Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G2NE8j18y7aCi38U8GtMweraX7SqUgCqUaNU6kgdjmQT/1/323830343a343930303a3a2f33342d3335203d3e20323637313538.roa
File:                     323830343a343930303a3a2f33342d3335203d3e20323637313538.roa (raw, json)
Hash identifier:          EIXkZSE8ZaRvKguEzVjiDSGUfES+oqjfWrbnIeRvxuY=
Subject key identifier:   68:82:B8:FC:DE:64:AC:14:BD:79:9B:E8:05:23:14:58:A3:69:A3:94
Certificate issuer:       /CN=FD1925A97D11CC301B6F3B5F085AFBEF958C234D
Certificate serial:       1E4D0F3B8999E56751E671A41EC2986F655CC223
Authority key identifier: FD:19:25:A9:7D:11:CC:30:1B:6F:3B:5F:08:5A:FB:EF:95:8C:23:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD1925A97D11CC301B6F3B5F085AFBEF958C234D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G2NE8j18y7aCi38U8GtMweraX7SqUgCqUaNU6kgdjmQT/1/323830343a343930303a3a2f33342d3335203d3e20323637313538.roa
Signing time:             Thu 06 Mar 2025 12:33:17 +0000
ROA not before:           Thu 06 Mar 2025 12:28:17 +0000
ROA not after:            Thu 05 Mar 2026 12:33:17 +0000
asID:                     267158
IP address blocks:        2804:4900::/34 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:4d:0f:3b:89:99:e5:67:51:e6:71:a4:1e:c2:98:6f:65:5c:c2:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD1925A97D11CC301B6F3B5F085AFBEF958C234D
        Validity
            Not Before: Mar  6 12:28:17 2025 GMT
            Not After : Mar  5 12:33:17 2026 GMT
        Subject: CN=6882B8FCDE64AC14BD799BE805231458A369A394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:99:d5:72:b1:cb:b1:f7:5f:15:78:6a:fb:d3:
                    b6:0a:9f:38:a4:14:c3:37:b5:f8:b1:cb:52:84:45:
                    22:be:e0:e0:97:6c:0f:dd:c7:6e:cc:99:7f:0b:6a:
                    5f:09:1f:b0:35:7b:cf:26:a5:95:77:a3:43:d0:84:
                    58:5a:aa:4d:19:4a:49:e0:93:d8:47:40:ce:80:ca:
                    0f:a6:9e:f5:11:fd:62:51:f8:58:ef:3d:36:39:d7:
                    56:d6:59:5e:12:75:4b:61:1b:72:ea:8b:4c:5f:3f:
                    50:d1:e1:03:78:7d:d9:af:90:b2:98:3f:3f:e6:06:
                    2b:e2:a5:46:33:02:59:95:88:4e:b3:e6:7a:1c:ef:
                    53:82:b2:7a:a6:ef:6b:27:dc:5a:3c:1c:b7:c4:99:
                    ee:7d:4c:1a:9b:7b:0d:c3:bc:87:fb:18:f3:a5:f0:
                    95:b9:bb:35:ce:51:b1:50:a9:b6:22:64:a1:0a:d9:
                    75:e9:1d:06:b6:bb:4a:1f:73:b0:fc:ca:e6:97:60:
                    ee:35:c8:eb:57:93:27:cf:d0:0b:eb:48:39:a5:79:
                    78:d8:2a:a2:14:ea:23:ca:27:cc:a6:75:66:74:c2:
                    e7:a7:98:69:2f:07:bd:bd:5e:ae:90:9b:b5:ab:9f:
                    ab:39:31:0e:ed:2e:a1:f8:fc:82:45:7a:89:5d:bd:
                    4a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:82:B8:FC:DE:64:AC:14:BD:79:9B:E8:05:23:14:58:A3:69:A3:94
            X509v3 Authority Key Identifier:
                keyid:FD:19:25:A9:7D:11:CC:30:1B:6F:3B:5F:08:5A:FB:EF:95:8C:23:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G2NE8j18y7aCi38U8GtMweraX7SqUgCqUaNU6kgdjmQT/1/FD1925A97D11CC301B6F3B5F085AFBEF958C234D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD1925A97D11CC301B6F3B5F085AFBEF958C234D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G2NE8j18y7aCi38U8GtMweraX7SqUgCqUaNU6kgdjmQT/1/323830343a343930303a3a2f33342d3335203d3e20323637313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4900::/34

    Signature Algorithm: sha256WithRSAEncryption
         7d:0e:f8:d6:7c:39:42:3d:f2:c6:fb:c1:f7:a9:a6:81:89:f0:
         d6:70:95:b9:5b:32:e5:54:de:97:78:d3:f8:79:7e:83:9f:92:
         be:a0:15:cc:5f:15:9d:e7:54:0e:24:2e:23:be:8d:b0:3d:e7:
         c8:23:47:2a:2d:36:30:a6:0f:05:e9:b9:b1:58:d8:db:47:fe:
         31:c4:d9:02:d1:a1:d8:1b:a4:f0:34:b2:73:f3:79:9a:50:47:
         36:82:87:64:5b:96:01:18:c4:ca:4b:e0:11:d4:bc:db:65:2b:
         36:8e:90:6c:28:17:17:98:dd:74:5d:e0:a3:94:a4:4f:9e:34:
         e7:61:54:c2:ac:a0:d2:e0:d9:d1:06:bc:fe:3a:46:d5:eb:d5:
         6a:75:b3:e7:67:07:9e:fc:34:dc:fa:6f:47:2a:a2:ef:2f:db:
         d9:b5:63:2a:56:24:28:f4:35:3c:05:15:2e:d7:da:29:ab:38:
         bd:17:14:01:ac:2c:c9:07:2d:f5:ed:0c:e3:90:28:43:d4:78:
         d9:9d:47:7b:98:bb:88:39:54:85:6f:c0:91:4f:81:bf:8e:ec:
         d7:49:7e:1c:23:b5:f8:99:b3:c4:18:bf:af:ac:c8:fb:40:2a:
         c5:2c:c1:13:88:aa:21:6b:5e:33:0f:23:0e:4d:91:17:5e:d0:
         2c:2f:04:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:18:04 2025 by rpki-client