Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GjyYAU52QoYGT2Po3nTaSeTUWhKxvkF8DetMZ9gxiV4J/0/323830343a366236633a3a2f33322d3332203d3e20323730333939.roa
File:                     323830343a366236633a3a2f33322d3332203d3e20323730333939.roa (raw, json)
Hash identifier:          1gCTTC2XAJ5zJ+6OYSPtQJJc2xOgNZ4ozGcU1Mihd7U=
Subject key identifier:   83:57:A9:6A:27:9D:FC:90:9E:35:67:79:80:BE:28:0E:43:97:A3:AF
Certificate issuer:       /CN=06D8D5D048750DC3A3EEB9D6F4A0F2E3E172F021
Certificate serial:       689463212DD2910F9DE3F143816A1D6F8EF42146
Authority key identifier: 06:D8:D5:D0:48:75:0D:C3:A3:EE:B9:D6:F4:A0:F2:E3:E1:72:F0:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06D8D5D048750DC3A3EEB9D6F4A0F2E3E172F021.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GjyYAU52QoYGT2Po3nTaSeTUWhKxvkF8DetMZ9gxiV4J/0/323830343a366236633a3a2f33322d3332203d3e20323730333939.roa
Signing time:             Tue 07 Jan 2025 15:04:46 +0000
ROA not before:           Tue 07 Jan 2025 14:59:46 +0000
ROA not after:            Tue 06 Jan 2026 15:04:46 +0000
asID:                     270399
IP address blocks:        2804:6b6c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:94:63:21:2d:d2:91:0f:9d:e3:f1:43:81:6a:1d:6f:8e:f4:21:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06D8D5D048750DC3A3EEB9D6F4A0F2E3E172F021
        Validity
            Not Before: Jan  7 14:59:46 2025 GMT
            Not After : Jan  6 15:04:46 2026 GMT
        Subject: CN=8357A96A279DFC909E35677980BE280E4397A3AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1d:7d:a9:c6:0c:6e:31:9c:3a:23:d3:17:78:
                    82:5d:7c:48:57:59:b6:fd:a4:a2:f3:4d:ab:e0:61:
                    05:76:6f:c6:c0:d4:69:a4:f6:77:1f:14:a2:60:81:
                    2b:a5:17:9d:5a:6b:88:ae:46:b5:99:f5:29:bc:d9:
                    f8:44:c5:48:0c:78:af:1f:a8:00:64:04:cf:2d:f1:
                    26:75:5d:74:61:0e:08:82:1d:12:ee:49:9c:9b:11:
                    95:af:75:9f:ad:9c:40:b7:84:04:cf:40:c6:65:bf:
                    5a:3d:c9:33:c4:51:f2:7e:79:40:51:b6:f0:53:c1:
                    2b:7e:3d:65:7c:6e:01:cf:6a:55:45:7f:12:a1:51:
                    07:9e:30:c0:cb:d3:4c:45:e5:e5:54:88:7d:17:91:
                    96:14:94:bb:60:52:55:9c:32:84:b3:1b:34:88:ee:
                    a1:19:5a:91:3b:4e:94:07:be:55:7a:42:6e:d2:01:
                    a5:51:1f:fd:ce:dd:87:1e:5b:a4:9b:2c:65:e9:20:
                    d2:63:e6:f2:2b:76:9a:ca:3d:28:37:10:cf:5c:1b:
                    7b:6c:c7:18:45:94:5d:9e:69:6b:93:8f:26:62:93:
                    06:04:c0:87:6d:fd:f1:2f:fd:e1:a0:54:23:83:2c:
                    13:29:9c:36:71:90:00:b6:c7:2a:06:20:cd:c9:d9:
                    4f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:57:A9:6A:27:9D:FC:90:9E:35:67:79:80:BE:28:0E:43:97:A3:AF
            X509v3 Authority Key Identifier:
                keyid:06:D8:D5:D0:48:75:0D:C3:A3:EE:B9:D6:F4:A0:F2:E3:E1:72:F0:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GjyYAU52QoYGT2Po3nTaSeTUWhKxvkF8DetMZ9gxiV4J/0/06D8D5D048750DC3A3EEB9D6F4A0F2E3E172F021.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06D8D5D048750DC3A3EEB9D6F4A0F2E3E172F021.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GjyYAU52QoYGT2Po3nTaSeTUWhKxvkF8DetMZ9gxiV4J/0/323830343a366236633a3a2f33322d3332203d3e20323730333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6b6c::/32

    Signature Algorithm: sha256WithRSAEncryption
         e3:29:0c:7f:88:4b:d5:f1:6a:de:4a:6c:8a:54:3d:fb:b6:d5:
         fe:82:f2:dc:8f:8b:49:bd:c7:e9:5b:3b:81:a5:6e:4c:27:d8:
         9f:02:1b:7f:b8:6d:89:75:06:5f:f3:20:f7:ec:46:c9:ce:87:
         37:a7:f8:6c:f5:ba:f8:b7:bf:2d:09:3a:1d:64:9f:2f:87:7f:
         c6:bb:db:d2:1e:38:d7:a6:fe:dd:fa:bf:40:14:b1:ef:35:d7:
         14:35:fc:f3:1c:76:64:44:52:51:6e:2d:08:d2:40:60:31:32:
         ad:81:b0:9b:06:13:e7:1d:23:a1:bb:5f:41:5b:56:6b:c0:e9:
         a9:4c:98:7a:6a:ed:7b:5f:9e:f3:37:88:7a:65:a0:ed:fa:27:
         bd:62:46:7c:2f:d9:07:16:2e:ce:be:54:57:a6:b3:48:e2:4d:
         72:1a:29:7a:0e:33:b7:02:98:56:52:f7:36:73:2c:89:fa:91:
         f9:7d:23:7b:d2:49:46:51:8a:32:1c:8c:eb:28:18:b0:27:4b:
         df:ea:6d:7c:5e:f4:9d:3e:6c:d8:7d:42:e8:8e:91:7d:a7:8d:
         fb:14:45:06:36:2d:cf:46:5c:e5:ba:d9:bb:80:09:d3:f0:d5:
         b2:da:12:0c:ec:e0:66:36:dc:06:9d:6f:8d:5e:07:8e:cd:60:
         bc:96:be:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:29:28 2025 by rpki-client