Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/323830343a356265383a633030303a3a2f33342d3334203d3e20323638383736.roa
File:                     323830343a356265383a633030303a3a2f33342d3334203d3e20323638383736.roa (raw, json)
Hash identifier:          sS+BKZpUR8rJd+7YqvLDBHsSM7CvwnJnqWKCJvKo1bE=
Subject key identifier:   1E:93:F2:BE:4D:22:E2:1D:37:DE:C7:F8:D5:7B:55:A0:12:03:73:B1
Certificate issuer:       /CN=FDD4E609728A79B5F481EFFB6BE30EADF7E69F36
Certificate serial:       24CA9BE3BA3E104DBB804B5ACEF5D16E25C83A13
Authority key identifier: FD:D4:E6:09:72:8A:79:B5:F4:81:EF:FB:6B:E3:0E:AD:F7:E6:9F:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDD4E609728A79B5F481EFFB6BE30EADF7E69F36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/323830343a356265383a633030303a3a2f33342d3334203d3e20323638383736.roa
Signing time:             Tue 19 Nov 2024 12:43:53 +0000
ROA not before:           Tue 19 Nov 2024 12:38:53 +0000
ROA not after:            Tue 18 Nov 2025 12:43:53 +0000
asID:                     268876
IP address blocks:        2804:5be8:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:ca:9b:e3:ba:3e:10:4d:bb:80:4b:5a:ce:f5:d1:6e:25:c8:3a:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDD4E609728A79B5F481EFFB6BE30EADF7E69F36
        Validity
            Not Before: Nov 19 12:38:53 2024 GMT
            Not After : Nov 18 12:43:53 2025 GMT
        Subject: CN=1E93F2BE4D22E21D37DEC7F8D57B55A0120373B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:50:5c:47:cc:23:87:94:2b:f7:d3:c0:77:b7:
                    66:b4:ac:a8:33:09:70:7a:0b:63:e5:96:58:ff:18:
                    f9:01:42:73:dd:47:f8:03:4a:57:4a:1a:c6:f1:e3:
                    7b:97:5a:90:46:e3:70:ee:95:95:b1:90:95:8c:b4:
                    16:21:8c:e8:44:3f:b1:e6:a9:a6:2e:a5:d1:73:fe:
                    99:dc:50:eb:e1:ba:2d:04:24:ad:b6:4a:ed:1d:16:
                    43:51:17:3f:f7:50:c4:4d:a4:dc:9b:a1:76:9c:84:
                    52:e9:c2:d8:3c:a6:07:fb:21:f0:85:e4:ca:46:3e:
                    16:79:b7:8d:98:4d:9e:2f:bb:1a:7e:52:87:a2:ba:
                    33:40:78:68:7c:d7:e1:e3:e0:bd:3d:5d:8c:bd:4e:
                    36:90:d0:0a:91:a5:28:a6:9a:39:68:4e:d6:90:ec:
                    9a:70:7e:a8:b4:87:6d:25:70:79:31:08:63:48:78:
                    9b:18:81:71:9a:d1:fe:41:d0:0f:db:33:7d:47:ff:
                    a9:d0:b3:18:08:74:1a:02:c9:bd:50:4c:74:9b:dc:
                    58:97:21:29:d3:c0:47:aa:f7:5c:65:23:8e:b1:f5:
                    23:7d:48:e6:d0:9e:5c:07:f4:e1:7d:80:e3:71:77:
                    9f:d6:09:6f:6a:d0:fe:c2:f3:58:12:1b:cb:50:b2:
                    f4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:93:F2:BE:4D:22:E2:1D:37:DE:C7:F8:D5:7B:55:A0:12:03:73:B1
            X509v3 Authority Key Identifier:
                keyid:FD:D4:E6:09:72:8A:79:B5:F4:81:EF:FB:6B:E3:0E:AD:F7:E6:9F:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/FDD4E609728A79B5F481EFFB6BE30EADF7E69F36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDD4E609728A79B5F481EFFB6BE30EADF7E69F36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/323830343a356265383a633030303a3a2f33342d3334203d3e20323638383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5be8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a0:2d:da:72:73:a8:23:10:b6:2b:20:54:90:42:6c:ed:3c:2a:
         59:64:39:41:22:09:2e:43:a9:09:1b:02:36:d2:27:eb:c0:fd:
         b8:5d:31:ad:1b:cc:d3:8a:ec:85:19:98:32:5d:08:fb:8f:78:
         81:bb:2a:ba:24:d9:e2:8d:f0:96:02:30:c6:86:33:75:75:cf:
         1d:27:51:0a:6a:45:b9:ea:b4:65:1c:20:26:cc:a7:56:1d:51:
         6d:4f:aa:d9:c6:12:a6:28:4f:6a:36:4c:c8:54:0d:33:0a:06:
         a3:f8:b1:33:e5:a5:3a:d1:aa:b9:36:15:32:0e:3e:96:cc:f3:
         1c:3c:d9:11:5a:6a:2d:a1:0c:e1:01:61:03:ad:00:5c:0a:23:
         14:e9:25:96:49:a0:fc:6a:cc:5f:81:1b:6b:b1:8e:da:e2:78:
         1d:d1:2a:d9:6e:f7:e5:17:7c:d9:2c:dd:9d:dc:60:0c:7a:72:
         9d:a8:19:55:f3:d3:65:1e:aa:1e:3c:eb:95:67:5c:1b:78:20:
         ec:63:70:5c:29:4f:be:64:9a:82:f0:d8:66:83:f1:32:eb:74:
         e6:e9:45:fa:5f:e5:a2:08:ab:55:cf:b6:f5:7c:76:5a:55:e5:
         00:41:33:e1:88:34:9b:40:5c:71:00:33:ce:01:91:42:87:5c:
         22:b4:bf:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:53:11 2025 by rpki-client