Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/323830343a356131303a633030303a3a2f33342d3334203d3e20323638373436.roa
File:                     323830343a356131303a633030303a3a2f33342d3334203d3e20323638373436.roa (raw, json)
Hash identifier:          STq9G0VdQ7T0d9dy1tG1wgYwD2TNaJhBFyRnzd8tsEQ=
Subject key identifier:   3E:51:DD:1F:80:14:84:BB:C1:06:ED:2D:55:86:6A:3D:5B:10:6B:68
Certificate issuer:       /CN=C75639341EB310D9105CD98A48FC7CED1EC5D643
Certificate serial:       7D45A7B1C44BC427BC65D9E7ECC0BABE523AD3A9
Authority key identifier: C7:56:39:34:1E:B3:10:D9:10:5C:D9:8A:48:FC:7C:ED:1E:C5:D6:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C75639341EB310D9105CD98A48FC7CED1EC5D643.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/323830343a356131303a633030303a3a2f33342d3334203d3e20323638373436.roa
Signing time:             Wed 12 Feb 2025 14:39:56 +0000
ROA not before:           Wed 12 Feb 2025 14:34:56 +0000
ROA not after:            Wed 11 Feb 2026 14:39:56 +0000
asID:                     268746
IP address blocks:        2804:5a10:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:45:a7:b1:c4:4b:c4:27:bc:65:d9:e7:ec:c0:ba:be:52:3a:d3:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C75639341EB310D9105CD98A48FC7CED1EC5D643
        Validity
            Not Before: Feb 12 14:34:56 2025 GMT
            Not After : Feb 11 14:39:56 2026 GMT
        Subject: CN=3E51DD1F801484BBC106ED2D55866A3D5B106B68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:dc:af:64:fe:b5:a3:7c:32:97:e7:0d:5b:46:
                    3e:7d:df:b7:a6:13:6a:49:09:68:f4:ee:50:3c:cf:
                    79:a4:49:31:30:5d:28:d9:a4:c7:b7:3f:1b:ae:49:
                    68:74:63:10:d9:6d:67:f5:a9:0d:57:59:88:2f:2d:
                    69:d5:fe:b8:b1:2c:fe:8c:60:10:e3:54:81:86:9e:
                    3a:90:46:81:56:d5:8a:6c:45:d6:6f:99:79:27:ae:
                    0f:73:f4:63:96:b8:cc:c9:e7:b6:6f:d1:c7:68:fa:
                    63:dd:b4:53:8a:b1:5a:47:90:ec:1b:89:a2:74:29:
                    3f:65:05:f3:ae:e0:5e:55:c8:26:05:0c:23:85:a6:
                    e2:4c:de:8f:ee:c1:be:17:1f:c3:91:b8:2d:a8:9f:
                    43:45:fa:a5:23:50:7e:3c:e9:1e:c5:97:28:87:3e:
                    1c:8f:52:a2:bb:ab:87:3b:48:ed:82:31:68:96:c0:
                    da:e2:70:cb:f1:ef:ba:70:27:d6:c9:f1:51:3c:41:
                    31:5f:ba:6e:f1:b5:32:65:87:6a:91:a7:ea:7e:7f:
                    39:3f:3f:6d:7f:a3:70:23:40:f6:72:f5:49:c5:27:
                    5e:57:3e:8e:87:c8:ad:4e:07:9d:7d:65:8f:77:9a:
                    ea:78:d3:ae:0f:48:26:98:8a:3f:8c:23:b9:5f:e8:
                    d7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:51:DD:1F:80:14:84:BB:C1:06:ED:2D:55:86:6A:3D:5B:10:6B:68
            X509v3 Authority Key Identifier:
                keyid:C7:56:39:34:1E:B3:10:D9:10:5C:D9:8A:48:FC:7C:ED:1E:C5:D6:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/C75639341EB310D9105CD98A48FC7CED1EC5D643.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C75639341EB310D9105CD98A48FC7CED1EC5D643.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/323830343a356131303a633030303a3a2f33342d3334203d3e20323638373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5a10:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a6:9e:72:e6:1d:d6:4a:8d:0f:31:78:97:2c:f6:41:da:98:4a:
         a8:f4:e2:4b:31:8f:21:f4:c5:92:1d:64:35:0a:3a:4b:e2:d5:
         a6:b8:ec:8d:76:58:40:52:bb:19:46:9d:2e:47:03:f7:4e:12:
         67:f6:75:cd:49:94:63:69:d2:60:3d:34:ba:8c:0f:dd:47:5d:
         f1:c5:e7:4f:4c:b7:cd:d6:9d:87:0a:7f:2d:0f:47:3b:ee:f8:
         ce:9c:9b:a4:a8:4e:4e:a1:2e:10:26:5e:a0:08:7e:c9:cd:8e:
         45:20:80:f9:01:2c:2b:f5:e3:5d:a7:ce:6d:15:e7:52:c0:e2:
         bf:10:31:8e:83:fb:09:ab:5d:04:6e:ef:c1:95:c7:25:47:13:
         23:c3:f9:8a:b5:2a:1a:5b:6a:ee:ba:80:15:40:19:37:b2:38:
         26:19:47:c2:f4:ee:06:fc:f3:21:b4:8d:c1:eb:ed:d8:be:b0:
         76:8d:b9:f0:ee:02:5e:61:9f:29:c6:6d:cc:35:48:3d:74:83:
         49:cf:f5:2f:dd:f8:fe:35:39:c5:6b:13:27:f5:d9:04:8e:6b:
         3f:87:59:6a:04:bb:87:e4:f2:ec:d8:96:42:e8:76:a6:d7:57:
         16:fd:24:03:ca:4a:5f:b3:2f:96:6c:95:e7:29:4d:61:69:94:
         75:67:77:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:03:42 2025 by rpki-client