Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/p6PvWskwYx2XivX7BGjwurXzybsrGDBCWJaG9hw26gJ/0/323830343a6633343a3a2f33342d3334203d3e20323633353730.roa
File:                     323830343a6633343a3a2f33342d3334203d3e20323633353730.roa (raw, json)
Hash identifier:          mjbub68y/sqfCjwW4XSmuFMuWo3wW38uDnvfITdXKlw=
Subject key identifier:   0B:86:77:2E:7D:20:15:3B:95:63:0B:0E:AC:B5:FB:B5:75:98:D5:E7
Certificate issuer:       /CN=9CCBEAFC8FE8C16A2770515F21C0664CA91ECC8E
Certificate serial:       69DCD470F4D619B807B7A2288220D5008B458577
Authority key identifier: 9C:CB:EA:FC:8F:E8:C1:6A:27:70:51:5F:21:C0:66:4C:A9:1E:CC:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCBEAFC8FE8C16A2770515F21C0664CA91ECC8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/p6PvWskwYx2XivX7BGjwurXzybsrGDBCWJaG9hw26gJ/0/323830343a6633343a3a2f33342d3334203d3e20323633353730.roa
Signing time:             Thu 06 Feb 2025 13:57:36 +0000
ROA not before:           Thu 06 Feb 2025 13:52:36 +0000
ROA not after:            Thu 05 Feb 2026 13:57:36 +0000
asID:                     263570
IP address blocks:        2804:f34::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:dc:d4:70:f4:d6:19:b8:07:b7:a2:28:82:20:d5:00:8b:45:85:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CCBEAFC8FE8C16A2770515F21C0664CA91ECC8E
        Validity
            Not Before: Feb  6 13:52:36 2025 GMT
            Not After : Feb  5 13:57:36 2026 GMT
        Subject: CN=0B86772E7D20153B95630B0EACB5FBB57598D5E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d7:00:73:79:43:9b:a1:c1:0d:92:8b:23:27:
                    1f:ab:21:d2:2d:e4:0c:68:95:fc:3f:dc:0b:16:c7:
                    a6:95:66:43:99:85:e0:f4:aa:af:61:19:bd:98:22:
                    ab:1b:f0:ad:0e:86:ec:40:64:73:2f:2d:49:79:92:
                    13:db:08:8c:fe:1f:9f:e5:0e:2b:05:0a:a2:6e:7d:
                    b7:c8:b3:9f:2d:e0:7b:6d:aa:16:83:7a:c7:25:52:
                    0d:53:2d:71:67:15:4d:97:d4:5b:45:4d:6c:d7:3a:
                    33:99:3c:23:91:96:25:6f:2f:91:08:1e:c5:f2:ff:
                    e6:3e:1a:8a:51:7b:a0:c3:ba:e3:4b:aa:b4:d3:88:
                    8d:d6:a7:90:75:0f:5e:d4:58:03:94:e0:42:51:9e:
                    bd:62:32:75:88:7d:eb:36:00:d6:81:de:b2:45:72:
                    e3:f8:88:e0:86:ba:b6:1b:b1:ec:7a:40:70:51:88:
                    79:54:09:c7:05:c4:2e:27:cd:f5:88:7e:30:8d:a5:
                    96:a2:ae:ff:eb:78:46:28:14:93:4c:96:ab:8e:d3:
                    6a:96:5f:9f:7e:c6:01:bc:3e:7d:51:bb:14:2d:07:
                    32:2e:f8:c3:0e:74:7d:59:02:91:c1:5c:ed:dd:4e:
                    c5:c8:33:45:85:c4:d9:9b:f4:37:88:03:15:cc:54:
                    9b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:86:77:2E:7D:20:15:3B:95:63:0B:0E:AC:B5:FB:B5:75:98:D5:E7
            X509v3 Authority Key Identifier:
                keyid:9C:CB:EA:FC:8F:E8:C1:6A:27:70:51:5F:21:C0:66:4C:A9:1E:CC:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/p6PvWskwYx2XivX7BGjwurXzybsrGDBCWJaG9hw26gJ/0/9CCBEAFC8FE8C16A2770515F21C0664CA91ECC8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCBEAFC8FE8C16A2770515F21C0664CA91ECC8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/p6PvWskwYx2XivX7BGjwurXzybsrGDBCWJaG9hw26gJ/0/323830343a6633343a3a2f33342d3334203d3e20323633353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f34::/34

    Signature Algorithm: sha256WithRSAEncryption
         23:fc:ab:84:06:16:af:30:d9:01:3a:7a:91:f8:f4:50:1e:9b:
         e9:19:94:ce:0a:bc:73:56:a9:c0:41:ac:79:03:a2:b3:13:10:
         0e:14:1e:80:7d:81:4d:eb:ba:d3:b3:cb:56:6e:d7:08:e8:af:
         55:34:3a:86:40:3d:ee:6b:ed:0f:d8:87:be:0e:5c:c9:5f:15:
         f9:81:c4:3b:ee:a6:82:96:db:d5:13:bb:14:30:44:d5:98:99:
         2e:b2:43:40:82:d0:c9:7d:2f:93:24:40:b1:64:c5:3c:0a:d5:
         74:53:9c:39:e8:e0:3f:f5:49:e1:b7:0a:b6:93:9e:71:a4:40:
         79:29:0f:19:c3:90:2b:4a:07:81:7a:df:2b:0c:f0:55:46:4b:
         2a:6d:28:3a:c0:2f:42:1b:7c:1d:1b:15:f5:40:44:b7:eb:5a:
         93:33:ad:36:02:f7:21:2e:64:f0:5a:47:6d:6a:b4:f5:b4:8d:
         65:31:9e:12:db:9d:94:f2:de:97:13:d4:58:b3:e8:3e:76:ca:
         2e:c7:62:5b:19:56:06:2c:61:21:12:92:ab:da:6c:2c:36:a8:
         ac:55:8b:f2:7e:02:8a:c2:7a:c4:8a:e9:c6:24:40:b0:85:c5:
         7c:81:37:a6:ca:33:47:33:0e:86:ab:f5:1b:59:34:cc:0b:6f:
         23:ee:7f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 13:52:21 2025 by rpki-client