Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/323830343a3666383a3a2f33322d3332203d3e203532383438.roa
File:                     323830343a3666383a3a2f33322d3332203d3e203532383438.roa (raw, json)
Hash identifier:          1RJ8YTPiLEMDICpV2c9ETs/jX6Xbj/ZmTb7eqMPiXBw=
Subject key identifier:   10:83:93:60:34:99:B3:F0:87:05:30:1C:B2:0D:45:2B:50:F7:E1:A6
Certificate issuer:       /CN=F805B6A0C0363F0117691C0481A12D30CEF456BF
Certificate serial:       0975B25A0C905E5E2B929D96D619485D1CD6A2C9
Authority key identifier: F8:05:B6:A0:C0:36:3F:01:17:69:1C:04:81:A1:2D:30:CE:F4:56:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F805B6A0C0363F0117691C0481A12D30CEF456BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/323830343a3666383a3a2f33322d3332203d3e203532383438.roa
Signing time:             Wed 18 Dec 2024 16:09:51 +0000
ROA not before:           Wed 18 Dec 2024 16:04:51 +0000
ROA not after:            Wed 17 Dec 2025 16:09:51 +0000
asID:                     52848
IP address blocks:        2804:6f8::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:75:b2:5a:0c:90:5e:5e:2b:92:9d:96:d6:19:48:5d:1c:d6:a2:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F805B6A0C0363F0117691C0481A12D30CEF456BF
        Validity
            Not Before: Dec 18 16:04:51 2024 GMT
            Not After : Dec 17 16:09:51 2025 GMT
        Subject: CN=108393603499B3F08705301CB20D452B50F7E1A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:da:12:74:86:75:b1:2b:b0:1b:a5:36:98:76:
                    68:ac:ed:a5:0c:3d:84:11:ba:5a:5b:0b:18:af:32:
                    56:96:36:f4:c6:75:47:82:8c:ef:09:bf:36:7a:12:
                    f0:86:3f:38:6a:81:9c:2f:a5:ba:19:a9:93:f5:3c:
                    e7:08:9f:c1:71:3e:1d:45:9b:63:14:c8:60:45:ed:
                    ac:33:ad:e3:45:28:fe:40:95:9e:5f:90:d2:fb:7b:
                    b0:9d:95:6d:84:c2:4f:fd:0d:1f:d4:e7:c9:3c:6a:
                    28:51:e0:11:16:5f:25:18:25:65:84:71:f1:b4:68:
                    24:58:5b:03:f7:2b:e7:ee:e0:3c:f0:3e:41:11:2f:
                    de:84:61:bd:07:72:29:45:aa:89:49:a0:70:61:79:
                    8b:4d:ad:64:85:4e:30:c6:01:0d:0f:f2:16:01:d7:
                    ae:1d:b6:ce:69:eb:36:93:21:62:82:1e:b6:42:63:
                    38:8a:ec:02:78:33:b2:ed:ab:90:66:ea:bc:4d:4c:
                    99:2f:bf:90:96:89:1d:f7:1a:01:84:42:65:fd:93:
                    69:fd:f2:6a:dc:9f:fa:bf:8d:38:67:c3:69:a4:ec:
                    83:41:55:56:2e:1a:03:0c:1c:a3:64:ea:d2:7e:3f:
                    0f:7c:ba:45:b6:e0:d5:03:68:07:1a:85:8d:33:4f:
                    12:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:83:93:60:34:99:B3:F0:87:05:30:1C:B2:0D:45:2B:50:F7:E1:A6
            X509v3 Authority Key Identifier:
                keyid:F8:05:B6:A0:C0:36:3F:01:17:69:1C:04:81:A1:2D:30:CE:F4:56:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/F805B6A0C0363F0117691C0481A12D30CEF456BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F805B6A0C0363F0117691C0481A12D30CEF456BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/323830343a3666383a3a2f33322d3332203d3e203532383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         b9:c5:56:21:e6:37:d1:a2:3a:db:2d:3e:3f:6e:80:e6:ca:01:
         20:55:42:7f:04:d7:92:41:f6:f1:d9:8e:7c:c4:67:53:90:23:
         4b:83:77:6c:06:69:12:3e:7c:48:9f:91:9d:75:60:59:2d:86:
         db:50:73:2c:a2:9d:85:f0:0d:70:26:6f:32:ac:71:78:9c:b4:
         e0:71:41:0f:bb:49:68:31:21:17:c3:1a:ba:17:08:63:30:bb:
         81:b6:e2:fc:ec:46:3b:ae:08:cf:a6:1e:aa:1f:61:55:d3:8a:
         e5:31:fa:71:1f:6c:13:d9:13:ad:eb:e9:48:ea:0c:4b:03:d8:
         11:bf:5e:85:24:bd:e9:71:c3:5a:4d:df:98:0f:b6:a7:12:20:
         91:29:b7:50:fc:aa:1b:41:43:ef:dc:2c:b5:f4:00:fa:a1:06:
         aa:43:50:f5:1d:2f:f4:18:f8:d5:43:09:79:2d:17:5b:62:0e:
         58:fb:d7:aa:60:90:de:5e:7b:ff:6f:86:87:e3:1e:6c:74:21:
         5c:d6:62:f3:d3:7d:fd:14:25:0a:b3:6c:25:61:80:ac:86:4f:
         f8:65:d5:0c:31:93:fb:b4:b1:37:f0:8b:11:8a:d5:6f:36:9f:
         0e:c5:09:95:0a:81:54:c1:88:5d:7c:81:97:c5:cd:69:ea:2c:
         39:3d:c6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:57:51 2025 by rpki-client