Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2G6dkGa1HpcPXBd1DK99HbPMSRpk1L3AKxM9k7M5ZifG/0/323830343a3664343a3a2f33322d313238203d3e203533303435.roa
File:                     323830343a3664343a3a2f33322d313238203d3e203533303435.roa (raw, json)
Hash identifier:          VkqQ3GCGVFQcRfUT4Eyk1+SY8yjoBnsfUMc3hXRSxU0=
Subject key identifier:   DA:1E:C5:0B:89:BA:CF:E1:70:71:DF:61:3A:9C:FD:67:EE:2C:38:1A
Certificate issuer:       /CN=67F9C15FCB2C8339DC837EA9BA2B56A625DD2FDC
Certificate serial:       3F15959BFC8BD15FA17E0C88EBA6324C3E129C01
Authority key identifier: 67:F9:C1:5F:CB:2C:83:39:DC:83:7E:A9:BA:2B:56:A6:25:DD:2F:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67F9C15FCB2C8339DC837EA9BA2B56A625DD2FDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2G6dkGa1HpcPXBd1DK99HbPMSRpk1L3AKxM9k7M5ZifG/0/323830343a3664343a3a2f33322d313238203d3e203533303435.roa
Signing time:             Tue 25 Jun 2024 14:33:50 +0000
ROA not before:           Tue 25 Jun 2024 14:28:50 +0000
ROA not after:            Tue 24 Jun 2025 14:33:50 +0000
asID:                     53045
IP address blocks:        2804:6d4::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:15:95:9b:fc:8b:d1:5f:a1:7e:0c:88:eb:a6:32:4c:3e:12:9c:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67F9C15FCB2C8339DC837EA9BA2B56A625DD2FDC
        Validity
            Not Before: Jun 25 14:28:50 2024 GMT
            Not After : Jun 24 14:33:50 2025 GMT
        Subject: CN=DA1EC50B89BACFE17071DF613A9CFD67EE2C381A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:87:27:cb:c7:a6:47:5a:05:79:f4:af:dc:eb:
                    34:33:c5:37:7e:89:d0:a5:72:42:bd:3a:98:19:4b:
                    bd:97:03:88:bc:47:9e:88:13:14:30:db:ae:6a:99:
                    7f:51:6e:30:d9:5a:dd:55:c6:84:3f:63:79:bb:9c:
                    46:50:60:09:6f:5d:a4:b2:11:d3:e4:6c:62:be:bd:
                    2d:58:73:47:8f:b0:73:6e:d2:8c:21:f4:b0:a2:31:
                    45:e1:0f:a4:49:bb:02:3a:9e:9c:ea:99:b8:c9:9a:
                    df:d1:93:95:7e:ca:87:42:8c:09:60:96:15:98:f2:
                    c7:50:0d:e5:9e:75:88:b1:ad:6e:c8:c1:f6:3d:b3:
                    15:02:ed:6f:94:d9:1a:38:22:53:22:75:3e:56:a7:
                    aa:c0:31:1b:72:c7:13:4e:cc:b8:86:2e:a9:ee:0c:
                    a8:5b:db:9d:61:c6:42:5f:dd:5e:77:bd:c6:44:46:
                    0f:39:51:85:03:74:99:a1:bb:77:ff:84:c9:ee:34:
                    7f:7b:82:b0:ae:17:16:41:99:d4:b3:65:a3:02:76:
                    89:0b:bf:7d:65:1c:42:31:35:c1:5a:cf:da:b3:e7:
                    56:73:fb:8d:c3:d5:d3:e0:f2:be:ec:bc:c6:4f:eb:
                    79:30:a5:50:36:76:eb:63:8f:c1:67:84:68:73:b9:
                    31:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:1E:C5:0B:89:BA:CF:E1:70:71:DF:61:3A:9C:FD:67:EE:2C:38:1A
            X509v3 Authority Key Identifier:
                keyid:67:F9:C1:5F:CB:2C:83:39:DC:83:7E:A9:BA:2B:56:A6:25:DD:2F:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2G6dkGa1HpcPXBd1DK99HbPMSRpk1L3AKxM9k7M5ZifG/0/67F9C15FCB2C8339DC837EA9BA2B56A625DD2FDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67F9C15FCB2C8339DC837EA9BA2B56A625DD2FDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2G6dkGa1HpcPXBd1DK99HbPMSRpk1L3AKxM9k7M5ZifG/0/323830343a3664343a3a2f33322d313238203d3e203533303435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:f1:df:1f:5b:80:74:e1:f1:2b:ea:2f:5e:78:4b:01:c1:e0:
         82:bb:ad:2f:82:a0:39:6d:31:2e:00:05:73:1f:d1:99:99:6d:
         a1:8b:75:4e:79:a7:3c:94:61:a8:51:3d:97:0a:b8:3c:63:c6:
         c5:92:e5:c2:dc:fc:f1:3c:b8:87:18:ab:a1:76:a6:e1:e9:22:
         d9:91:c9:3b:05:dd:c3:ad:74:66:65:c4:e6:5a:ca:25:65:dd:
         91:f5:0f:19:fc:69:42:cf:f3:bc:50:d6:fb:8b:9c:3b:77:66:
         5f:7a:0e:1c:5e:3c:63:c9:2f:4e:b5:8e:0b:66:c8:e0:a6:4f:
         bd:f3:de:35:ad:39:29:23:c3:9c:78:45:d1:fb:9c:a2:4b:69:
         b6:35:56:e1:be:66:ad:b0:ca:a7:c2:d0:d0:9d:f1:48:da:54:
         2a:7a:aa:66:53:9e:3b:27:f1:fd:54:41:ba:14:13:49:43:05:
         41:8e:ca:0f:0d:e7:37:d4:fe:e9:57:02:7e:61:2a:06:40:01:
         21:1e:41:ec:51:07:e1:85:34:e7:dc:a3:3b:84:3e:4c:21:2e:
         4b:0d:91:19:dc:87:9f:3c:b8:56:84:bb:67:89:9a:ea:5d:b9:
         9f:e4:cf:86:8c:fe:df:f8:a0:18:82:b9:e0:92:ec:20:7c:96:
         0a:d0:91:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:22:10 2025 by rpki-client