Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/323830343a313933343a343030303a3a2f33342d3334203d3e203631373738.roa
File:                     323830343a313933343a343030303a3a2f33342d3334203d3e203631373738.roa (raw, json)
Hash identifier:          k4LKWhdbVMJCOlKKxWM1K3k0sfli+Jvgc4z8yb2gVb0=
Subject key identifier:   DB:1C:6C:1B:48:A7:B6:00:78:82:4B:44:53:88:41:22:22:E6:4F:73
Certificate issuer:       /CN=3496860CED46E82860498DD946601D168147920B
Certificate serial:       5DCE4936597FF12BD501D1AC3F6AC95711C1AC43
Authority key identifier: 34:96:86:0C:ED:46:E8:28:60:49:8D:D9:46:60:1D:16:81:47:92:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3496860CED46E82860498DD946601D168147920B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/323830343a313933343a343030303a3a2f33342d3334203d3e203631373738.roa
Signing time:             Wed 11 Jun 2025 17:00:00 +0000
ROA not before:           Wed 11 Jun 2025 16:55:00 +0000
ROA not after:            Wed 10 Jun 2026 17:00:00 +0000
asID:                     61778
IP address blocks:        2804:1934:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ce:49:36:59:7f:f1:2b:d5:01:d1:ac:3f:6a:c9:57:11:c1:ac:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3496860CED46E82860498DD946601D168147920B
        Validity
            Not Before: Jun 11 16:55:00 2025 GMT
            Not After : Jun 10 17:00:00 2026 GMT
        Subject: CN=DB1C6C1B48A7B60078824B445388412222E64F73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f5:f5:5d:3c:3e:4e:dd:be:23:e4:5a:ce:99:
                    e5:ae:da:48:17:7c:0f:a2:a0:90:1e:60:33:f1:4b:
                    91:20:c1:fa:ff:bb:7e:c6:d2:b5:cf:2e:17:a3:89:
                    61:d8:cd:7e:5e:46:ae:1e:45:a6:87:ed:02:e6:0e:
                    1c:a8:a1:b8:8d:2d:b8:91:dc:ea:1f:07:19:0a:9f:
                    bf:94:75:56:da:a6:c4:91:3d:cc:6a:b3:48:8c:19:
                    55:a6:aa:f2:2d:9d:53:c3:4e:04:d7:3b:a5:15:4f:
                    5f:44:36:4d:e8:4d:b5:de:77:e8:ea:45:24:58:9f:
                    9a:39:9b:81:c0:80:01:14:6d:ef:06:2f:bb:db:b0:
                    ed:53:45:6b:5b:23:c4:e2:5b:3a:0f:79:c2:17:24:
                    d4:8c:55:8f:44:ec:99:37:c8:9d:e7:a6:67:0a:bf:
                    64:d5:e0:a6:4c:c0:b9:12:c0:74:22:fe:45:b1:c9:
                    94:e1:5c:09:76:f0:26:19:26:55:96:3c:0e:e8:66:
                    78:44:28:a4:cf:92:bc:1b:3a:ff:db:f4:53:1b:a2:
                    9d:bd:13:b4:e7:9c:cf:4c:e7:5c:d6:d4:ec:08:c9:
                    de:58:09:5a:6c:58:9d:cb:d1:28:73:22:48:93:75:
                    ad:c5:08:bb:67:92:2f:78:64:ab:26:b6:e8:c2:e0:
                    76:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:1C:6C:1B:48:A7:B6:00:78:82:4B:44:53:88:41:22:22:E6:4F:73
            X509v3 Authority Key Identifier:
                keyid:34:96:86:0C:ED:46:E8:28:60:49:8D:D9:46:60:1D:16:81:47:92:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3496860CED46E82860498DD946601D168147920B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3496860CED46E82860498DD946601D168147920B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/323830343a313933343a343030303a3a2f33342d3334203d3e203631373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1934:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         77:0c:67:5c:57:96:9d:c8:12:d2:2e:3e:4f:50:d9:b4:0a:2f:
         53:6b:a0:64:31:41:8b:d3:f3:23:53:67:5b:35:5f:ec:eb:42:
         f7:db:a1:e0:c5:c9:a3:db:d4:b0:1b:99:46:6e:0f:1c:f9:d6:
         df:d9:5c:49:c8:bb:97:18:0a:45:59:4c:95:f9:05:fa:70:f9:
         57:9e:7f:11:45:61:ee:91:89:a3:fa:e2:14:ab:60:66:f7:68:
         aa:3f:dc:79:be:ad:37:bb:a4:35:6e:09:a3:ca:cd:4f:a5:e5:
         02:1c:51:d7:a1:fa:e0:32:0c:cf:1e:87:62:65:66:ff:54:f3:
         d1:f5:4f:d8:09:17:7e:07:35:d3:ad:b1:a2:a1:83:25:71:e9:
         f3:86:e9:47:50:fc:de:6a:11:44:1c:16:e5:d6:eb:18:dd:e8:
         25:15:51:6f:e7:18:35:67:41:9d:6d:95:90:ff:84:53:b3:d1:
         30:e5:f0:a8:92:58:ee:a9:a0:8c:a2:72:1b:49:04:1a:c3:ed:
         e0:ef:0d:6b:96:05:75:5b:d7:8e:2c:db:61:77:72:4f:18:49:
         34:99:c3:42:63:96:b0:2b:06:0a:78:07:e1:19:d4:92:4f:85:
         45:f5:0c:48:0b:a0:0b:73:23:00:3f:5a:87:cb:25:b8:6d:0e:
         3e:ff:b4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 03:23:45 2025 by rpki-client