Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/323830343a336262303a3a2f33342d3334203d3e20323636313635.roa
File:                     323830343a336262303a3a2f33342d3334203d3e20323636313635.roa (raw, json)
Hash identifier:          65dGP2A4wBfsPiXV8wNIuuVsu/SorkfYE3IIJS1hNa8=
Subject key identifier:   0C:F2:2F:A1:DA:A0:5B:D8:F0:98:5E:69:15:6F:4A:ED:88:7C:38:14
Certificate issuer:       /CN=DFB165A55B30AAC4E32CEC8FE9B4386EF0EA8D3C
Certificate serial:       32D3B4035934EEEBEDE6BF955838174E18319951
Authority key identifier: DF:B1:65:A5:5B:30:AA:C4:E3:2C:EC:8F:E9:B4:38:6E:F0:EA:8D:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFB165A55B30AAC4E32CEC8FE9B4386EF0EA8D3C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/323830343a336262303a3a2f33342d3334203d3e20323636313635.roa
Signing time:             Mon 03 Mar 2025 23:56:14 +0000
ROA not before:           Mon 03 Mar 2025 23:51:14 +0000
ROA not after:            Mon 02 Mar 2026 23:56:14 +0000
asID:                     266165
IP address blocks:        2804:3bb0::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:d3:b4:03:59:34:ee:eb:ed:e6:bf:95:58:38:17:4e:18:31:99:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFB165A55B30AAC4E32CEC8FE9B4386EF0EA8D3C
        Validity
            Not Before: Mar  3 23:51:14 2025 GMT
            Not After : Mar  2 23:56:14 2026 GMT
        Subject: CN=0CF22FA1DAA05BD8F0985E69156F4AED887C3814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:70:5c:a4:9d:ee:d4:4c:01:52:fb:c5:a0:34:
                    cc:70:f7:7e:67:5b:65:ef:df:94:f6:09:ad:58:b9:
                    a5:cd:fc:cb:89:ef:ef:ac:e7:3d:e9:cb:33:22:fc:
                    fd:9b:82:39:87:7f:b7:76:56:74:ce:e8:62:47:bb:
                    f0:ca:5f:da:51:92:bc:00:60:14:a7:f3:41:46:73:
                    0b:e3:04:28:9e:9f:11:24:90:6b:39:6e:15:47:01:
                    6e:db:ba:97:3c:bc:f9:cc:8e:93:8d:50:0c:eb:ec:
                    b9:1b:e1:34:44:8f:33:5e:6d:38:2b:a9:b4:dd:21:
                    de:f2:5b:35:b2:0f:5c:6a:cd:e4:0d:ae:20:bf:03:
                    78:a7:11:da:55:bf:a4:eb:e1:ed:86:74:d3:27:75:
                    44:d0:e1:41:e2:c6:35:ae:49:8a:3d:e1:4a:2d:13:
                    4d:2a:db:0b:6b:68:c2:ec:86:ab:56:bc:d6:7c:44:
                    e4:7b:f6:c4:f8:bd:e8:2b:1a:07:6d:60:3d:7b:6a:
                    b5:ef:71:36:6a:78:ff:c8:24:12:8f:73:e8:a2:1c:
                    82:59:f7:c0:11:dd:b8:07:6f:59:43:a5:5b:8f:b3:
                    31:13:ae:35:ab:00:69:bc:1a:9d:15:7e:57:06:52:
                    96:ec:0e:05:28:01:91:56:57:b7:5e:ce:f8:64:9b:
                    f8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F2:2F:A1:DA:A0:5B:D8:F0:98:5E:69:15:6F:4A:ED:88:7C:38:14
            X509v3 Authority Key Identifier:
                keyid:DF:B1:65:A5:5B:30:AA:C4:E3:2C:EC:8F:E9:B4:38:6E:F0:EA:8D:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/DFB165A55B30AAC4E32CEC8FE9B4386EF0EA8D3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFB165A55B30AAC4E32CEC8FE9B4386EF0EA8D3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/323830343a336262303a3a2f33342d3334203d3e20323636313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3bb0::/34

    Signature Algorithm: sha256WithRSAEncryption
         38:89:e6:71:27:db:15:ec:7e:da:2c:eb:60:5f:ff:51:f8:40:
         0d:8f:46:bc:d9:39:3f:5e:55:a3:5b:91:37:d7:e4:48:63:b1:
         ac:a6:ca:33:37:81:16:53:7f:32:ad:47:5b:c9:d3:e9:e0:8d:
         ed:a0:70:c5:5c:67:97:25:21:5e:5b:d8:19:79:fe:6f:6c:49:
         f6:25:0c:e4:6e:8f:1a:9c:76:4f:b3:11:c0:07:e1:54:33:61:
         aa:bb:f4:57:26:75:18:30:d2:f9:b1:b2:6f:6a:b1:16:0f:e5:
         5b:d4:2c:2a:e2:ce:3a:15:3c:fb:27:c3:ab:2b:e5:31:00:a0:
         8d:7d:7c:14:af:b4:fe:05:10:c6:46:60:62:b5:9a:b6:f3:43:
         06:69:18:8f:2b:54:76:d9:2e:42:e3:a7:3a:60:3b:33:dc:b3:
         f7:73:41:2e:6c:eb:da:01:21:96:ad:78:da:49:b6:94:ca:cd:
         5e:0c:2d:18:bd:6b:9c:03:7a:00:d8:d9:66:e6:00:53:ca:1f:
         87:c3:59:ff:88:a4:53:9b:9e:ed:67:15:bd:e3:16:fa:25:13:
         a1:93:f9:62:af:80:ab:9d:f3:17:a2:8b:c5:1c:e6:6d:d2:82:
         74:da:aa:6b:3a:dc:a5:70:e0:d4:25:1c:5b:04:82:77:6a:08:
         63:09:d2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:18:43 2025 by rpki-client