Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/323830343a353833343a383030303a3a2f33342d3334203d3e20323638313133.roa
File:                     323830343a353833343a383030303a3a2f33342d3334203d3e20323638313133.roa (raw, json)
Hash identifier:          dpSRSye+PReRQ4pcK1+ektBCNKDpf++EjDRtUg9fQoM=
Subject key identifier:   4B:10:AE:9A:7E:DF:0E:4A:B2:85:F7:16:DF:7C:7C:67:2C:51:3F:D2
Certificate issuer:       /CN=FA921E7C3C9FDC4F96D45614C07E02367A255860
Certificate serial:       78580823F9D0C49DEAEB25C64A57EC6B4E5871BF
Authority key identifier: FA:92:1E:7C:3C:9F:DC:4F:96:D4:56:14:C0:7E:02:36:7A:25:58:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA921E7C3C9FDC4F96D45614C07E02367A255860.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/323830343a353833343a383030303a3a2f33342d3334203d3e20323638313133.roa
Signing time:             Tue 16 Apr 2024 23:17:37 +0000
ROA not before:           Tue 16 Apr 2024 23:12:37 +0000
ROA not after:            Tue 15 Apr 2025 23:17:37 +0000
asID:                     268113
IP address blocks:        2804:5834:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:58:08:23:f9:d0:c4:9d:ea:eb:25:c6:4a:57:ec:6b:4e:58:71:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA921E7C3C9FDC4F96D45614C07E02367A255860
        Validity
            Not Before: Apr 16 23:12:37 2024 GMT
            Not After : Apr 15 23:17:37 2025 GMT
        Subject: CN=4B10AE9A7EDF0E4AB285F716DF7C7C672C513FD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:99:ba:9f:02:84:7f:00:97:b1:71:97:ff:45:
                    52:fb:e7:f9:ae:16:50:34:23:43:8a:be:0c:f9:f0:
                    c6:64:84:f8:19:12:33:80:12:b4:ba:f7:8c:c6:62:
                    14:00:df:4e:07:4b:da:e5:a9:c1:bc:96:23:cb:f5:
                    92:c6:0a:77:8d:b2:b2:15:5f:4c:60:b1:63:9d:c2:
                    e2:d1:99:7d:fb:bb:41:e9:f1:55:7a:6b:70:8f:59:
                    45:43:68:2c:03:62:73:1f:5f:7f:0a:16:e3:94:37:
                    a1:10:5e:9e:b9:73:75:4b:f5:30:13:cd:82:16:41:
                    ec:1d:d9:68:e2:40:a5:2a:cf:62:0b:8e:d4:a9:93:
                    a6:92:1e:d4:8d:d0:34:90:bb:28:e9:da:12:e7:57:
                    11:2c:d8:fd:53:c4:4c:6d:98:de:97:12:90:6a:2b:
                    4e:ec:d2:a1:a5:cb:c1:14:8c:6d:79:a2:7d:78:50:
                    c4:0d:59:24:3b:56:0f:de:04:d0:83:46:93:6b:28:
                    21:14:1c:0d:11:fc:b8:d2:12:cb:42:ae:5e:43:2c:
                    4a:67:80:7e:e6:86:68:55:6b:8a:79:9d:2d:d7:ba:
                    25:59:db:19:0d:5b:c2:65:9b:7a:11:4e:42:a4:47:
                    58:c3:72:6d:e3:8c:47:e8:2d:84:da:31:d4:34:7d:
                    7c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:10:AE:9A:7E:DF:0E:4A:B2:85:F7:16:DF:7C:7C:67:2C:51:3F:D2
            X509v3 Authority Key Identifier:
                keyid:FA:92:1E:7C:3C:9F:DC:4F:96:D4:56:14:C0:7E:02:36:7A:25:58:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/FA921E7C3C9FDC4F96D45614C07E02367A255860.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA921E7C3C9FDC4F96D45614C07E02367A255860.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/323830343a353833343a383030303a3a2f33342d3334203d3e20323638313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5834:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         2b:f1:8b:a3:1f:ee:10:a7:70:cb:86:7a:7d:d5:cb:d1:23:98:
         ac:2d:f3:94:70:40:80:83:c2:43:e2:94:fb:75:99:b4:cf:fe:
         e6:d6:10:c6:c1:ec:00:1d:36:71:5d:af:43:f9:51:d0:50:ec:
         ae:b4:15:f5:48:0d:b0:7e:3e:8b:b5:0d:55:fd:a2:d8:07:5d:
         12:29:8a:df:e8:a8:69:8f:16:81:4e:cf:f3:4b:23:b7:83:f6:
         03:82:73:93:cf:0d:e3:5a:51:d3:67:60:c0:dc:ba:d7:43:2b:
         32:4b:33:cb:70:56:4c:38:8f:ba:6d:5b:00:84:94:9c:45:f9:
         63:b8:b9:c6:73:63:d4:c6:a6:8d:9a:8d:8c:6b:73:24:bd:69:
         07:66:61:5d:54:ba:6c:71:47:62:55:32:f9:6c:7a:81:4d:88:
         93:48:5d:d7:60:a1:09:df:dc:9e:58:9f:8a:9b:af:3b:4a:e5:
         85:ad:1c:25:19:04:77:b1:2f:cc:c4:4a:c6:ba:ab:2c:6d:c4:
         20:8c:a8:bc:5e:b3:e6:d8:d1:4b:f8:78:af:ce:4d:7f:40:11:
         d2:ad:0e:a1:05:b8:a3:32:8e:de:66:b7:84:7c:92:62:3f:ab:
         53:47:d0:f6:f3:e7:66:1d:f6:ba:c5:c1:20:82:d6:bf:7b:36:
         0a:c3:e0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 18:27:29 2025 by rpki-client