Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fsjjm6QSV9ecHJyqvHR7uwf4ECdAZ84SMikunf8rZsmA/0/323830343a383865383a633030303a3a2f33362d3336203d3e20323733353638.roa
File:                     323830343a383865383a633030303a3a2f33362d3336203d3e20323733353638.roa (raw, json)
Hash identifier:          deozhGcHz/w+dbk+p3SDskh0CBPvSYfCYokFcJm/+J8=
Subject key identifier:   C3:4F:78:43:4F:16:FD:AD:05:12:87:BD:F6:A7:48:06:C0:C9:01:FB
Certificate issuer:       /CN=6F4A647AFA002C03109D6A323355E36ABA9C7284
Certificate serial:       15B26A1595ED585D9BCD788170458AC2BA967FE2
Authority key identifier: 6F:4A:64:7A:FA:00:2C:03:10:9D:6A:32:33:55:E3:6A:BA:9C:72:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F4A647AFA002C03109D6A323355E36ABA9C7284.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fsjjm6QSV9ecHJyqvHR7uwf4ECdAZ84SMikunf8rZsmA/0/323830343a383865383a633030303a3a2f33362d3336203d3e20323733353638.roa
Signing time:             Tue 31 Oct 2023 18:38:54 +0000
ROA not before:           Tue 31 Oct 2023 18:33:54 +0000
ROA not after:            Tue 29 Oct 2024 18:38:54 +0000
asID:                     273568
IP address blocks:        2804:88e8:c000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:b2:6a:15:95:ed:58:5d:9b:cd:78:81:70:45:8a:c2:ba:96:7f:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F4A647AFA002C03109D6A323355E36ABA9C7284
        Validity
            Not Before: Oct 31 18:33:54 2023 GMT
            Not After : Oct 29 18:38:54 2024 GMT
        Subject: CN=C34F78434F16FDAD051287BDF6A74806C0C901FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d9:ff:31:b5:06:56:be:37:d4:5b:19:32:b7:
                    ba:2c:a6:fa:df:02:a0:20:3a:68:8a:c5:e5:a2:2f:
                    e8:1e:ca:2c:69:f3:03:9c:13:21:a7:14:a2:87:b5:
                    e1:59:81:c9:69:25:b3:71:e3:23:57:9f:b6:1f:a4:
                    d9:42:69:ff:e4:d1:85:9e:2b:bc:84:d2:e4:0c:5f:
                    5a:8d:f1:ea:63:ac:07:ff:23:36:b4:54:d8:f2:c8:
                    0e:94:ac:1c:1f:ce:19:42:ff:59:54:30:01:4c:68:
                    49:b2:4b:88:33:ed:26:e1:2f:11:7c:bd:43:1d:c7:
                    ac:ee:4b:c9:cc:18:ed:f3:2c:92:7f:08:5d:da:64:
                    06:ec:0d:64:2c:dd:04:ef:3e:27:6e:6d:76:d7:74:
                    11:92:5d:48:59:76:6b:d4:b5:49:a6:c1:f1:9a:75:
                    38:d0:33:53:ad:9d:9c:d1:26:da:b9:9a:bb:92:a5:
                    c9:64:c3:0f:4b:85:87:7c:f4:42:56:38:21:00:60:
                    fa:20:6a:83:0d:24:c1:25:3e:da:72:b2:fa:8e:05:
                    28:86:8b:5c:92:b6:0f:62:97:70:59:ef:60:cb:5e:
                    64:c4:e4:5a:d9:ba:09:e5:b6:f3:9b:97:d6:f0:47:
                    ad:18:fe:9f:fc:84:eb:32:67:5b:6d:28:08:3d:7a:
                    7b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:4F:78:43:4F:16:FD:AD:05:12:87:BD:F6:A7:48:06:C0:C9:01:FB
            X509v3 Authority Key Identifier:
                keyid:6F:4A:64:7A:FA:00:2C:03:10:9D:6A:32:33:55:E3:6A:BA:9C:72:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fsjjm6QSV9ecHJyqvHR7uwf4ECdAZ84SMikunf8rZsmA/0/6F4A647AFA002C03109D6A323355E36ABA9C7284.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F4A647AFA002C03109D6A323355E36ABA9C7284.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fsjjm6QSV9ecHJyqvHR7uwf4ECdAZ84SMikunf8rZsmA/0/323830343a383865383a633030303a3a2f33362d3336203d3e20323733353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:88e8:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         36:93:dd:7d:41:53:19:bc:54:3b:4a:6c:67:14:48:26:cb:64:
         46:dc:6b:07:2c:d1:d5:29:b7:ea:f4:47:8f:6a:95:7c:9f:e8:
         ed:b6:d7:20:42:38:90:df:31:15:48:b3:9f:40:48:47:26:23:
         52:e4:8f:1d:36:59:67:bb:dd:e3:65:51:f4:3d:09:8e:9a:43:
         fc:79:58:a5:2a:b0:9d:4e:9b:ff:5b:6b:06:f4:c4:ec:27:89:
         32:f6:b7:ec:b9:ae:d7:4c:dc:b6:3f:24:6a:c0:32:b9:c9:52:
         61:e8:9a:ff:9d:54:73:e1:55:7e:21:e8:5b:f0:5b:e9:3b:2b:
         9a:de:3d:91:9b:7b:27:cf:e7:ae:48:14:b9:3d:79:62:5e:38:
         9b:14:9e:b5:32:74:50:0a:6e:17:62:71:16:ba:74:14:dd:75:
         da:40:4c:22:84:7c:a2:dc:74:f4:e8:a4:0d:22:b3:f6:3b:ed:
         bf:a1:ff:1a:0b:7a:b1:24:e4:ce:08:c3:05:c2:b0:61:44:e3:
         78:20:ba:3e:42:14:76:52:f5:b2:e0:02:12:d8:24:da:f1:ff:
         51:a8:cf:ee:d5:ff:7e:eb:57:e2:8a:86:d2:15:7b:57:dd:b2:
         65:bd:09:cc:cb:c4:fe:d5:8f:1d:11:0d:15:ec:0c:24:0f:07:
         b2:63:87:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:49:46 2025 by rpki-client