Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/323830343a323833343a3a2f33322d3334203d3e20323633393437.roa
File:                     323830343a323833343a3a2f33322d3334203d3e20323633393437.roa (raw, json)
Hash identifier:          VoAdhZL4dy4CwwQ5dn/EUOWDbJltxLahEw3mn1FyuU4=
Subject key identifier:   61:36:F8:EF:64:A5:9D:F3:1F:FC:64:A6:D3:1F:81:7B:EA:F5:0A:DB
Certificate issuer:       /CN=FAF093F291860536EFFC93934E77DC96693302DB
Certificate serial:       24F210871D848E441599AD76FC1C22C4662603E6
Authority key identifier: FA:F0:93:F2:91:86:05:36:EF:FC:93:93:4E:77:DC:96:69:33:02:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAF093F291860536EFFC93934E77DC96693302DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/323830343a323833343a3a2f33322d3334203d3e20323633393437.roa
Signing time:             Thu 05 Dec 2024 12:18:13 +0000
ROA not before:           Thu 05 Dec 2024 12:13:13 +0000
ROA not after:            Thu 04 Dec 2025 12:18:13 +0000
asID:                     263947
IP address blocks:        2804:2834::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:f2:10:87:1d:84:8e:44:15:99:ad:76:fc:1c:22:c4:66:26:03:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAF093F291860536EFFC93934E77DC96693302DB
        Validity
            Not Before: Dec  5 12:13:13 2024 GMT
            Not After : Dec  4 12:18:13 2025 GMT
        Subject: CN=6136F8EF64A59DF31FFC64A6D31F817BEAF50ADB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:36:3d:31:87:ac:88:d4:34:0d:01:4f:ea:5e:
                    8f:25:c3:fc:bd:51:20:25:32:5c:df:85:f3:e5:76:
                    a1:65:43:6c:26:41:9a:dc:f3:26:ca:4c:f8:ab:da:
                    4e:a1:c6:5d:b9:65:4a:fd:23:9c:47:cb:88:3d:4d:
                    e2:98:b8:11:40:30:a1:ae:6a:68:03:76:a0:c8:c0:
                    5c:92:44:e1:2f:32:d7:75:e1:a0:69:ea:00:04:02:
                    14:ef:6c:d6:4b:ba:97:da:f5:1e:5f:8e:88:67:24:
                    92:ba:7b:4a:07:30:cd:ee:15:cb:1c:df:82:2d:c2:
                    13:af:e8:cb:6d:3b:d3:54:3c:0f:0c:b1:d7:af:eb:
                    4c:83:9e:cd:90:0e:1c:fd:3c:c6:20:9b:4c:c9:40:
                    e9:cd:23:e0:e2:f9:8c:79:61:9a:32:52:24:ae:29:
                    22:59:45:10:8d:4c:f9:b0:0c:36:2f:26:94:2d:13:
                    a4:84:e6:2d:c5:7b:33:d6:74:88:74:d3:83:b1:16:
                    6f:a0:9d:8a:4d:15:13:1e:ea:13:4d:9f:f8:97:f3:
                    ce:50:e8:17:c0:fd:99:0e:b9:1a:6c:07:0f:11:cb:
                    e1:40:fe:ff:d6:df:6c:46:45:fc:af:ba:51:4e:cf:
                    63:3b:36:80:fe:d1:de:2d:3a:ab:56:b8:5a:4e:8f:
                    be:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:36:F8:EF:64:A5:9D:F3:1F:FC:64:A6:D3:1F:81:7B:EA:F5:0A:DB
            X509v3 Authority Key Identifier:
                keyid:FA:F0:93:F2:91:86:05:36:EF:FC:93:93:4E:77:DC:96:69:33:02:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAF093F291860536EFFC93934E77DC96693302DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/323830343a323833343a3a2f33322d3334203d3e20323633393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2834::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:32:cf:37:8c:2c:34:fe:be:b4:b5:b0:87:cd:22:c4:24:fc:
         a2:b9:9f:87:6c:e2:32:49:90:cb:d3:83:f9:44:74:ba:21:4b:
         89:82:ad:c4:65:f6:da:67:b8:54:8c:b4:08:44:0d:1c:6d:7c:
         6d:3a:50:94:84:86:2c:09:c1:99:e0:bb:f0:a9:bc:7c:b0:73:
         2f:46:0a:60:55:4e:24:ec:94:f3:f0:11:8e:37:f1:eb:da:4b:
         22:82:d9:05:b4:07:79:03:3e:0c:b7:a8:8d:32:02:55:fa:79:
         a8:d1:eb:b6:85:94:3a:5f:3c:60:f0:ec:17:49:91:89:09:c1:
         9c:7c:b6:da:e8:bd:78:99:f0:73:a2:b0:07:24:3c:07:c3:ba:
         42:7b:08:cc:4f:27:71:1f:a1:b2:02:d1:e3:a9:e8:74:83:e9:
         9f:6e:2a:26:9f:da:bf:67:0b:66:a6:5f:94:c3:0a:f3:5d:8b:
         bc:4e:ed:4a:7e:2e:ba:b7:fa:e3:90:69:01:f9:6c:78:61:b0:
         93:d5:7c:bb:fb:bb:8e:47:e0:bf:6b:3f:16:85:53:50:7f:25:
         a5:0e:2c:43:66:1f:bd:35:54:d8:97:3e:ac:58:5c:a0:7e:af:
         f2:81:e8:af:dc:1d:7a:22:1c:1f:f8:36:1a:53:58:df:7d:a6:
         ba:44:4d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:18:00 2025 by rpki-client