Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/p6PvWskwYx2XivX7BGjwurXzybsrGDBCWJaG9hw26gJ/0/323830343a6633343a383030303a3a2f33342d3334203d3e20323633353730.roa
File:                     323830343a6633343a383030303a3a2f33342d3334203d3e20323633353730.roa (raw, json)
Hash identifier:          L4UIFTuIOj7n6NIErwvGwDHECPeLx1xkqN04/CZMo1E=
Subject key identifier:   C4:FD:3B:25:35:65:A0:AC:30:EE:6A:D5:9C:5F:DB:13:72:25:CD:32
Certificate issuer:       /CN=9CCBEAFC8FE8C16A2770515F21C0664CA91ECC8E
Certificate serial:       427E0693A3391779207BF972580D52D7E83760FF
Authority key identifier: 9C:CB:EA:FC:8F:E8:C1:6A:27:70:51:5F:21:C0:66:4C:A9:1E:CC:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCBEAFC8FE8C16A2770515F21C0664CA91ECC8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/p6PvWskwYx2XivX7BGjwurXzybsrGDBCWJaG9hw26gJ/0/323830343a6633343a383030303a3a2f33342d3334203d3e20323633353730.roa
Signing time:             Thu 06 Feb 2025 13:57:38 +0000
ROA not before:           Thu 06 Feb 2025 13:52:38 +0000
ROA not after:            Thu 05 Feb 2026 13:57:38 +0000
asID:                     263570
IP address blocks:        2804:f34:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:7e:06:93:a3:39:17:79:20:7b:f9:72:58:0d:52:d7:e8:37:60:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CCBEAFC8FE8C16A2770515F21C0664CA91ECC8E
        Validity
            Not Before: Feb  6 13:52:38 2025 GMT
            Not After : Feb  5 13:57:38 2026 GMT
        Subject: CN=C4FD3B253565A0AC30EE6AD59C5FDB137225CD32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a4:17:5e:36:38:f8:e3:e3:12:03:2a:24:09:
                    93:95:df:a5:8d:d4:db:38:c4:a6:3b:fe:5c:a4:6b:
                    a1:05:ef:11:bd:a5:eb:e2:94:56:1d:56:4e:56:4f:
                    f5:70:f8:34:a2:89:46:47:ed:cc:29:ab:a0:0f:4f:
                    c8:a3:d6:ce:50:76:59:e7:75:63:42:45:67:77:14:
                    6f:72:76:28:d9:40:d2:c2:13:c7:60:d4:d7:05:e6:
                    01:e2:21:7e:08:10:1e:a8:13:38:04:b6:71:fd:31:
                    44:4f:6e:60:93:6c:3c:b4:88:69:de:6b:9f:10:73:
                    ec:a3:51:9d:c1:b5:4c:77:6b:22:ec:1d:f4:de:c5:
                    06:cc:cd:2e:9a:d7:b4:3e:c7:10:65:9a:b6:3b:a2:
                    c4:59:00:ac:f1:be:3d:b2:80:12:75:6e:d9:07:50:
                    34:15:73:7a:bb:40:b6:44:a1:13:d1:2c:60:79:65:
                    8c:89:75:28:a1:fd:53:33:b6:46:27:63:8d:ec:e8:
                    6e:c9:20:83:78:43:74:74:9a:81:33:bd:9f:ae:57:
                    01:ef:d8:02:54:bb:b6:79:c3:cb:d1:8b:e1:c2:2b:
                    d6:da:f7:71:82:6d:b2:32:aa:2a:29:af:a5:66:d5:
                    b2:c7:95:f4:36:07:66:21:56:9d:05:84:05:a5:5a:
                    cd:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:FD:3B:25:35:65:A0:AC:30:EE:6A:D5:9C:5F:DB:13:72:25:CD:32
            X509v3 Authority Key Identifier:
                keyid:9C:CB:EA:FC:8F:E8:C1:6A:27:70:51:5F:21:C0:66:4C:A9:1E:CC:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/p6PvWskwYx2XivX7BGjwurXzybsrGDBCWJaG9hw26gJ/0/9CCBEAFC8FE8C16A2770515F21C0664CA91ECC8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCBEAFC8FE8C16A2770515F21C0664CA91ECC8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/p6PvWskwYx2XivX7BGjwurXzybsrGDBCWJaG9hw26gJ/0/323830343a6633343a383030303a3a2f33342d3334203d3e20323633353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f34:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         2d:be:bf:69:d6:e4:08:9c:14:ae:02:d5:6a:68:47:c5:01:fc:
         bd:e7:8c:72:4e:45:ff:d9:e9:cb:6d:af:05:80:8f:f0:59:21:
         f1:4d:ce:a2:13:81:55:e1:c8:53:d0:0f:36:6e:b0:eb:11:3c:
         6a:bc:90:99:1e:ee:58:cf:ba:f4:31:1f:98:66:fc:0c:97:44:
         24:70:2a:85:36:34:be:a3:a1:3d:7c:27:32:bb:ba:79:70:bd:
         07:9d:f7:1e:e3:4b:e2:d6:f0:c7:11:01:af:e4:66:f4:bc:dd:
         5c:58:8b:c0:8b:b3:1b:b2:a9:39:1c:43:64:4e:8d:55:02:85:
         9e:db:64:c6:87:ee:87:a3:31:02:32:e2:85:3d:77:ba:f3:df:
         c0:49:ed:e0:69:14:c1:20:2a:49:e2:78:7f:07:7b:05:aa:3e:
         92:ce:87:e0:49:67:40:02:78:c5:3b:82:35:c9:31:28:3d:c4:
         b2:e8:91:b6:27:d6:3a:a6:33:d5:b5:ed:97:89:33:19:a1:5b:
         44:35:b0:aa:df:4f:21:d0:6b:67:88:2f:75:f5:54:f3:ce:f7:
         f9:48:db:1a:9a:ea:3d:8e:e1:0a:f1:41:3f:c8:dd:1d:82:98:
         1b:96:bb:09:49:2b:0f:ce:e3:e4:da:65:13:27:e6:b1:de:4a:
         22:ac:b5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 13:54:05 2025 by rpki-client