Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3TxE1YqYsXZV25FMLMmP3mHVukZzyqGtJ2aYVKtYnG6T/0/323830343a366265303a3730303a3a2f34302d3430203d3e20323730343331.roa
File:                     323830343a366265303a3730303a3a2f34302d3430203d3e20323730343331.roa (raw, json)
Hash identifier:          9EKaexs/XCPBdMI19KSiaLo0eWrofaLP46Y6IGe+enE=
Subject key identifier:   C4:30:A7:B5:D3:8B:E4:FE:A6:77:91:E0:AC:CE:18:0C:DE:92:35:5E
Certificate issuer:       /CN=7A3155CF09025C706805077AAA5B01CEBAB508F3
Certificate serial:       0DB728AA76E500D6BE552F33DBB8CB22C84D75DB
Authority key identifier: 7A:31:55:CF:09:02:5C:70:68:05:07:7A:AA:5B:01:CE:BA:B5:08:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3155CF09025C706805077AAA5B01CEBAB508F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3TxE1YqYsXZV25FMLMmP3mHVukZzyqGtJ2aYVKtYnG6T/0/323830343a366265303a3730303a3a2f34302d3430203d3e20323730343331.roa
Signing time:             Wed 29 Jan 2025 22:29:07 +0000
ROA not before:           Wed 29 Jan 2025 22:24:07 +0000
ROA not after:            Wed 28 Jan 2026 22:29:07 +0000
asID:                     270431
IP address blocks:        2804:6be0:700::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:b7:28:aa:76:e5:00:d6:be:55:2f:33:db:b8:cb:22:c8:4d:75:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A3155CF09025C706805077AAA5B01CEBAB508F3
        Validity
            Not Before: Jan 29 22:24:07 2025 GMT
            Not After : Jan 28 22:29:07 2026 GMT
        Subject: CN=C430A7B5D38BE4FEA67791E0ACCE180CDE92355E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e3:5d:15:47:5a:04:08:55:ae:0c:6a:59:79:
                    dd:67:b2:d3:93:fe:b2:f9:0e:04:82:20:47:3f:26:
                    3a:1f:25:60:5e:36:44:76:78:6e:83:04:92:5e:07:
                    cd:59:3b:cc:e9:47:cc:a5:85:74:a6:87:32:f6:92:
                    e8:8b:c0:51:3f:01:b2:72:ee:7b:00:3b:f8:31:9c:
                    a3:94:04:74:01:c3:a5:ad:82:b7:de:c8:72:97:d8:
                    5e:8c:47:10:4a:78:1d:64:99:2f:b7:00:9a:81:99:
                    ce:10:b1:fe:97:c4:7c:c4:9c:5b:d3:58:d8:80:68:
                    f6:2c:c3:e4:7c:ee:72:48:a2:1e:04:0f:01:50:f3:
                    6e:5c:46:8f:c4:88:1c:bc:a8:aa:95:5e:c4:77:0b:
                    8a:5a:72:86:01:6e:60:30:18:ed:1a:3c:87:d9:34:
                    7a:b5:75:45:64:c6:78:cf:69:9a:08:3c:48:7d:a5:
                    5e:d5:ad:70:35:cb:05:5b:d2:b8:af:21:cc:e8:8c:
                    dd:10:79:8d:18:d5:b9:2b:4a:1d:e9:9b:ec:98:5c:
                    e2:ae:1e:b5:be:3e:87:a2:c7:2d:17:f4:4a:76:0d:
                    d7:69:42:0d:56:81:cf:23:1c:83:25:2c:19:90:d5:
                    bd:d5:9a:bb:68:ab:ca:a5:68:65:b1:21:76:96:83:
                    ef:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:30:A7:B5:D3:8B:E4:FE:A6:77:91:E0:AC:CE:18:0C:DE:92:35:5E
            X509v3 Authority Key Identifier:
                keyid:7A:31:55:CF:09:02:5C:70:68:05:07:7A:AA:5B:01:CE:BA:B5:08:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3TxE1YqYsXZV25FMLMmP3mHVukZzyqGtJ2aYVKtYnG6T/0/7A3155CF09025C706805077AAA5B01CEBAB508F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3155CF09025C706805077AAA5B01CEBAB508F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3TxE1YqYsXZV25FMLMmP3mHVukZzyqGtJ2aYVKtYnG6T/0/323830343a366265303a3730303a3a2f34302d3430203d3e20323730343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6be0:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         1a:c5:03:89:08:cd:67:1f:0c:f4:14:e6:2c:4e:47:31:a6:c9:
         a0:df:70:98:f1:dc:5a:bc:fa:8e:91:5a:6b:a6:4c:f2:b3:ef:
         22:cb:6c:e6:f1:8f:44:49:0c:36:43:a2:db:1d:36:23:fa:c7:
         0a:f8:2f:cf:93:3c:00:28:8b:f4:e7:45:31:47:bb:f3:62:96:
         6a:2b:e7:4c:ea:53:dc:5c:0e:57:1f:35:60:4e:ec:24:33:58:
         12:01:2a:2c:4e:ca:44:45:d4:26:22:c4:33:05:09:2a:1b:6d:
         6c:63:4e:66:9f:f6:d2:50:86:eb:b8:8b:96:aa:23:3a:e2:a7:
         b1:b0:f0:d0:2c:77:10:4c:45:a9:b7:ae:1b:d6:60:1a:46:e7:
         5e:5e:70:d1:d2:33:ae:bb:9b:85:d0:32:dc:49:d6:0f:7f:0c:
         1b:76:bd:ab:3c:17:e0:4e:36:2a:73:0b:4d:94:68:87:3f:a6:
         49:2a:3d:e9:67:1d:0c:2c:3a:7b:45:51:b4:48:30:d3:3f:02:
         8b:68:01:73:5b:4a:50:a9:e1:ce:2c:94:d7:86:2b:50:6a:fe:
         75:7b:6b:73:c8:79:20:81:65:71:48:f5:22:fe:63:8d:ea:2b:
         c2:86:cf:49:d7:f3:78:8d:65:86:e3:25:b9:30:d5:6a:4c:68:
         8b:86:af:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:35:56 2025 by rpki-client