Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/323830343a393138383a383030303a3a2f33342d3334203d3e20323734363437.roa
File:                     323830343a393138383a383030303a3a2f33342d3334203d3e20323734363437.roa (raw, json)
Hash identifier:          YDiRAVkjVmIVwJw1v86ilVS7mLiXPDbft6aPcKX33Bg=
Subject key identifier:   33:EB:1B:1C:E9:8B:16:A7:08:E0:B4:AF:A0:B8:B7:E9:79:0D:28:B2
Certificate issuer:       /CN=FE39B00057FECCE0AC6B48381399AE27C177533F
Certificate serial:       68FF7F6D2364579FFC03CFB02E135E35AE4E30DC
Authority key identifier: FE:39:B0:00:57:FE:CC:E0:AC:6B:48:38:13:99:AE:27:C1:77:53:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE39B00057FECCE0AC6B48381399AE27C177533F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/323830343a393138383a383030303a3a2f33342d3334203d3e20323734363437.roa
Signing time:             Thu 20 Mar 2025 15:06:03 +0000
ROA not before:           Thu 20 Mar 2025 15:01:03 +0000
ROA not after:            Thu 19 Mar 2026 15:06:03 +0000
asID:                     274647
IP address blocks:        2804:9188:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ff:7f:6d:23:64:57:9f:fc:03:cf:b0:2e:13:5e:35:ae:4e:30:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE39B00057FECCE0AC6B48381399AE27C177533F
        Validity
            Not Before: Mar 20 15:01:03 2025 GMT
            Not After : Mar 19 15:06:03 2026 GMT
        Subject: CN=33EB1B1CE98B16A708E0B4AFA0B8B7E9790D28B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9c:b0:74:2d:ba:f5:d0:cc:07:b6:b6:fd:25:
                    1f:9e:97:68:c1:58:a0:f4:88:ce:d8:6c:0b:0a:a5:
                    06:43:68:b9:e4:0a:6a:d3:2d:86:99:e5:f7:b3:28:
                    bc:7f:74:13:b5:32:86:e1:39:67:ab:24:e0:d2:ae:
                    38:75:b1:68:b5:87:fb:ef:22:17:2d:28:be:52:40:
                    66:e0:4a:37:3a:09:65:66:15:d8:fd:63:d5:5f:b5:
                    4d:2f:05:89:fb:c8:f3:f3:28:69:be:aa:24:17:ff:
                    0c:26:a5:ab:e4:98:bd:17:d9:24:13:b5:79:5b:38:
                    63:9f:e1:88:35:84:67:8d:7f:dc:fd:f3:26:d8:5b:
                    18:88:42:74:e1:f1:36:9b:4e:fe:f4:a9:e0:d2:fa:
                    a9:8e:a7:99:b3:6d:11:5b:94:75:a9:ec:1f:8c:8f:
                    66:5c:a9:9e:36:0c:a9:fd:f4:f3:65:12:e0:ad:01:
                    b1:8a:08:e2:6e:f6:1a:e5:bf:63:73:09:11:59:97:
                    8d:7f:d9:53:2c:80:00:4f:ba:b8:ab:a0:3e:91:27:
                    65:15:8e:9f:37:3a:ea:6b:9f:fd:0f:e3:35:5c:83:
                    45:49:47:a1:ca:65:01:6d:fb:a9:3e:34:86:78:a4:
                    f5:cb:c2:aa:f5:87:11:6f:27:6a:fd:7f:36:6d:5d:
                    54:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:EB:1B:1C:E9:8B:16:A7:08:E0:B4:AF:A0:B8:B7:E9:79:0D:28:B2
            X509v3 Authority Key Identifier:
                keyid:FE:39:B0:00:57:FE:CC:E0:AC:6B:48:38:13:99:AE:27:C1:77:53:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/FE39B00057FECCE0AC6B48381399AE27C177533F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE39B00057FECCE0AC6B48381399AE27C177533F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/323830343a393138383a383030303a3a2f33342d3334203d3e20323734363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9188:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         08:7b:45:7b:de:a2:60:fb:98:b6:c1:44:2b:2c:ce:42:dc:8a:
         bb:f0:8a:e6:c1:50:4d:08:33:d9:54:e8:ce:5f:6d:d0:62:20:
         56:1e:59:21:15:5c:82:17:07:3e:f7:a6:52:9a:68:7b:7c:60:
         07:00:c8:37:d3:1a:5e:09:5d:68:a7:7b:0e:4f:d9:4d:36:22:
         61:a2:a2:d9:c1:e6:57:85:28:a4:e7:37:d3:84:1c:a2:c4:d7:
         30:fa:1a:db:f3:49:07:f7:1f:be:13:9c:da:64:98:ad:3b:69:
         ec:91:ea:00:3c:ed:f4:16:11:b1:7b:80:1c:fa:33:6d:83:1c:
         c4:0a:c8:d5:a1:d1:9e:95:55:3d:7f:5d:c8:29:05:1e:4f:fa:
         38:24:12:e1:ef:78:51:1e:bc:44:ff:e0:46:83:98:ac:c8:7f:
         14:6a:d4:bd:3f:17:ad:da:df:41:97:f6:fe:5c:18:3e:34:c8:
         c4:53:1d:d0:bd:70:68:a1:83:d6:33:8c:2f:99:ba:42:56:49:
         54:ef:50:56:16:36:2b:58:35:68:fa:11:67:88:11:5a:5e:ee:
         92:9a:06:6a:7c:a3:df:73:45:d8:72:58:4e:d6:73:f3:57:32:
         eb:06:e8:84:48:93:a3:fe:17:0c:0f:77:21:da:ef:ba:5d:79:
         c3:a4:43:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:57:28 2025 by rpki-client