Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/323830343a366663343a3a2f33332d3333203d3e20323730363833.roa
File:                     323830343a366663343a3a2f33332d3333203d3e20323730363833.roa (raw, json)
Hash identifier:          iWQEVS0C8DVfLIMz9bB31DfU1u5I8R0Sy/J1DcnwxCk=
Subject key identifier:   74:13:0F:CA:58:71:D8:2C:33:EC:04:FD:A0:26:15:BE:E5:C1:C0:1C
Certificate issuer:       /CN=8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505
Certificate serial:       57DBFEF25F51277BA90805145BC891AA55F320F7
Authority key identifier: 8E:A2:14:99:D9:F7:6D:A8:5E:EC:8D:8B:1A:8E:3B:06:9D:4C:75:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/323830343a366663343a3a2f33332d3333203d3e20323730363833.roa
Signing time:             Thu 06 Mar 2025 03:59:07 +0000
ROA not before:           Thu 06 Mar 2025 03:54:07 +0000
ROA not after:            Thu 05 Mar 2026 03:59:07 +0000
asID:                     270683
IP address blocks:        2804:6fc4::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:db:fe:f2:5f:51:27:7b:a9:08:05:14:5b:c8:91:aa:55:f3:20:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505
        Validity
            Not Before: Mar  6 03:54:07 2025 GMT
            Not After : Mar  5 03:59:07 2026 GMT
        Subject: CN=74130FCA5871D82C33EC04FDA02615BEE5C1C01C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:74:99:0d:2c:7f:ed:71:07:88:79:89:03:f8:
                    f4:44:09:6d:8f:4f:2f:da:82:30:6c:0c:f9:86:94:
                    53:e3:b0:c9:9f:60:5f:42:2a:9c:6e:49:41:87:54:
                    78:0b:57:ca:a0:e9:f8:42:dc:57:70:5a:74:f2:53:
                    03:b9:ae:7e:93:bc:61:26:68:84:1e:d7:4f:7d:0b:
                    ae:ca:2c:07:45:9a:d1:02:d8:fd:33:30:49:6b:d3:
                    76:ed:cf:81:7d:8e:1b:4b:f7:46:aa:71:13:72:fb:
                    f5:e2:46:e4:0e:ea:79:62:f8:4d:4f:e9:13:53:25:
                    f7:f2:bf:45:4f:c3:50:dd:00:50:7a:ca:2c:7b:ed:
                    a8:b4:e9:94:40:bd:57:eb:68:ad:51:29:8e:94:86:
                    ad:87:23:5a:1c:2b:36:78:27:f9:de:f0:34:88:a8:
                    f3:e1:12:12:e2:98:da:2b:03:28:a3:39:bc:79:91:
                    73:25:d5:40:97:4d:d6:2e:f1:4b:28:36:85:3d:e0:
                    d6:94:e5:d9:12:3e:05:a2:6a:25:19:af:6d:37:f0:
                    52:b3:2f:b6:de:30:f6:0d:3a:7a:9e:3e:92:84:71:
                    cd:25:a6:3b:38:22:ae:49:cd:67:3f:ac:c3:be:57:
                    c8:2b:a2:99:0d:2c:60:cd:17:d6:3f:a0:73:dc:b3:
                    cc:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:13:0F:CA:58:71:D8:2C:33:EC:04:FD:A0:26:15:BE:E5:C1:C0:1C
            X509v3 Authority Key Identifier:
                keyid:8E:A2:14:99:D9:F7:6D:A8:5E:EC:8D:8B:1A:8E:3B:06:9D:4C:75:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/323830343a366663343a3a2f33332d3333203d3e20323730363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6fc4::/33

    Signature Algorithm: sha256WithRSAEncryption
         23:1d:b8:f1:b1:2b:df:e7:55:22:19:40:29:9d:bf:af:44:72:
         ad:37:88:76:ff:3f:26:36:4e:57:48:5e:02:9d:35:c7:14:85:
         50:e7:d7:03:7f:63:f6:76:31:92:5f:f6:13:4a:21:8a:52:0e:
         d6:b6:7f:b2:9b:ad:d6:22:ba:62:e2:b9:89:da:8f:65:bc:72:
         b8:1b:c1:59:7d:23:db:58:63:4d:10:00:6f:b5:de:d6:ec:0d:
         74:66:27:09:1b:2f:4c:b8:d2:d4:50:ed:94:81:b0:9d:80:5c:
         c9:67:ec:01:b7:3d:e2:4a:bb:b9:4f:a9:5a:a3:fd:70:bb:ca:
         d6:83:15:8f:0a:c6:ad:b5:fa:d9:7d:62:0a:f8:92:bd:51:a4:
         71:43:2b:59:b6:bd:b8:ed:8c:2c:ac:02:1d:fb:97:ff:89:17:
         a2:5c:3a:81:28:1e:f4:14:3b:73:e2:cf:f9:36:5a:53:17:7a:
         2b:ca:9b:e5:75:1e:b5:ef:ab:f6:14:14:2b:59:00:6a:45:ba:
         de:8c:82:23:80:e5:13:ae:7b:5b:ef:a3:ff:c9:0b:b4:f2:bd:
         9d:7d:c8:50:21:0e:40:ba:33:fd:95:aa:56:ad:11:f8:81:f9:
         6a:32:79:6f:47:58:93:46:d4:20:1b:ce:a2:ef:bd:00:05:de:
         ee:1f:17:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:29:44 2025 by rpki-client