Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a373030303a3a2f34362d3436203d3e20323635303130.roa
File:                     323830343a333136303a373030303a3a2f34362d3436203d3e20323635303130.roa (raw, json)
Hash identifier:          iqCyrxdhdJA/5nRmrtW/7Q87+agPl1WWstus7n1OwEE=
Subject key identifier:   C2:BC:3C:83:97:28:A0:42:0A:5E:9A:4B:12:D0:05:9D:0F:D1:39:99
Certificate issuer:       /CN=EDE42042BE62747DCDF2BDE76D369E72DC11D838
Certificate serial:       09ABDB0367B7B9AD99A26B3E49B4303E1680E276
Authority key identifier: ED:E4:20:42:BE:62:74:7D:CD:F2:BD:E7:6D:36:9E:72:DC:11:D8:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDE42042BE62747DCDF2BDE76D369E72DC11D838.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a373030303a3a2f34362d3436203d3e20323635303130.roa
Signing time:             Tue 29 Oct 2024 12:31:05 +0000
ROA not before:           Tue 29 Oct 2024 12:26:05 +0000
ROA not after:            Tue 28 Oct 2025 12:31:05 +0000
asID:                     265010
IP address blocks:        2804:3160:7000::/46 maxlen: 46
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:ab:db:03:67:b7:b9:ad:99:a2:6b:3e:49:b4:30:3e:16:80:e2:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDE42042BE62747DCDF2BDE76D369E72DC11D838
        Validity
            Not Before: Oct 29 12:26:05 2024 GMT
            Not After : Oct 28 12:31:05 2025 GMT
        Subject: CN=C2BC3C839728A0420A5E9A4B12D0059D0FD13999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2d:41:a0:82:6c:9e:1b:c5:97:2e:63:c4:6b:
                    68:db:70:75:97:95:e5:4c:8e:f1:33:7a:06:6b:44:
                    3d:62:df:65:c7:7c:77:30:02:f4:09:20:b0:c5:11:
                    3d:15:27:f7:08:c3:7e:17:56:79:1a:39:4e:e4:15:
                    56:41:c9:42:b0:42:cb:a1:b3:52:03:a3:bf:15:70:
                    be:a4:af:ae:52:cd:b4:1b:4b:a3:f4:99:41:cb:04:
                    0a:a8:15:c4:36:6b:8d:c8:02:fe:98:b6:16:38:dd:
                    c0:c0:40:51:c8:49:51:a1:47:5e:c7:e4:1f:92:ca:
                    23:ef:c4:83:b7:86:8e:e7:41:27:1e:a5:26:9e:42:
                    2d:27:c8:4e:14:a1:9b:b8:13:cf:66:4e:58:8c:7e:
                    22:a0:e2:c9:fe:e2:bb:45:65:8a:6c:e8:f1:2c:cd:
                    f0:15:3d:d9:67:99:4c:7f:96:15:a5:77:2c:0d:8d:
                    8d:8a:2e:78:ec:6d:1d:98:a1:33:da:7b:8a:94:94:
                    2b:d0:1c:8a:2e:ac:15:b2:96:f4:61:f1:c9:bb:25:
                    72:bb:b4:11:86:a9:d6:10:ee:e6:b2:63:cd:af:59:
                    47:6e:d6:39:a6:47:74:3a:6f:ee:09:88:23:6f:b3:
                    4e:6b:cc:18:fa:3e:82:92:ad:fb:ed:2c:3e:ce:3e:
                    cf:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:BC:3C:83:97:28:A0:42:0A:5E:9A:4B:12:D0:05:9D:0F:D1:39:99
            X509v3 Authority Key Identifier:
                keyid:ED:E4:20:42:BE:62:74:7D:CD:F2:BD:E7:6D:36:9E:72:DC:11:D8:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/EDE42042BE62747DCDF2BDE76D369E72DC11D838.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDE42042BE62747DCDF2BDE76D369E72DC11D838.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a373030303a3a2f34362d3436203d3e20323635303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3160:7000::/46

    Signature Algorithm: sha256WithRSAEncryption
         06:51:0a:e3:4c:6f:1e:41:b7:a9:0c:45:60:ee:ba:2d:d5:76:
         c4:46:ad:16:00:7e:c7:f4:54:9d:48:9d:33:02:cd:e2:bc:cb:
         6c:42:62:bb:af:d6:23:08:37:3e:96:b8:53:c0:81:de:05:c6:
         e4:af:16:58:54:22:e5:fc:16:2d:5f:43:df:3c:31:2b:0e:8b:
         35:65:07:46:71:60:24:1e:0e:15:f7:a9:b7:89:b3:41:1f:e9:
         65:c4:de:92:61:69:26:c6:48:95:6d:68:a6:cd:f3:ff:5b:1d:
         61:36:a9:93:12:cc:82:82:71:63:90:8f:2a:c4:41:1a:32:38:
         89:67:d1:79:6a:0a:64:21:8d:51:57:52:b0:9e:e0:bf:b2:89:
         ed:55:50:3b:48:5c:b6:e9:84:2f:59:65:11:5e:d2:62:27:d6:
         04:7f:31:c7:44:b2:55:e2:5c:24:b0:44:99:23:27:fb:0a:3a:
         52:14:51:d8:ec:68:13:82:13:39:d3:02:c8:ad:6c:d7:bb:2f:
         73:ac:c8:80:a5:88:d4:b6:b8:82:21:1f:57:d5:94:8f:6b:92:
         1f:d1:18:64:98:92:51:91:71:33:aa:e7:fc:1a:31:06:45:95:
         38:d6:9c:91:b2:53:d6:7b:71:9d:c5:47:94:4e:7c:d1:d4:65:
         f7:12:59:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:43:48 2025 by rpki-client