Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/323830343a313063383a3a2f33322d3438203d3e20323633363439.roa
File:                     323830343a313063383a3a2f33322d3438203d3e20323633363439.roa (raw, json)
Hash identifier:          dzaGxOqu1/pCBKo5XgqrUqMVuHPewXTHkGxxByVLvCI=
Subject key identifier:   E1:F0:5C:C6:D3:B8:7F:73:0D:14:BF:48:4B:9F:2F:6C:11:A1:D4:E8
Certificate issuer:       /CN=6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B
Certificate serial:       168E1F3F8659AA42A5D99B6C69C887EC1F1545E9
Authority key identifier: 6A:5B:FC:EB:0E:D1:5D:45:74:69:EC:7F:A1:ED:3C:B5:4A:FE:C5:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/323830343a313063383a3a2f33322d3438203d3e20323633363439.roa
Signing time:             Wed 05 Mar 2025 21:04:32 +0000
ROA not before:           Wed 05 Mar 2025 20:59:32 +0000
ROA not after:            Wed 04 Mar 2026 21:04:32 +0000
asID:                     263649
IP address blocks:        2804:10c8::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:8e:1f:3f:86:59:aa:42:a5:d9:9b:6c:69:c8:87:ec:1f:15:45:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B
        Validity
            Not Before: Mar  5 20:59:32 2025 GMT
            Not After : Mar  4 21:04:32 2026 GMT
        Subject: CN=E1F05CC6D3B87F730D14BF484B9F2F6C11A1D4E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c6:fc:44:51:0d:97:fa:b0:55:3c:9e:ef:e5:
                    a0:26:43:a1:d6:77:0f:8f:e3:28:71:c3:43:1d:da:
                    d7:63:75:56:76:72:12:fe:64:35:d5:ce:77:00:7c:
                    d3:22:4d:24:6b:6e:9c:0c:6c:41:06:ac:74:bb:53:
                    cb:5a:07:df:27:39:0f:f4:b4:b9:71:ab:c4:53:6c:
                    2e:06:ea:24:8a:eb:b1:c2:e6:99:46:4d:1d:69:24:
                    ef:ec:1b:98:09:ac:2b:79:63:41:b7:4f:47:33:33:
                    d3:c0:fe:4f:db:ac:12:16:20:13:37:bd:a2:d0:d3:
                    07:80:67:bc:3e:52:9b:1a:d3:79:3d:13:0a:93:b0:
                    c7:a6:e6:db:59:f8:32:5f:cc:e9:3b:78:4d:13:b9:
                    e3:21:a5:74:b9:16:8c:1d:e7:f6:fb:f6:26:ee:7f:
                    d8:e7:d2:08:c0:3e:46:42:94:3a:e8:7a:94:9f:fd:
                    03:43:8a:d2:09:d8:be:80:3c:13:16:e0:4c:34:88:
                    f8:52:90:4c:fb:ca:55:37:0c:4e:1b:3f:4a:87:01:
                    e8:01:f9:5c:0e:30:6a:5a:f1:76:ab:5f:4a:7c:5c:
                    e7:4b:43:ec:13:47:57:a2:15:eb:0a:6a:ac:54:d5:
                    48:ee:69:94:c4:af:67:26:ea:19:99:b9:6e:25:da:
                    05:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:F0:5C:C6:D3:B8:7F:73:0D:14:BF:48:4B:9F:2F:6C:11:A1:D4:E8
            X509v3 Authority Key Identifier:
                keyid:6A:5B:FC:EB:0E:D1:5D:45:74:69:EC:7F:A1:ED:3C:B5:4A:FE:C5:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/323830343a313063383a3a2f33322d3438203d3e20323633363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:10c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:be:3b:fa:0f:21:e5:85:62:11:43:be:35:2b:b9:9a:84:d5:
         1e:b4:bb:07:e5:d3:33:e5:b6:56:69:1c:c5:7e:eb:56:5b:bc:
         92:2c:96:11:1b:27:2e:05:1a:e7:d6:ae:d4:f8:6a:56:b4:1a:
         a2:37:33:35:e3:5b:e7:4f:27:24:b9:6a:65:c7:1c:41:18:a2:
         ff:45:37:cf:36:48:3d:06:29:37:e7:90:78:e5:92:a6:93:7e:
         60:1b:9e:9f:2c:be:1e:95:23:20:eb:2b:aa:8e:14:1a:bd:ae:
         09:d7:0e:c6:af:f7:c1:2d:7b:17:ec:ed:72:ec:dc:ba:e3:b9:
         28:44:05:7e:a1:e7:98:5b:37:e7:4d:14:b8:bc:1d:71:c5:e5:
         f1:61:55:d3:24:76:69:e7:4e:cc:70:8e:a3:29:0b:1e:16:cb:
         7b:49:a2:06:c4:32:9e:ff:23:03:69:24:7e:11:59:f6:99:fb:
         6d:71:de:bb:db:a1:52:92:7c:d5:5f:f0:21:a3:f5:cf:30:c8:
         01:1e:ac:04:39:ca:c9:69:70:90:1b:7f:5e:3e:81:67:bf:9f:
         fd:93:ef:16:63:18:61:69:1d:14:05:1e:c5:fd:de:06:04:22:
         ba:36:e1:9c:cb:ff:2b:82:c7:2c:29:b8:d2:a7:ee:51:fd:ac:
         eb:87:4d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:43:08 2025 by rpki-client