Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gx276Y8sWkN9ZErYg1HtsZocnLwmVgKtNkR1Wq2S8m9o/0/323830343a373934383a3a2f33322d3536203d3e20323731323936.roa
File:                     323830343a373934383a3a2f33322d3536203d3e20323731323936.roa (raw, json)
Hash identifier:          jlCEj9DCD0d6b1jctnlw7s3nOrbXYUQnatIhOOwWUKE=
Subject key identifier:   9C:C3:A4:B0:39:5C:41:D6:5D:9D:E3:4A:74:CC:51:D8:48:91:81:08
Certificate issuer:       /CN=6E281E13B9B4E1B6E2C75C82B6D47AA87E9F0363
Certificate serial:       12B5696F41F3FAF44CF22CC7986C0AE35B29F633
Authority key identifier: 6E:28:1E:13:B9:B4:E1:B6:E2:C7:5C:82:B6:D4:7A:A8:7E:9F:03:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E281E13B9B4E1B6E2C75C82B6D47AA87E9F0363.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gx276Y8sWkN9ZErYg1HtsZocnLwmVgKtNkR1Wq2S8m9o/0/323830343a373934383a3a2f33322d3536203d3e20323731323936.roa
Signing time:             Mon 27 Jan 2025 19:42:40 +0000
ROA not before:           Mon 27 Jan 2025 19:37:40 +0000
ROA not after:            Mon 26 Jan 2026 19:42:40 +0000
asID:                     271296
IP address blocks:        2804:7948::/32 maxlen: 56
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:b5:69:6f:41:f3:fa:f4:4c:f2:2c:c7:98:6c:0a:e3:5b:29:f6:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E281E13B9B4E1B6E2C75C82B6D47AA87E9F0363
        Validity
            Not Before: Jan 27 19:37:40 2025 GMT
            Not After : Jan 26 19:42:40 2026 GMT
        Subject: CN=9CC3A4B0395C41D65D9DE34A74CC51D848918108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:45:a8:95:3e:6b:04:a7:20:48:36:bf:1e:5e:
                    5b:8e:fa:9e:b0:c9:03:6f:c3:3b:3e:1f:82:6c:f4:
                    d3:1f:2b:b2:dc:20:39:de:f1:93:ff:79:b4:86:4d:
                    07:e3:b9:2d:6c:ba:6b:8a:44:3e:e7:31:08:72:ad:
                    46:52:33:ec:32:20:4a:e8:d2:57:8e:11:43:4e:71:
                    13:f8:7e:a4:c7:87:0e:bd:b5:08:22:67:ab:88:0b:
                    a8:a3:a3:63:00:76:85:48:b7:f8:ba:f6:04:0e:8d:
                    4f:30:b3:78:45:7e:38:3d:2c:04:cd:3f:88:27:f6:
                    ff:f4:74:d3:c3:1b:a5:a1:f2:d0:5b:22:4a:23:c7:
                    24:5d:6f:6e:8b:f9:be:84:b3:12:0d:17:9c:44:a4:
                    66:24:89:d2:ea:fc:23:87:84:c1:6d:19:cb:72:e3:
                    3e:aa:40:34:44:86:a9:fc:8f:1f:2b:e6:8f:37:a0:
                    c2:12:53:f6:ef:95:98:6a:73:2c:b1:4e:b5:9a:cd:
                    29:4a:40:65:a6:98:ac:44:ff:c4:73:48:15:8c:41:
                    8c:68:36:6f:63:3c:ec:c7:59:ed:77:f5:9e:fb:c5:
                    17:43:98:0b:cd:6b:0f:93:2f:2b:56:29:82:ff:e1:
                    bc:ed:a8:30:db:ca:81:53:42:9e:99:81:f2:8c:d2:
                    f7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C3:A4:B0:39:5C:41:D6:5D:9D:E3:4A:74:CC:51:D8:48:91:81:08
            X509v3 Authority Key Identifier:
                keyid:6E:28:1E:13:B9:B4:E1:B6:E2:C7:5C:82:B6:D4:7A:A8:7E:9F:03:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gx276Y8sWkN9ZErYg1HtsZocnLwmVgKtNkR1Wq2S8m9o/0/6E281E13B9B4E1B6E2C75C82B6D47AA87E9F0363.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E281E13B9B4E1B6E2C75C82B6D47AA87E9F0363.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gx276Y8sWkN9ZErYg1HtsZocnLwmVgKtNkR1Wq2S8m9o/0/323830343a373934383a3a2f33322d3536203d3e20323731323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7948::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:dd:e2:8f:48:f2:09:78:2a:d5:a2:f8:63:dd:bd:b0:cf:24:
         b5:d1:97:4d:25:67:8c:14:07:ad:09:b7:cb:7e:13:57:e2:fc:
         bd:72:dc:35:51:67:36:60:29:f8:94:2a:bd:72:69:32:c8:0a:
         7f:7b:c8:ec:62:80:97:02:b2:64:f7:16:f7:b8:53:94:a5:59:
         fe:6c:40:f6:b5:94:61:3b:1b:cf:0d:5c:d8:b4:dd:30:15:c5:
         36:39:4d:2d:be:db:ec:40:33:a6:81:a5:3c:4a:c3:7c:5b:2e:
         eb:6f:89:69:d7:c6:34:54:02:76:eb:dc:70:2d:d5:65:1f:13:
         58:f7:84:c0:63:0b:55:16:82:6a:ee:cf:d9:21:40:e7:01:e2:
         bd:c6:04:2d:80:34:88:31:2a:cc:88:2f:19:4e:3f:29:7a:82:
         f4:d8:d2:b5:64:55:54:41:4f:5c:a5:17:b7:f4:5b:89:74:ef:
         53:b3:57:9a:58:52:ed:b1:62:b2:8d:4b:0d:9b:83:3c:bf:25:
         67:42:2b:0e:dc:c7:f4:7c:d7:e1:4e:d1:8e:89:84:81:f5:ff:
         01:7a:0c:f0:84:9d:16:d6:3e:32:f4:90:77:4a:b2:b8:07:84:
         4e:fe:64:00:d5:3e:2a:f2:a1:fc:2b:b6:b6:1a:61:b0:b9:84:
         0c:b1:93:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:30:28 2025 by rpki-client