Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/323830343a316239633a633030303a3a2f33342d3334203d3e203631373337.roa
File:                     323830343a316239633a633030303a3a2f33342d3334203d3e203631373337.roa (raw, json)
Hash identifier:          kuuvsevLwgFjh9raIx15FaRZj+YPuisr3nbBcZcAL3A=
Subject key identifier:   99:30:4E:C0:99:18:59:D1:49:F4:03:59:C0:70:D9:D2:9D:FB:7F:16
Certificate issuer:       /CN=39D7DC5EB84F95D2DB8156F97805B6303A56A12B
Certificate serial:       0220D16E4195D62BBDC1EF9F8EE1D7E402F7F6EA
Authority key identifier: 39:D7:DC:5E:B8:4F:95:D2:DB:81:56:F9:78:05:B6:30:3A:56:A1:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/323830343a316239633a633030303a3a2f33342d3334203d3e203631373337.roa
Signing time:             Fri 14 Feb 2025 00:08:56 +0000
ROA not before:           Fri 14 Feb 2025 00:03:56 +0000
ROA not after:            Fri 13 Feb 2026 00:08:56 +0000
asID:                     61737
IP address blocks:        2804:1b9c:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:20:d1:6e:41:95:d6:2b:bd:c1:ef:9f:8e:e1:d7:e4:02:f7:f6:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39D7DC5EB84F95D2DB8156F97805B6303A56A12B
        Validity
            Not Before: Feb 14 00:03:56 2025 GMT
            Not After : Feb 13 00:08:56 2026 GMT
        Subject: CN=99304EC0991859D149F40359C070D9D29DFB7F16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:8b:7f:9a:81:7f:e6:b0:1d:23:68:34:61:03:
                    02:a5:88:d5:a0:6b:8d:90:27:f9:8f:06:a2:68:40:
                    33:8c:9c:64:e9:bd:07:69:d8:92:83:25:3e:7f:a5:
                    b3:e5:1c:f0:f9:73:c6:f9:a3:76:9c:48:11:a9:73:
                    72:34:d2:df:6b:a5:6d:96:b7:ee:17:87:f4:7d:53:
                    bc:87:16:a1:ec:91:ce:e5:11:e3:d8:33:8a:8e:6c:
                    a1:8e:b1:58:9e:01:72:e8:7b:26:13:4c:35:ce:c6:
                    f3:49:d0:e0:c7:6a:c3:2c:1d:53:c4:e9:72:32:7b:
                    06:23:8c:51:c7:7e:14:98:36:24:f7:d2:05:09:06:
                    ca:cc:b3:0d:14:4a:73:21:b6:b5:6e:27:16:f4:58:
                    84:96:11:de:3e:32:3f:7e:23:b2:35:2d:39:c1:84:
                    d5:ae:15:ac:19:22:06:2d:d9:f8:fe:36:df:58:ec:
                    0b:0d:b6:ed:5f:4e:7a:7d:07:7b:5c:a6:84:d8:f9:
                    9c:75:84:c3:7d:80:d0:f8:6f:27:77:8f:e4:6a:cc:
                    cb:32:1b:7d:17:ff:9b:b6:30:f2:7b:03:54:1a:b4:
                    f8:f0:0e:2f:31:0a:fa:ad:fc:3d:8b:72:23:a3:50:
                    ed:25:a5:9c:0e:ef:73:db:d3:34:d5:23:c2:6b:77:
                    2b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:30:4E:C0:99:18:59:D1:49:F4:03:59:C0:70:D9:D2:9D:FB:7F:16
            X509v3 Authority Key Identifier:
                keyid:39:D7:DC:5E:B8:4F:95:D2:DB:81:56:F9:78:05:B6:30:3A:56:A1:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/323830343a316239633a633030303a3a2f33342d3334203d3e203631373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b9c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         4d:73:d5:ef:f2:d6:5a:e9:07:89:a1:16:b9:b2:6a:49:ff:7a:
         3a:aa:49:04:e1:e4:63:11:91:3b:24:f5:23:d9:96:f2:e3:e3:
         c4:c6:a5:86:3b:17:d4:31:fc:ba:6d:d7:5f:6e:45:ff:af:93:
         17:8c:c3:1a:78:1e:bc:19:2c:56:78:c1:99:9c:3c:6d:3d:60:
         40:fd:84:f1:e3:ae:f6:30:5c:36:45:83:b0:a3:b1:17:c7:71:
         0b:36:57:1d:0c:b1:42:d4:1d:c3:8d:b1:25:03:52:13:91:1d:
         f8:eb:64:3a:17:de:8c:34:c7:ac:a8:db:7a:8b:dd:79:71:f6:
         9e:ce:6c:d9:9d:e1:17:79:ec:a3:36:d0:38:65:0b:5f:e9:ce:
         a0:99:e9:f2:d1:a2:70:2b:a5:e5:70:df:08:03:5a:03:19:6d:
         c3:4b:d8:22:2d:cc:d8:98:cf:c0:08:5e:da:04:2d:fa:d9:00:
         77:55:ea:7c:33:30:7e:e3:63:1b:82:47:10:60:04:5a:7c:7e:
         1a:36:66:79:e5:56:57:fc:4e:97:e7:9c:39:d0:e3:24:82:3e:
         ca:51:b0:f5:b0:05:d3:44:2c:da:9a:5f:38:70:78:c1:8d:3a:
         2c:0b:6e:a1:13:67:15:bb:df:73:73:3c:97:66:a5:03:cc:2f:
         e1:eb:4e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 03:28:45 2025 by rpki-client on console.sobornost.net