Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fsnw7MZca5xA5VKa7YapUL7Cp6xVP3Eu3LYjeGDgRos7/0/323830343a376632303a3a2f33322d3332203d3e20323731363638.roa
File:                     323830343a376632303a3a2f33322d3332203d3e20323731363638.roa (raw, json)
Hash identifier:          HNLqhqb528xFYTGZAh8zqSxOj8NXoxqryoLM024VaIw=
Subject key identifier:   CE:FC:06:E3:18:3C:02:3A:83:38:AA:9E:44:79:D6:72:6A:13:C8:18
Certificate issuer:       /CN=C74AEBC5DF5BF97E5EC064C76EC4191E39EF56E2
Certificate serial:       57A7D6F500D29858B3C84414A0F3B27C68C6FA22
Authority key identifier: C7:4A:EB:C5:DF:5B:F9:7E:5E:C0:64:C7:6E:C4:19:1E:39:EF:56:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C74AEBC5DF5BF97E5EC064C76EC4191E39EF56E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fsnw7MZca5xA5VKa7YapUL7Cp6xVP3Eu3LYjeGDgRos7/0/323830343a376632303a3a2f33322d3332203d3e20323731363638.roa
Signing time:             Thu 11 Jul 2024 19:00:43 +0000
ROA not before:           Thu 11 Jul 2024 18:55:43 +0000
ROA not after:            Thu 10 Jul 2025 19:00:43 +0000
asID:                     271668
IP address blocks:        2804:7f20::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:a7:d6:f5:00:d2:98:58:b3:c8:44:14:a0:f3:b2:7c:68:c6:fa:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C74AEBC5DF5BF97E5EC064C76EC4191E39EF56E2
        Validity
            Not Before: Jul 11 18:55:43 2024 GMT
            Not After : Jul 10 19:00:43 2025 GMT
        Subject: CN=CEFC06E3183C023A8338AA9E4479D6726A13C818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2e:c6:4a:72:e2:e9:e0:50:a7:be:ac:04:67:
                    52:e7:50:ed:06:10:f0:91:5d:ab:db:e2:2f:34:9f:
                    33:ae:75:72:a2:28:b2:70:f7:ec:c1:14:4f:d7:d2:
                    1b:61:96:8d:9d:97:a0:c2:8e:54:2d:d3:59:e9:6d:
                    b2:e8:3a:9f:28:b7:0a:a9:6e:04:c1:c4:1c:1e:cd:
                    33:7d:fb:39:c2:77:62:78:3d:f0:72:00:6f:0c:4c:
                    cf:ff:56:8b:ef:b9:a7:43:b0:40:80:e4:dc:1b:f5:
                    34:9e:f6:95:7d:02:13:b5:69:c2:df:a6:83:db:07:
                    12:75:32:e4:69:06:69:c2:72:0b:e6:02:21:23:22:
                    ef:42:d5:cf:d4:38:a3:e3:36:66:3d:f9:db:81:b1:
                    b3:be:17:12:c6:33:f7:26:57:b3:c1:d6:66:f9:2e:
                    f3:4d:20:eb:06:20:60:c7:ae:9b:95:fe:07:1b:47:
                    67:a7:13:0a:c4:6f:4f:c7:aa:92:23:b2:6d:d0:bb:
                    7b:3a:a7:19:a7:23:cd:30:24:42:23:32:0d:99:11:
                    d8:ed:62:1a:c6:3c:c2:22:b3:bd:4f:d5:1d:95:3d:
                    d4:f3:07:94:22:68:63:42:92:5f:c3:d8:74:91:b1:
                    dd:75:b2:3f:96:0f:eb:cd:1c:19:31:87:55:49:7e:
                    c7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:FC:06:E3:18:3C:02:3A:83:38:AA:9E:44:79:D6:72:6A:13:C8:18
            X509v3 Authority Key Identifier:
                keyid:C7:4A:EB:C5:DF:5B:F9:7E:5E:C0:64:C7:6E:C4:19:1E:39:EF:56:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fsnw7MZca5xA5VKa7YapUL7Cp6xVP3Eu3LYjeGDgRos7/0/C74AEBC5DF5BF97E5EC064C76EC4191E39EF56E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C74AEBC5DF5BF97E5EC064C76EC4191E39EF56E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fsnw7MZca5xA5VKa7YapUL7Cp6xVP3Eu3LYjeGDgRos7/0/323830343a376632303a3a2f33322d3332203d3e20323731363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7f20::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:cc:1b:ff:64:7a:1b:a2:cb:e9:7e:2a:bd:c1:8b:7c:f1:5d:
         87:d2:17:a2:e9:2a:87:a0:30:bf:71:49:73:9a:76:45:95:72:
         94:9d:94:88:80:d6:22:07:0c:0b:0f:d0:a8:18:f5:d5:bc:57:
         5c:c5:d7:63:50:95:79:ba:75:fb:02:0c:d8:8a:67:64:f5:03:
         cd:2b:91:4e:51:ef:df:6a:54:bf:b3:64:e4:eb:72:4c:da:4d:
         d6:21:f6:88:88:01:71:fe:de:20:43:5d:0d:32:62:0f:24:c5:
         ad:fe:79:6b:68:c1:fc:e2:c6:72:41:09:0b:a1:ad:a2:0d:77:
         f8:b8:d0:fb:bf:95:cd:3b:bb:b6:ad:be:53:c6:13:92:2c:f4:
         00:6c:4a:ea:76:dd:23:67:53:18:96:58:b7:85:20:52:3a:03:
         d1:25:f9:8b:d5:2d:96:79:e6:83:71:ac:a2:b8:3a:3a:3c:77:
         42:77:be:c0:8b:69:ce:5e:d6:8d:b8:10:41:e1:c8:39:c3:44:
         7f:34:c9:f9:36:cc:3c:4b:f2:9f:f3:0c:f9:98:84:41:7d:fd:
         9c:76:cf:94:e2:f4:c7:cd:10:96:4c:db:63:eb:74:35:6f:d3:
         77:d1:a6:65:2f:02:1e:03:77:1a:6e:7d:6f:30:14:d4:e9:e6:
         d8:e0:28:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 21:18:59 2025 by rpki-client