Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/323830343a336439303a3a2f33322d3438203d3e20323636353339.roa
File:                     323830343a336439303a3a2f33322d3438203d3e20323636353339.roa (raw, json)
Hash identifier:          x6VNtV4ozQq6MxJ5N63q7B16Gfy4nJWVWTksz+Uj+30=
Subject key identifier:   63:F4:F3:53:CE:3A:B5:D4:0D:DA:C6:9A:8D:8D:01:C8:CF:3C:8C:70
Certificate issuer:       /CN=ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D
Certificate serial:       467C0927DD39B66B7B3605F01658C10EF7818FA5
Authority key identifier: AC:EC:AA:D2:9A:AF:75:12:6D:8D:2F:59:4F:C4:3A:B0:E7:B3:A1:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/323830343a336439303a3a2f33322d3438203d3e20323636353339.roa
Signing time:             Thu 06 Mar 2025 04:06:01 +0000
ROA not before:           Thu 06 Mar 2025 04:01:01 +0000
ROA not after:            Thu 05 Mar 2026 04:06:01 +0000
asID:                     266539
IP address blocks:        2804:3d90::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:7c:09:27:dd:39:b6:6b:7b:36:05:f0:16:58:c1:0e:f7:81:8f:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D
        Validity
            Not Before: Mar  6 04:01:01 2025 GMT
            Not After : Mar  5 04:06:01 2026 GMT
        Subject: CN=63F4F353CE3AB5D40DDAC69A8D8D01C8CF3C8C70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:84:d8:67:e4:06:ca:02:65:6a:ba:ba:d0:44:
                    38:e3:3f:e5:1f:41:b7:c3:92:67:89:b8:60:6b:99:
                    ab:e2:31:c0:3e:35:53:8d:35:7a:6a:ff:4e:d2:76:
                    82:f6:03:51:66:1f:dc:23:34:17:85:8c:37:8a:85:
                    9f:52:46:15:4c:48:c5:19:da:18:c1:e9:73:cb:6c:
                    b2:4a:e8:0c:15:41:0d:11:05:80:33:36:09:60:99:
                    3d:a1:8b:6f:9f:3d:29:84:3f:2a:b9:cc:c3:62:31:
                    a3:48:86:4e:8e:98:5a:bc:81:ee:4c:01:dc:80:f4:
                    0c:b3:f1:57:66:40:bc:70:f4:61:1f:a0:ae:1f:c8:
                    ed:b6:66:0f:2c:b3:fc:6b:56:d0:c5:3f:df:71:ce:
                    6c:5f:26:fe:77:ac:8a:ec:51:f3:c0:db:5c:64:61:
                    20:27:2e:c9:21:81:6e:96:d6:60:b7:e7:52:17:2d:
                    80:31:5c:f4:60:86:db:f5:62:8b:49:8f:60:09:74:
                    55:e0:2e:d2:c2:6b:d0:98:cb:c0:ef:fa:08:23:73:
                    74:22:10:30:98:f9:82:89:ea:95:35:b7:80:60:66:
                    ef:d5:4e:62:f8:41:82:ff:92:a9:d1:76:6b:fa:3e:
                    42:21:d5:9b:3e:29:ad:95:3b:b2:9e:0b:8f:11:71:
                    de:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F4:F3:53:CE:3A:B5:D4:0D:DA:C6:9A:8D:8D:01:C8:CF:3C:8C:70
            X509v3 Authority Key Identifier:
                keyid:AC:EC:AA:D2:9A:AF:75:12:6D:8D:2F:59:4F:C4:3A:B0:E7:B3:A1:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/323830343a336439303a3a2f33322d3438203d3e20323636353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d90::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:ea:91:62:25:54:cd:a8:ec:fd:2a:0f:a4:9a:72:14:01:5b:
         1e:f8:2f:8b:1c:1b:5e:eb:7b:26:59:e0:6f:6f:4a:53:ea:c2:
         db:31:1c:78:7d:8e:40:af:aa:3e:21:22:4c:fa:55:2f:6e:51:
         1b:98:0e:75:8a:ed:52:e0:97:d2:b5:e5:48:8b:85:58:48:53:
         77:5b:4f:99:a9:12:3b:d4:a0:a8:9b:c8:e8:04:29:c4:69:3b:
         0d:13:dd:9a:6f:0c:0f:47:4c:c8:71:80:5a:d4:d4:de:0f:c7:
         53:f8:fd:e3:da:ab:f5:e5:23:95:69:62:ec:4c:b9:08:f8:23:
         2f:4e:48:83:18:65:86:41:07:09:0c:a4:b7:02:20:8f:28:92:
         c7:7d:4c:dd:79:df:83:39:6a:9a:2d:3f:ba:2e:bb:14:b0:ef:
         a7:63:97:2d:b0:cb:5a:0f:61:07:64:ab:1a:fc:44:4c:43:aa:
         af:7e:9d:b5:65:8a:d6:ac:ce:a7:4e:24:ec:41:82:f2:66:bd:
         c9:6c:2f:aa:39:f7:95:9c:c0:98:dd:9e:d3:7c:ce:c3:c3:3e:
         3a:0a:ac:75:d1:20:cf:17:f4:7f:86:20:cf:d6:b6:91:d9:66:
         f2:f8:79:1c:50:f3:22:d6:a7:34:6c:c9:67:bf:4d:b5:2f:6c:
         40:31:00:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:30:04 2025 by rpki-client