Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/323830343a313030343a323030303a3a2f33352d3335203d3e20323633363134.roa
File:                     323830343a313030343a323030303a3a2f33352d3335203d3e20323633363134.roa (raw, json)
Hash identifier:          Slf4TsCQv/Ne/WGrTq+YlVvD7b2imT2dXF+RWe4DlO4=
Subject key identifier:   CE:59:14:85:8B:27:BD:0D:90:2F:7A:5A:9B:9F:1B:AD:52:FA:90:FD
Certificate issuer:       /CN=0C4C2F81C99B5D1FE7D42B7598E302474D31C83B
Certificate serial:       6AF14A86BBCFC5B7BE9047AC0562FE7D85BAE593
Authority key identifier: 0C:4C:2F:81:C9:9B:5D:1F:E7:D4:2B:75:98:E3:02:47:4D:31:C8:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C4C2F81C99B5D1FE7D42B7598E302474D31C83B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/323830343a313030343a323030303a3a2f33352d3335203d3e20323633363134.roa
Signing time:             Fri 09 Feb 2024 17:18:59 +0000
ROA not before:           Fri 09 Feb 2024 17:13:59 +0000
ROA not after:            Fri 07 Feb 2025 17:18:59 +0000
asID:                     263614
IP address blocks:        2804:1004:2000::/35 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:f1:4a:86:bb:cf:c5:b7:be:90:47:ac:05:62:fe:7d:85:ba:e5:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C4C2F81C99B5D1FE7D42B7598E302474D31C83B
        Validity
            Not Before: Feb  9 17:13:59 2024 GMT
            Not After : Feb  7 17:18:59 2025 GMT
        Subject: CN=CE5914858B27BD0D902F7A5A9B9F1BAD52FA90FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f5:cb:57:06:fe:7d:be:a1:93:ed:bf:33:20:
                    c9:fa:c9:98:15:d6:37:42:7e:20:f6:55:db:39:c1:
                    a5:4d:ce:6d:58:eb:c2:a8:a6:9f:39:cf:2d:40:0e:
                    33:dd:73:3b:7a:d3:75:ac:55:8a:39:7e:3f:a4:ba:
                    82:e5:fb:17:46:64:17:24:5c:c4:b9:9f:35:4d:d9:
                    c2:06:31:03:ec:6e:9c:d0:c7:ea:14:0d:c9:ab:d0:
                    79:fe:17:80:42:1a:be:4e:d5:5e:cd:6b:94:69:f6:
                    a9:e4:43:c2:dd:fc:0a:0a:a3:ba:88:88:d8:7b:76:
                    76:22:1c:1b:b0:bd:f0:c2:2c:15:6f:f9:06:27:a4:
                    5e:0d:2f:8b:d7:d0:e6:81:b6:f4:4a:4b:c7:11:f3:
                    ff:9f:e2:a2:a8:79:83:65:eb:2d:ba:e1:14:21:b3:
                    98:3f:22:06:db:62:87:e9:1b:20:e7:e1:30:54:77:
                    65:75:09:1b:b9:52:5d:37:2e:4d:13:8c:42:7a:90:
                    2d:e7:72:df:13:2d:a9:b6:58:83:39:eb:5a:71:a7:
                    c1:e1:ba:eb:63:08:95:96:30:ce:fb:e9:5a:45:f3:
                    3c:37:bc:42:a6:e0:d1:23:0a:a6:d0:44:f9:b7:73:
                    b8:77:7a:6d:1a:fd:f0:a5:3e:6b:15:65:6c:ae:fd:
                    ad:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:59:14:85:8B:27:BD:0D:90:2F:7A:5A:9B:9F:1B:AD:52:FA:90:FD
            X509v3 Authority Key Identifier:
                keyid:0C:4C:2F:81:C9:9B:5D:1F:E7:D4:2B:75:98:E3:02:47:4D:31:C8:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/0C4C2F81C99B5D1FE7D42B7598E302474D31C83B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C4C2F81C99B5D1FE7D42B7598E302474D31C83B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/323830343a313030343a323030303a3a2f33352d3335203d3e20323633363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1004:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         0a:3f:a2:be:10:2e:7e:93:22:c6:c1:a3:84:61:72:a2:ce:d0:
         fa:8a:01:ec:99:e6:3c:93:19:b5:a9:ce:51:40:f4:97:16:02:
         d7:d3:3d:ed:75:43:ce:b2:0f:03:dd:15:76:96:f7:e7:19:42:
         40:d4:a5:0b:bd:ba:66:74:ee:d2:87:6d:6d:82:14:dd:e6:c1:
         d6:0b:98:7b:a2:5d:e5:8d:04:04:3d:72:9c:81:34:2a:ba:f1:
         2c:a4:c9:f3:42:2d:45:2f:27:c6:1a:5e:51:c9:f7:90:03:53:
         53:2f:d3:b9:15:30:5a:20:38:b2:f3:d0:f8:7b:f2:41:df:22:
         47:5e:63:6d:8a:d0:eb:ff:a9:c0:fc:be:39:9c:32:b4:d4:75:
         2a:1b:ae:03:89:19:2e:25:26:4e:6a:36:7c:cf:33:cb:83:30:
         3a:41:82:08:7c:3b:9b:3b:af:dd:52:23:ff:7a:07:2e:8a:dd:
         ae:43:4c:9c:0e:70:9e:0d:c0:48:59:47:c3:2a:cc:bc:4d:a3:
         f5:bd:7c:ea:36:ee:eb:3c:b5:2f:39:29:93:b2:dc:55:95:13:
         a0:f5:1b:33:f4:07:98:67:1b:5f:5e:81:08:a3:7a:48:27:5b:
         ca:de:36:49:aa:20:a7:9a:21:c8:3f:43:1a:22:12:e4:9a:ce:
         a0:c4:0e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:08:22 2025 by rpki-client