Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/323830343a313932633a323030303a3a2f33362d3336203d3e203631373736.roa
File:                     323830343a313932633a323030303a3a2f33362d3336203d3e203631373736.roa (raw, json)
Hash identifier:          QJhG0eJ2lU5znxPq6kdFdB8O6laB/FGATP6xk22OrKY=
Subject key identifier:   F4:D7:37:68:75:96:F3:6E:21:3F:CD:7D:B2:9D:F5:CD:98:DB:AD:EF
Certificate issuer:       /CN=994D499817907EB8F4D1290AD0C3115D0214B589
Certificate serial:       72BA3CEC6952712B55154FC58EDD2B248E51F814
Authority key identifier: 99:4D:49:98:17:90:7E:B8:F4:D1:29:0A:D0:C3:11:5D:02:14:B5:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/994D499817907EB8F4D1290AD0C3115D0214B589.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/323830343a313932633a323030303a3a2f33362d3336203d3e203631373736.roa
Signing time:             Sun 02 Mar 2025 22:11:31 +0000
ROA not before:           Sun 02 Mar 2025 22:06:31 +0000
ROA not after:            Sun 01 Mar 2026 22:11:31 +0000
asID:                     61776
IP address blocks:        2804:192c:2000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ba:3c:ec:69:52:71:2b:55:15:4f:c5:8e:dd:2b:24:8e:51:f8:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=994D499817907EB8F4D1290AD0C3115D0214B589
        Validity
            Not Before: Mar  2 22:06:31 2025 GMT
            Not After : Mar  1 22:11:31 2026 GMT
        Subject: CN=F4D737687596F36E213FCD7DB29DF5CD98DBADEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:bc:28:ac:22:2f:0c:22:2e:ad:6c:58:51:24:
                    0e:f0:e3:07:12:3f:c2:c8:65:0c:54:7d:84:4b:b8:
                    59:bc:7f:cd:a7:6a:9c:2d:41:55:6e:ef:65:2d:62:
                    04:71:cb:75:81:64:03:f6:ec:d5:81:4a:4a:01:c5:
                    af:1e:cb:d0:34:03:a1:90:94:b3:0a:42:ab:95:de:
                    9e:e0:6d:cf:6d:d1:ea:31:34:84:5f:39:a8:7e:35:
                    c5:ca:f7:43:8f:53:ae:08:ca:a1:fd:34:ea:f6:ff:
                    71:ee:b4:7f:84:f4:01:c9:30:dd:fa:54:a7:a5:2e:
                    cd:f8:78:18:10:16:96:69:55:58:93:17:25:5e:f0:
                    a0:f0:a6:bc:a5:ae:99:cd:b9:9c:1c:19:42:94:0c:
                    e2:b2:02:23:51:09:d3:f5:44:41:6b:67:d7:ce:a7:
                    37:43:44:b6:00:ad:b9:3a:bc:d2:c2:40:97:b4:9a:
                    e1:96:fc:b2:9c:12:7f:fb:c5:7b:8c:7b:a1:ac:71:
                    a8:57:b9:95:f0:d6:b9:af:2e:41:07:53:12:6b:ee:
                    26:f9:89:fa:5b:76:37:4e:98:4d:23:4a:16:0b:78:
                    f2:3b:e0:e9:ce:2b:1e:e5:8d:73:6d:84:80:ce:34:
                    ab:a1:48:f2:60:4a:e8:b4:74:7a:37:11:6a:61:6b:
                    6e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D7:37:68:75:96:F3:6E:21:3F:CD:7D:B2:9D:F5:CD:98:DB:AD:EF
            X509v3 Authority Key Identifier:
                keyid:99:4D:49:98:17:90:7E:B8:F4:D1:29:0A:D0:C3:11:5D:02:14:B5:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/994D499817907EB8F4D1290AD0C3115D0214B589.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/994D499817907EB8F4D1290AD0C3115D0214B589.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/323830343a313932633a323030303a3a2f33362d3336203d3e203631373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:192c:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         94:2f:cf:af:01:bb:bb:08:b7:3f:9a:8d:92:c6:3d:29:b0:af:
         58:07:b3:5d:c9:b7:54:ab:91:6b:6d:94:4c:03:ff:1d:91:ef:
         ce:e0:07:f5:c1:ea:5e:9a:2d:89:b6:d8:38:51:4d:38:a7:a4:
         93:d3:32:e7:68:95:e6:f3:81:20:d2:bf:27:19:17:3c:a6:6f:
         a7:3b:ca:87:80:fa:ba:93:ab:ae:ed:fc:96:ec:f3:fc:d4:85:
         8a:a7:43:b0:db:7f:f1:c2:eb:ee:8a:d5:86:cf:67:8c:30:cb:
         75:62:79:df:d4:37:76:a2:c9:74:2e:73:84:19:c6:df:24:d3:
         ac:cb:09:93:b5:1f:a0:81:25:8a:99:52:e0:e4:48:be:26:97:
         6e:1a:58:f7:15:10:69:b4:ed:4a:6a:5b:f6:7a:f8:fa:d1:c4:
         dc:20:73:8d:74:fc:a4:b4:8c:c9:ac:37:0d:08:9a:10:bb:2d:
         71:5f:5a:36:16:80:dd:d5:44:8b:ad:a8:0a:cf:0e:a7:d0:49:
         f3:f6:4a:8b:bd:69:7c:57:f4:bd:a5:be:31:b3:ab:0e:be:09:
         2b:48:66:06:52:8d:b5:f1:9a:19:1b:89:da:14:90:88:47:e5:
         f9:35:a9:29:ba:30:56:aa:a2:c2:8b:37:ba:d2:82:5e:68:eb:
         2d:76:4a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:28:16 2025 by rpki-client