Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/323830343a313132383a383030303a3a2f34302d3430203d3e20323633363631.roa
File:                     323830343a313132383a383030303a3a2f34302d3430203d3e20323633363631.roa (raw, json)
Hash identifier:          sPWpUJzqy0lFQgUDGIBLpDLFvsoDjQYmPWMzZ9pkqGg=
Subject key identifier:   AF:C8:21:42:53:EA:93:54:57:91:7E:47:59:1E:C0:2E:9F:87:A8:66
Certificate issuer:       /CN=FE9526ADBEB9739BD7732F3183CE8E47810B5303
Certificate serial:       57B4CDC63FD42B3783630AED122155CF758214FE
Authority key identifier: FE:95:26:AD:BE:B9:73:9B:D7:73:2F:31:83:CE:8E:47:81:0B:53:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/323830343a313132383a383030303a3a2f34302d3430203d3e20323633363631.roa
Signing time:             Mon 04 Mar 2024 21:23:02 +0000
ROA not before:           Mon 04 Mar 2024 21:18:02 +0000
ROA not after:            Mon 03 Mar 2025 21:23:02 +0000
asID:                     263661
IP address blocks:        2804:1128:8000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:b4:cd:c6:3f:d4:2b:37:83:63:0a:ed:12:21:55:cf:75:82:14:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE9526ADBEB9739BD7732F3183CE8E47810B5303
        Validity
            Not Before: Mar  4 21:18:02 2024 GMT
            Not After : Mar  3 21:23:02 2025 GMT
        Subject: CN=AFC8214253EA935457917E47591EC02E9F87A866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:cc:1d:fd:68:ae:f7:45:1f:41:0f:cd:a7:f5:
                    28:3e:7f:a2:7b:e3:36:90:ec:48:44:cc:bd:c4:82:
                    21:9a:8f:4e:f8:00:9c:37:be:dc:c8:7a:67:f6:36:
                    fa:cf:58:3f:c8:75:1d:a8:b0:42:40:61:81:d3:a8:
                    ac:d8:61:2a:78:8f:bd:88:74:b9:28:f8:51:fa:0b:
                    31:e8:32:8d:d3:46:28:5e:76:de:97:6f:fa:4d:96:
                    ee:36:aa:e4:b7:4d:6d:c2:92:bb:a0:0d:08:0f:20:
                    b1:2c:23:08:d3:ac:bc:fd:12:24:60:71:9c:b7:48:
                    22:16:38:58:67:e4:3e:64:89:69:9c:dd:1b:2c:10:
                    5c:05:23:7e:24:06:76:7c:23:a9:c2:a6:10:a9:72:
                    67:8a:f5:fb:c6:de:a1:bb:b1:d7:3d:b8:55:1e:5d:
                    a4:df:67:b3:bd:82:46:3b:80:a7:5a:70:03:28:13:
                    fe:44:5f:fd:c7:a7:5d:97:2b:9d:27:eb:34:c2:40:
                    28:c4:6f:b1:ba:0c:b8:f8:40:79:fe:1a:ee:f7:47:
                    72:2d:3b:20:e3:bb:1f:c6:b6:aa:b5:ab:89:22:c7:
                    65:4d:df:4d:b6:55:9d:37:e3:98:a7:81:28:e0:37:
                    5f:fd:87:4f:9b:d2:b6:c0:58:91:35:9f:d2:ed:10:
                    58:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C8:21:42:53:EA:93:54:57:91:7E:47:59:1E:C0:2E:9F:87:A8:66
            X509v3 Authority Key Identifier:
                keyid:FE:95:26:AD:BE:B9:73:9B:D7:73:2F:31:83:CE:8E:47:81:0B:53:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/323830343a313132383a383030303a3a2f34302d3430203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1128:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         a3:8d:3a:be:d7:b7:cb:8d:8c:a0:11:e7:b7:ba:48:78:f2:df:
         f1:da:4e:48:91:02:ea:9c:61:84:2c:93:76:f4:83:e2:13:eb:
         44:35:de:bf:a8:19:83:38:e2:f4:ba:04:43:88:52:29:92:72:
         cc:8d:f2:dc:5b:c9:19:5c:87:47:a1:44:8d:e4:1f:af:58:3d:
         ae:b4:47:69:a5:c2:ec:e3:44:c6:f9:48:59:dc:39:de:f7:bd:
         fa:b9:17:5d:08:fd:c7:35:21:f0:ee:33:4c:11:1b:3e:68:1f:
         1a:c2:76:6f:44:48:6b:72:3c:24:a6:d6:06:af:31:82:bb:aa:
         f4:4f:88:59:90:7a:3c:6b:a4:ed:91:6b:c2:2b:6b:71:01:c6:
         0a:fa:12:3c:5a:2b:91:2b:73:71:8b:e6:b2:12:4e:3f:6a:e5:
         8a:85:00:50:7b:41:30:b2:bb:fc:68:57:72:65:1e:8e:f7:1b:
         42:ae:95:f4:ca:9f:11:b2:52:3b:c2:95:4d:df:a3:cc:73:2a:
         e1:ac:75:02:d4:25:d1:f0:e8:fa:d5:cb:b6:22:2c:5d:4e:dc:
         dc:70:a0:5e:75:cb:cf:c9:64:8b:9a:da:b5:19:27:54:68:3d:
         87:29:82:a1:c0:4e:fb:05:bf:f2:9d:42:f2:ec:d0:eb:fc:fe:
         18:09:0e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 11:22:42 2025 by rpki-client