Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/323830343a353032383a343030303a3a2f33342d3334203d3e20323638333732.roa
File:                     323830343a353032383a343030303a3a2f33342d3334203d3e20323638333732.roa (raw, json)
Hash identifier:          q3NhN7FpQJC4A5ClB+mqsW9AcTKn1CfsT1ze+/GIGLc=
Subject key identifier:   94:DF:40:5F:2B:B3:B2:91:56:AA:46:E1:09:89:E3:97:70:6E:BC:BE
Certificate issuer:       /CN=65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6
Certificate serial:       046D74B09653CA1A30020146D04C81E695BCDAA4
Authority key identifier: 65:FC:8F:A4:0D:3E:39:54:41:DF:BE:E4:E9:E6:75:EA:56:5A:B9:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/323830343a353032383a343030303a3a2f33342d3334203d3e20323638333732.roa
Signing time:             Tue 10 Dec 2024 12:53:41 +0000
ROA not before:           Tue 10 Dec 2024 12:48:41 +0000
ROA not after:            Tue 09 Dec 2025 12:53:41 +0000
asID:                     268372
IP address blocks:        2804:5028:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:6d:74:b0:96:53:ca:1a:30:02:01:46:d0:4c:81:e6:95:bc:da:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6
        Validity
            Not Before: Dec 10 12:48:41 2024 GMT
            Not After : Dec  9 12:53:41 2025 GMT
        Subject: CN=94DF405F2BB3B29156AA46E10989E397706EBCBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:60:25:18:34:e8:5f:e9:07:f0:22:14:f3:d8:
                    ab:ca:cf:f5:24:5f:ad:40:1d:da:33:ca:0b:e4:55:
                    b8:0d:85:54:7a:35:b2:76:87:50:a2:a6:a1:d5:e4:
                    a8:cc:63:4f:95:4b:d9:5c:01:c2:7e:bf:c7:96:b3:
                    ed:55:c4:b3:3e:61:d2:8e:48:33:c4:81:6c:3c:8a:
                    38:f0:cb:29:d6:db:79:1d:1c:89:f0:f0:48:5a:a3:
                    3b:f1:45:da:84:b0:cc:11:07:e6:c2:11:58:8f:f5:
                    9e:69:ba:e3:2b:32:d5:89:a0:3c:71:c7:ce:5e:71:
                    77:15:7b:1b:e5:3a:88:e7:1d:c2:8b:8c:79:e5:2e:
                    3a:dc:07:3e:89:e1:bb:14:7e:47:eb:ab:48:59:e1:
                    2c:82:5c:50:27:a4:95:4e:c3:5e:92:21:4b:a2:8b:
                    4b:c4:76:0e:5d:c2:07:9a:15:5e:48:e5:8d:db:e3:
                    d6:90:86:06:cf:8d:1d:c4:5d:4d:98:27:b7:e8:2b:
                    51:b5:6f:40:f9:ff:3b:ed:7a:22:33:63:9c:5b:3e:
                    5d:80:3f:cc:44:b5:2a:f3:93:cf:65:f7:c0:66:69:
                    25:5b:c1:6f:4f:a5:4b:82:a8:5f:80:b4:78:2f:a7:
                    76:fa:76:80:af:78:6c:ba:ee:f7:a4:4e:b6:77:0e:
                    72:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:DF:40:5F:2B:B3:B2:91:56:AA:46:E1:09:89:E3:97:70:6E:BC:BE
            X509v3 Authority Key Identifier:
                keyid:65:FC:8F:A4:0D:3E:39:54:41:DF:BE:E4:E9:E6:75:EA:56:5A:B9:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/323830343a353032383a343030303a3a2f33342d3334203d3e20323638333732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5028:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         81:77:96:0c:f7:6e:5d:17:55:67:5c:03:06:cb:23:a6:59:14:
         6d:7a:ff:53:e2:a0:bd:43:24:80:c4:a2:95:54:a1:1d:93:ff:
         f1:cf:63:12:63:7c:13:bd:d7:3a:e4:ba:69:27:bc:ff:ea:8c:
         bb:83:34:ff:79:37:3c:64:79:3c:c1:b9:c7:a5:88:65:24:7e:
         13:64:42:e2:93:fd:58:dd:b3:04:94:a1:9d:31:87:d7:1d:0e:
         3a:b4:07:63:57:94:a2:e2:b7:7c:a4:1a:fb:09:7b:53:9f:c9:
         aa:cd:d1:53:39:2b:d7:af:b5:6d:d1:1f:65:c7:3e:55:d5:c2:
         cf:81:8e:54:ed:9a:f5:e9:18:ea:0a:9a:ba:29:31:5c:86:1b:
         aa:ab:9f:f4:cd:77:4c:88:77:f5:07:0b:ea:14:8c:ea:8a:a6:
         c0:13:6c:08:8b:a5:a0:83:a6:e1:85:fa:71:3b:5b:65:c1:f2:
         32:56:1e:96:18:57:72:8e:a0:51:2c:42:51:bb:5a:66:c9:50:
         c5:1f:d8:ff:b8:fa:0e:f3:c2:7f:1f:9c:ab:78:db:ef:98:0a:
         27:dc:28:b5:94:b7:25:65:32:ce:e8:8e:ca:1b:36:de:84:3a:
         f2:11:5e:fb:b7:9c:32:86:7f:84:91:c1:67:3a:f9:52:3c:5f:
         e6:ba:f4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:47:49 2025 by rpki-client