Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/323830343a336439303a3a2f33322d3438203d3e2033333536.roa
File:                     323830343a336439303a3a2f33322d3438203d3e2033333536.roa (raw, json)
Hash identifier:          0px9Lv1h7cxoSy8j5wudsGRlY6Kz+2CKHSBfVhfTFkw=
Subject key identifier:   7E:6D:A2:5E:8C:C0:41:6E:15:FE:85:C4:53:22:87:5C:8D:E5:18:43
Certificate issuer:       /CN=ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D
Certificate serial:       1CCE91A23BADE9367FA3BAE1205ADF6E6F3F153E
Authority key identifier: AC:EC:AA:D2:9A:AF:75:12:6D:8D:2F:59:4F:C4:3A:B0:E7:B3:A1:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/323830343a336439303a3a2f33322d3438203d3e2033333536.roa
Signing time:             Thu 06 Mar 2025 04:06:01 +0000
ROA not before:           Thu 06 Mar 2025 04:01:01 +0000
ROA not after:            Thu 05 Mar 2026 04:06:01 +0000
asID:                     3356
IP address blocks:        2804:3d90::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:ce:91:a2:3b:ad:e9:36:7f:a3:ba:e1:20:5a:df:6e:6f:3f:15:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D
        Validity
            Not Before: Mar  6 04:01:01 2025 GMT
            Not After : Mar  5 04:06:01 2026 GMT
        Subject: CN=7E6DA25E8CC0416E15FE85C45322875C8DE51843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:23:88:aa:48:34:cc:90:86:e8:44:0c:34:3f:
                    66:44:ec:f3:c9:44:47:4f:5a:69:10:a7:47:62:b2:
                    ae:29:8e:06:c4:41:a0:eb:c2:e4:42:6e:6b:56:cc:
                    0c:ac:fc:ef:fc:6c:41:be:73:27:2f:ab:55:06:10:
                    af:cb:f7:81:9e:86:26:64:a3:ac:d3:09:56:19:33:
                    fe:14:ec:87:a1:96:ab:94:85:cf:2c:f8:9e:4d:06:
                    d8:1c:eb:1d:a8:d5:9b:a5:34:fb:6a:5b:f8:47:b2:
                    51:a0:41:00:cf:22:c0:5d:80:90:dc:02:4b:59:a0:
                    3e:6a:0f:59:6a:19:00:d9:17:de:a5:83:ce:d1:33:
                    aa:38:ec:36:bc:69:2d:53:90:37:a1:c5:cb:bb:ed:
                    d3:a4:39:49:e1:6b:e9:18:59:e5:cb:35:b3:bf:b9:
                    3d:57:70:72:27:62:dd:56:f6:56:1a:4c:17:37:06:
                    b6:da:be:ee:dd:af:b9:6f:c6:24:5a:9f:8c:fb:f9:
                    71:6f:3c:b4:b3:b4:9e:09:6c:4e:1b:45:2d:ac:be:
                    b5:9b:2f:1e:c8:9b:39:7b:2c:7a:57:18:60:1c:d7:
                    dd:e3:86:c3:4c:b0:9a:00:ee:f6:7a:b1:31:ef:16:
                    0f:53:89:0d:59:7d:e5:27:b8:ee:11:b8:fc:b3:b0:
                    35:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:6D:A2:5E:8C:C0:41:6E:15:FE:85:C4:53:22:87:5C:8D:E5:18:43
            X509v3 Authority Key Identifier:
                keyid:AC:EC:AA:D2:9A:AF:75:12:6D:8D:2F:59:4F:C4:3A:B0:E7:B3:A1:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/323830343a336439303a3a2f33322d3438203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d90::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:1a:f3:c9:3f:82:7c:64:dd:66:24:33:ea:2d:08:e1:01:94:
         9b:1d:d1:7e:25:94:c3:cb:35:cd:6c:fc:d4:b7:e4:07:33:f6:
         a5:b4:1b:2e:bc:09:d6:cc:54:4a:fa:c1:db:af:ff:7e:38:28:
         7a:07:0f:ad:4f:07:58:61:6f:d1:67:96:5f:86:4e:34:f6:90:
         5a:05:c2:9f:34:00:de:bf:b0:f9:45:d7:c6:48:6f:d0:6a:0f:
         dd:36:f5:6f:46:56:c5:df:c5:38:a9:13:80:c4:d3:56:f0:ce:
         6c:a6:94:5c:38:ba:db:48:1c:97:78:b3:2c:b6:31:8a:ea:e8:
         62:b5:e7:e9:f9:df:93:53:2e:4e:46:80:71:ea:cf:11:19:2f:
         92:96:24:ef:09:1d:bd:c7:09:fc:0d:1d:2a:e1:1f:fa:84:fa:
         24:66:f7:1d:76:72:de:fb:d8:ee:58:87:73:c4:86:5b:3e:9c:
         f6:2e:18:fc:e3:69:39:a5:b3:ea:6e:88:20:50:ed:87:c0:04:
         74:b9:9b:20:73:dc:1f:0e:4b:23:75:86:99:45:f8:62:9f:f5:
         23:a3:bf:08:7a:43:30:4a:e5:75:47:ab:26:c0:14:d5:67:29:
         71:01:51:a9:d3:e9:f3:b8:37:30:1f:4f:4c:b4:e7:ae:6e:e2:
         dd:55:08:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:22:57 2025 by rpki-client