Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/323830343a363832343a3a2f33322d313238203d3e20323639363731.roa
File:                     323830343a363832343a3a2f33322d313238203d3e20323639363731.roa (raw, json)
Hash identifier:          VDe8w8cTHGo7HoyW6esUM7Ox15HqicIThAIj/LfiZuY=
Subject key identifier:   58:A2:B6:6C:B0:6A:42:2F:82:46:1B:8A:5A:75:D3:48:8C:FA:B8:C8
Certificate issuer:       /CN=FDA22E3A1C947EB3473FFEFF6EB33243F0E4A870
Certificate serial:       78257D286ABA8C3E9C206E1C9B79F31FD36FCF87
Authority key identifier: FD:A2:2E:3A:1C:94:7E:B3:47:3F:FE:FF:6E:B3:32:43:F0:E4:A8:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDA22E3A1C947EB3473FFEFF6EB33243F0E4A870.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/323830343a363832343a3a2f33322d313238203d3e20323639363731.roa
Signing time:             Tue 14 Jan 2025 11:44:15 +0000
ROA not before:           Tue 14 Jan 2025 11:39:15 +0000
ROA not after:            Tue 13 Jan 2026 11:44:15 +0000
asID:                     269671
IP address blocks:        2804:6824::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:25:7d:28:6a:ba:8c:3e:9c:20:6e:1c:9b:79:f3:1f:d3:6f:cf:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDA22E3A1C947EB3473FFEFF6EB33243F0E4A870
        Validity
            Not Before: Jan 14 11:39:15 2025 GMT
            Not After : Jan 13 11:44:15 2026 GMT
        Subject: CN=58A2B66CB06A422F82461B8A5A75D3488CFAB8C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:42:2f:5d:26:fb:a6:d4:7e:74:25:f2:31:84:
                    eb:fa:e7:c7:8c:06:cf:30:63:b0:34:45:07:83:a0:
                    a3:f1:a4:bb:51:67:c4:5e:9f:ea:d5:3b:bb:3a:af:
                    0f:de:51:41:1f:10:aa:e5:cc:8d:35:e9:c7:4c:0c:
                    fc:9b:04:7e:b9:2d:71:af:26:df:23:00:24:4d:fb:
                    af:94:d7:b8:d5:54:20:58:28:66:80:f2:f4:3a:47:
                    df:71:7a:91:15:16:0a:0b:b8:cc:ae:c0:93:9f:e8:
                    bc:c1:0d:1d:11:31:d0:0a:10:61:0d:61:f4:43:a8:
                    bc:4d:75:10:97:34:6a:ac:29:6e:be:1b:f6:20:0f:
                    b3:67:f1:35:86:3b:99:49:88:c0:92:dd:5b:99:53:
                    53:b5:7e:01:1c:53:ce:37:4c:51:2b:6d:ea:87:70:
                    bc:78:47:c0:7a:dc:0d:5d:4f:7e:18:b2:16:b4:cb:
                    f3:7b:58:b2:c1:a7:1d:90:ad:23:72:16:6f:5d:96:
                    3d:04:f9:ab:1a:6d:94:dd:8b:3f:d6:69:37:cf:b5:
                    5c:d0:b3:26:dc:22:5b:54:1e:ed:bd:01:e6:b3:21:
                    f4:4d:38:3c:66:e2:45:1d:5c:26:6c:85:9e:67:5c:
                    e2:56:9d:84:c9:d0:e8:5c:94:99:df:e8:45:a9:88:
                    8f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A2:B6:6C:B0:6A:42:2F:82:46:1B:8A:5A:75:D3:48:8C:FA:B8:C8
            X509v3 Authority Key Identifier:
                keyid:FD:A2:2E:3A:1C:94:7E:B3:47:3F:FE:FF:6E:B3:32:43:F0:E4:A8:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/FDA22E3A1C947EB3473FFEFF6EB33243F0E4A870.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDA22E3A1C947EB3473FFEFF6EB33243F0E4A870.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/323830343a363832343a3a2f33322d313238203d3e20323639363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6824::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:29:1e:ef:4d:63:99:d2:76:a1:09:dd:09:97:c4:c7:23:62:
         5e:71:86:24:5d:92:65:da:e4:a2:4d:72:9a:7f:bf:33:a4:27:
         6d:5b:c6:81:71:53:03:9a:be:62:b2:a4:82:91:2d:7f:f5:22:
         d7:2d:14:b8:dc:8f:35:af:c8:d7:a3:46:81:f8:85:56:ab:ae:
         07:c3:54:33:36:42:0f:8b:fe:92:37:d8:1d:c0:5e:da:c5:52:
         e3:27:5f:c9:af:45:98:be:99:2f:47:96:43:00:54:9b:2f:ad:
         8f:d0:b9:55:e6:80:23:9f:6c:83:19:e0:c6:d1:a3:8b:1e:a9:
         4d:74:66:3c:95:99:3b:c5:76:56:2e:63:62:72:c3:01:3d:e8:
         8d:2a:a3:e9:ed:00:a1:31:65:52:58:82:07:70:1d:10:af:2d:
         da:69:94:ca:13:fa:07:0a:79:30:5e:23:b3:2d:cf:e0:91:1c:
         aa:08:1c:6c:35:37:aa:f3:ae:c6:9f:94:aa:6b:ba:94:dd:94:
         e1:48:76:3b:96:ad:86:b7:da:c0:8b:73:cf:ab:b2:22:8e:5f:
         b4:96:00:47:fa:38:29:0c:85:f1:c7:b0:b2:d2:2e:63:ef:a7:
         37:94:8b:95:2c:9d:f8:ee:2d:4a:dc:d2:b7:d4:df:ea:17:4e:
         2d:7e:37:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:42:01 2025 by rpki-client