Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/323830343a313932633a333030303a3a2f33362d3336203d3e203631373736.roa
File:                     323830343a313932633a333030303a3a2f33362d3336203d3e203631373736.roa (raw, json)
Hash identifier:          QLIEdrwFXRyGfjOdvAE/fKIEAKEmFLywuCeI45TBU3g=
Subject key identifier:   99:E7:46:29:CE:62:F1:44:88:E4:D3:66:E4:30:03:F9:F2:E9:A3:32
Certificate issuer:       /CN=3E2C146C101877C56F4E2F4DDF6835E44001788A
Certificate serial:       5F95F395EFB10DE4B91D812A92B5B9160024EC98
Authority key identifier: 3E:2C:14:6C:10:18:77:C5:6F:4E:2F:4D:DF:68:35:E4:40:01:78:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E2C146C101877C56F4E2F4DDF6835E44001788A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/323830343a313932633a333030303a3a2f33362d3336203d3e203631373736.roa
Signing time:             Mon 23 Jun 2025 22:15:23 +0000
ROA not before:           Mon 23 Jun 2025 22:10:23 +0000
ROA not after:            Mon 22 Jun 2026 22:15:23 +0000
asID:                     61776
IP address blocks:        2804:192c:3000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:95:f3:95:ef:b1:0d:e4:b9:1d:81:2a:92:b5:b9:16:00:24:ec:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E2C146C101877C56F4E2F4DDF6835E44001788A
        Validity
            Not Before: Jun 23 22:10:23 2025 GMT
            Not After : Jun 22 22:15:23 2026 GMT
        Subject: CN=99E74629CE62F14488E4D366E43003F9F2E9A332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:90:54:d8:06:4b:8d:f4:ed:51:47:38:da:b9:
                    a6:56:f6:f6:ad:6d:38:73:f1:0c:6d:2b:f7:c0:9d:
                    5e:72:71:8b:0c:ab:5c:ee:62:6f:3c:91:82:2b:73:
                    e8:8f:73:c4:d4:26:eb:27:ca:21:ec:91:ae:2d:89:
                    aa:89:ef:55:b9:1f:9f:92:6f:43:08:fa:d0:9c:a0:
                    80:db:f0:4b:a0:c4:7e:d7:d2:ac:8a:c8:53:39:07:
                    f6:15:ec:f5:63:53:d1:0c:e9:5d:45:97:1d:84:5c:
                    62:6d:ca:3d:9e:43:c1:55:21:0f:d0:57:17:6d:af:
                    2b:97:25:3e:3a:6f:9a:e8:c7:92:7c:66:fc:10:d5:
                    93:59:22:2e:fe:7b:72:c0:70:ac:d7:be:58:1e:10:
                    a3:b0:0a:6b:a7:12:eb:19:8d:5a:2f:28:58:cc:47:
                    9e:2c:ff:29:d2:8e:48:80:92:56:b6:4f:d3:3b:53:
                    5c:70:a0:5c:03:f8:28:90:8f:93:a1:0b:b7:ed:f9:
                    46:4a:dc:91:cd:d1:1f:1d:7c:ec:70:b5:f6:df:17:
                    e7:bb:ef:04:bc:77:53:11:4d:2b:2c:81:b3:b6:e2:
                    16:2c:66:45:e4:c8:ab:7a:30:4a:54:0e:f0:33:02:
                    cb:dd:c9:0a:23:15:a4:45:a3:f8:82:60:2d:14:66:
                    4b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:E7:46:29:CE:62:F1:44:88:E4:D3:66:E4:30:03:F9:F2:E9:A3:32
            X509v3 Authority Key Identifier:
                keyid:3E:2C:14:6C:10:18:77:C5:6F:4E:2F:4D:DF:68:35:E4:40:01:78:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3E2C146C101877C56F4E2F4DDF6835E44001788A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E2C146C101877C56F4E2F4DDF6835E44001788A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/323830343a313932633a333030303a3a2f33362d3336203d3e203631373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:192c:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b3:63:80:0a:e1:c2:f1:ec:82:9f:bb:32:90:a8:2b:07:45:85:
         83:87:92:9f:aa:ee:b1:d1:6b:39:cc:bd:51:82:2d:95:5b:dd:
         0c:58:ae:df:8a:c2:da:fc:ff:3d:01:a7:dc:f6:8a:fd:0c:c7:
         00:09:b5:b5:fa:60:5e:9d:4e:48:6b:30:38:99:6e:e7:2f:b9:
         99:4a:08:26:03:23:83:b4:cc:06:a8:45:c7:b7:5d:25:d8:2f:
         0d:f6:c8:14:35:17:ba:ce:37:50:4c:36:fe:ec:95:c1:94:ae:
         3e:41:a1:02:e9:2d:d9:d3:03:53:bc:3d:a1:44:d7:cd:fa:a3:
         f3:46:14:26:db:e3:e5:d8:8f:51:bc:3c:e2:37:94:95:fb:ec:
         70:79:65:1d:e7:3b:26:43:28:1e:36:ac:be:a4:22:ae:0f:83:
         16:0f:6e:a9:26:72:e6:33:e2:8f:21:4f:71:59:2e:4c:d9:ea:
         80:cb:f9:eb:ea:fb:d6:0f:bb:55:aa:1d:76:91:6a:44:8c:f8:
         d3:4f:59:89:c2:fe:ef:e1:50:c2:85:76:da:e0:e5:53:5a:39:
         a9:70:17:f6:a0:09:84:38:3d:24:a1:0d:b2:04:48:2c:66:73:
         c0:1c:42:a0:51:95:51:5f:20:94:b4:b1:21:12:26:fb:1a:d8:
         f6:f7:e1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 05:08:40 2025 by rpki-client