Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fsjjm6QSV9ecHJyqvHR7uwf4ECdAZ84SMikunf8rZsmA/0/323830343a383865383a663030303a3a2f33362d3336203d3e20323733353638.roa
File:                     323830343a383865383a663030303a3a2f33362d3336203d3e20323733353638.roa (raw, json)
Hash identifier:          Qj0l08cb8YdT1LREXV8V03ryRz8KURfWHwHRQBc+o+g=
Subject key identifier:   10:FC:76:F1:F8:2F:7F:2A:D5:DB:8D:2A:2B:D2:4A:C3:1C:57:CE:98
Certificate issuer:       /CN=6F4A647AFA002C03109D6A323355E36ABA9C7284
Certificate serial:       530DB73F906FC9A3FACAE7DEB23C42F597C9A572
Authority key identifier: 6F:4A:64:7A:FA:00:2C:03:10:9D:6A:32:33:55:E3:6A:BA:9C:72:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F4A647AFA002C03109D6A323355E36ABA9C7284.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fsjjm6QSV9ecHJyqvHR7uwf4ECdAZ84SMikunf8rZsmA/0/323830343a383865383a663030303a3a2f33362d3336203d3e20323733353638.roa
Signing time:             Tue 31 Oct 2023 18:38:57 +0000
ROA not before:           Tue 31 Oct 2023 18:33:57 +0000
ROA not after:            Tue 29 Oct 2024 18:38:57 +0000
asID:                     273568
IP address blocks:        2804:88e8:f000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:0d:b7:3f:90:6f:c9:a3:fa:ca:e7:de:b2:3c:42:f5:97:c9:a5:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F4A647AFA002C03109D6A323355E36ABA9C7284
        Validity
            Not Before: Oct 31 18:33:57 2023 GMT
            Not After : Oct 29 18:38:57 2024 GMT
        Subject: CN=10FC76F1F82F7F2AD5DB8D2A2BD24AC31C57CE98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:80:21:cb:8c:45:6c:ac:c7:df:f4:3a:36:4b:
                    5c:ce:48:c5:17:c6:58:d8:cc:5a:5d:fb:6d:ec:1e:
                    ac:df:36:6b:47:8f:38:10:e2:a0:22:5a:1b:93:4c:
                    9f:78:49:e4:f3:a0:2c:b8:2b:5d:8b:5b:99:d5:87:
                    d4:78:7d:2f:dd:11:de:7d:30:64:c8:ab:9a:13:2b:
                    71:61:80:59:d8:33:19:b0:49:a2:82:cb:71:8f:b7:
                    3a:ba:8f:8c:18:84:f2:80:db:62:7e:f6:04:31:9e:
                    db:f2:92:ff:19:ba:2c:d8:58:41:a0:3a:28:0c:94:
                    12:aa:79:ec:f6:88:67:2c:10:ea:f3:c1:73:76:4d:
                    14:b4:f6:f5:1c:2d:8c:5b:c7:5e:b0:3f:1f:4a:b7:
                    81:30:f1:2d:06:dc:d2:de:d3:05:39:ff:e8:cb:d3:
                    c8:a9:0f:99:43:cf:94:68:c8:5c:f8:9b:37:b1:89:
                    0a:78:5a:a6:52:c7:4a:f6:92:c6:ad:a3:51:fa:02:
                    b4:8d:52:7f:71:c2:b2:c3:26:f4:b9:25:58:dd:c7:
                    64:bb:a2:32:0c:be:c5:1e:16:3f:a8:77:12:f0:8f:
                    9a:3e:89:11:6a:23:7a:9d:58:8b:d4:45:83:e3:28:
                    74:40:75:8a:cc:89:6e:dc:5b:04:99:b0:fd:b3:6b:
                    cf:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:FC:76:F1:F8:2F:7F:2A:D5:DB:8D:2A:2B:D2:4A:C3:1C:57:CE:98
            X509v3 Authority Key Identifier:
                keyid:6F:4A:64:7A:FA:00:2C:03:10:9D:6A:32:33:55:E3:6A:BA:9C:72:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fsjjm6QSV9ecHJyqvHR7uwf4ECdAZ84SMikunf8rZsmA/0/6F4A647AFA002C03109D6A323355E36ABA9C7284.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F4A647AFA002C03109D6A323355E36ABA9C7284.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fsjjm6QSV9ecHJyqvHR7uwf4ECdAZ84SMikunf8rZsmA/0/323830343a383865383a663030303a3a2f33362d3336203d3e20323733353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:88e8:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         af:17:22:a8:31:ed:ca:4a:ed:e5:9a:5e:2e:0d:0d:bb:62:2d:
         98:0e:a7:72:d2:05:f9:70:d6:8c:f1:7b:74:e8:73:cb:2a:b1:
         29:e0:2f:a2:b8:eb:c2:ae:d3:94:01:73:a9:58:f9:83:80:e8:
         5f:66:3e:aa:cd:46:e2:3e:a1:9b:98:9d:7d:e4:07:07:c2:20:
         ae:b4:56:ce:cc:c6:8e:2b:d1:e4:14:fa:b1:f5:ad:31:d2:0f:
         d2:f5:af:ad:34:66:90:55:ae:b6:12:a5:71:bd:9d:0b:66:5c:
         9d:e3:72:1f:7d:62:a6:bd:0a:75:46:c6:78:53:6f:35:57:50:
         37:06:20:53:a3:81:21:72:ec:b8:b0:8e:6d:fb:8d:3a:16:38:
         5f:6b:79:b8:83:ca:b3:1f:59:94:4d:5d:ee:23:05:d5:18:a7:
         8d:e5:d2:ac:e3:d4:77:98:19:05:e3:56:5e:4b:76:fc:7d:b9:
         f0:2f:02:2a:a4:ef:43:b9:e5:26:72:80:fe:74:83:61:9a:bc:
         9b:22:59:b7:cb:dd:a0:d9:a8:d6:62:de:c0:72:1a:b8:1f:10:
         91:5c:1a:4f:a9:cc:a9:17:ff:db:2e:8b:0c:c7:53:5d:17:3b:
         1e:ab:3d:9d:c7:87:8d:c5:98:b6:38:0f:3d:74:f8:c4:5f:c6:
         dd:91:22:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:36:48 2025 by rpki-client