8:1a:44:79:36:65:8d:
         e1:84:57:d7:bf:dd:99:97:e0:23:86:0f:56:a8:84:07:36:dc:
         c4:88:a4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 06:05:56 2025 by rpki-client