Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/323830343a323062343a343030303a3a2f33342d3334203d3e20323634353039.roa
File:                     323830343a323062343a343030303a3a2f33342d3334203d3e20323634353039.roa (raw, json)
Hash identifier:          o+zrniyXS8zxZX1o8m9f8491+GKcryCzUvdAr/RoF/c=
Subject key identifier:   B1:E4:E5:E0:E3:85:6F:60:64:C0:69:A5:D4:6D:24:24:F4:DF:4F:69
Certificate issuer:       /CN=C67FC27679C5C58D1A1904874E35000B74C71E78
Certificate serial:       7404A6127DC388C01F48416097E634231FB5DED2
Authority key identifier: C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/323830343a323062343a343030303a3a2f33342d3334203d3e20323634353039.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     264509
IP address blocks:        2804:20b4:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:04:a6:12:7d:c3:88:c0:1f:48:41:60:97:e6:34:23:1f:b5:de:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67FC27679C5C58D1A1904874E35000B74C71E78
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6d:d3:07:b0:f1:0b:69:d5:4f:ed:ac:d9:a7:
                    8f:77:49:01:da:2c:44:88:55:d9:79:40:79:e2:9a:
                    7f:fc:19:01:94:86:1a:36:99:dd:43:f3:c0:7f:13:
                    b2:33:e0:ea:c0:d1:57:ae:2b:04:01:fa:63:31:2d:
                    ac:51:10:4e:f6:cd:20:0f:c1:53:ad:8f:d5:0f:f5:
                    ca:3e:b5:85:30:f8:49:a0:ff:37:8f:48:e1:f8:a0:
                    d4:57:4f:9f:81:43:60:07:c2:57:70:8b:a0:dd:57:
                    f1:6b:cb:b4:6f:23:57:95:ff:ee:88:20:7a:d7:b0:
                    21:ee:6b:0e:65:68:18:9b:57:65:49:e5:ab:6a:8b:
                    8a:f6:7e:27:9a:ab:3f:01:89:5d:ae:36:9d:1e:0e:
                    e9:bb:43:85:9d:b3:ef:eb:b7:d8:76:a6:ee:ff:9b:
                    a3:4d:f3:2b:ec:20:1f:70:7d:cc:19:39:26:20:bc:
                    11:1f:10:8d:41:0c:4d:2b:b2:29:5d:9e:39:a4:29:
                    7c:0c:01:24:5a:7d:31:1b:92:6a:0a:27:b1:54:f7:
                    ba:19:e2:42:4f:4b:d5:ec:7b:33:8a:f8:1f:62:a2:
                    78:85:e6:fe:3f:bb:81:a5:cf:8b:96:32:c8:8c:c4:
                    1c:4a:59:08:3d:78:d0:77:00:6c:e5:8d:9d:c1:9e:
                    cb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E4:E5:E0:E3:85:6F:60:64:C0:69:A5:D4:6D:24:24:F4:DF:4F:69
            X509v3 Authority Key Identifier:
                keyid:C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/323830343a323062343a343030303a3a2f33342d3334203d3e20323634353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20b4:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         46:3c:3c:dd:c3:7a:38:f5:17:78:46:15:fe:2e:97:5c:aa:82:
         74:99:60:fb:21:65:e1:e9:f8:58:ae:6c:59:df:92:d9:ce:21:
         35:29:91:79:79:48:0a:b4:b9:73:19:28:54:b9:bd:10:5d:4e:
         c6:8b:3c:f9:a6:2a:e9:d2:92:2f:40:21:70:5f:c4:2f:33:be:
         78:cd:84:87:01:12:47:ae:ea:6c:ee:98:f5:45:4f:d8:27:ef:
         e7:65:1f:95:1d:97:d2:67:96:33:28:2c:69:4c:07:bd:e1:7f:
         f4:84:5b:af:8d:d4:cb:81:42:36:68:4e:1d:07:63:53:7f:a1:
         8b:90:04:55:df:20:ec:d4:95:3d:7b:d9:78:98:6d:37:ef:e9:
         04:bb:cf:45:ee:ef:ee:78:11:51:79:34:93:9c:8f:22:d8:d7:
         35:fa:c2:66:47:e2:30:8d:0e:1e:19:f3:60:1a:26:fd:ac:d5:
         55:14:b5:36:25:8a:fa:e7:b3:ba:73:0a:30:44:cb:80:aa:7c:
         6a:d5:0c:fb:8c:01:3d:d6:0f:58:75:ac:16:56:c9:50:9e:96:
         08:76:79:1e:ea:f5:bf:8e:f6:5c:70:69:b2:06:62:0f:5b:1f:
         ae:2f:66:25:97:d2:e8:d4:01:bd:86:5b:8b:2c:36:6b:1b:b4:
         4d:8f:61:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:15:15 2025 by rpki-client