Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4CZrGZg4WdsWfCoNEMXwxQiimacnNKWyKiioH95x4fxD/0/323830343a373864633a3a2f33322d3438203d3e20323731323730.roa
File:                     323830343a373864633a3a2f33322d3438203d3e20323731323730.roa (raw, json)
Hash identifier:          dBS2S5YmSDZAbUARBO7BeTjVEXZSwaXW8VWjDK/f9Wo=
Subject key identifier:   73:ED:37:D2:A4:2A:2C:FB:0C:EF:56:4A:25:DB:90:36:38:D5:40:E3
Certificate issuer:       /CN=E093E43EFCF4F6FBF1E53F145BC0B5A34A395773
Certificate serial:       45137E8F1498151D84B5C73E003E5E55469ACF77
Authority key identifier: E0:93:E4:3E:FC:F4:F6:FB:F1:E5:3F:14:5B:C0:B5:A3:4A:39:57:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E093E43EFCF4F6FBF1E53F145BC0B5A34A395773.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4CZrGZg4WdsWfCoNEMXwxQiimacnNKWyKiioH95x4fxD/0/323830343a373864633a3a2f33322d3438203d3e20323731323730.roa
Signing time:             Fri 20 Dec 2024 22:12:10 +0000
ROA not before:           Fri 20 Dec 2024 22:07:10 +0000
ROA not after:            Fri 19 Dec 2025 22:12:10 +0000
asID:                     271270
IP address blocks:        2804:78dc::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:13:7e:8f:14:98:15:1d:84:b5:c7:3e:00:3e:5e:55:46:9a:cf:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E093E43EFCF4F6FBF1E53F145BC0B5A34A395773
        Validity
            Not Before: Dec 20 22:07:10 2024 GMT
            Not After : Dec 19 22:12:10 2025 GMT
        Subject: CN=73ED37D2A42A2CFB0CEF564A25DB903638D540E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e2:ca:b3:fa:f4:f5:eb:c9:28:fc:88:c5:32:
                    ab:72:72:c3:6b:1b:17:c4:4d:fe:18:35:58:09:e3:
                    ab:1f:36:1c:1f:19:4b:6b:b2:d4:08:87:b0:6d:70:
                    0f:98:06:8e:50:78:98:42:e7:b0:31:cd:e3:1e:60:
                    bb:79:d5:63:b8:2f:70:8b:c8:ac:56:30:fd:0f:4b:
                    a3:1c:4b:fb:18:48:8a:6f:10:82:15:8e:43:17:d6:
                    0c:9d:f2:c2:ab:01:f5:b4:7e:f4:d1:bd:a7:05:f2:
                    11:70:b0:7b:1e:ab:0c:f3:6c:c6:67:aa:b9:bc:4b:
                    b0:66:43:7e:be:c4:a2:66:84:b5:f1:67:7f:a9:1b:
                    90:c3:15:af:67:1a:38:3d:b5:04:02:c7:78:03:76:
                    5c:ae:b2:d4:3e:31:92:85:7f:71:bf:4d:49:a2:6a:
                    f5:d3:0e:e9:45:03:33:f9:34:d7:ce:67:f3:5c:d7:
                    bd:6f:5d:1f:4f:89:c9:d6:ef:e2:d6:6d:75:a9:2f:
                    49:fd:19:e4:31:66:df:fe:36:e9:17:be:82:68:34:
                    70:36:14:29:0d:0d:27:96:18:6b:b9:c0:a7:5e:10:
                    70:03:c8:35:02:83:0a:90:65:d1:31:d8:4f:cb:aa:
                    80:2a:f1:c5:0d:af:95:4f:fe:ff:90:01:23:b3:86:
                    71:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:ED:37:D2:A4:2A:2C:FB:0C:EF:56:4A:25:DB:90:36:38:D5:40:E3
            X509v3 Authority Key Identifier:
                keyid:E0:93:E4:3E:FC:F4:F6:FB:F1:E5:3F:14:5B:C0:B5:A3:4A:39:57:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4CZrGZg4WdsWfCoNEMXwxQiimacnNKWyKiioH95x4fxD/0/E093E43EFCF4F6FBF1E53F145BC0B5A34A395773.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E093E43EFCF4F6FBF1E53F145BC0B5A34A395773.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CZrGZg4WdsWfCoNEMXwxQiimacnNKWyKiioH95x4fxD/0/323830343a373864633a3a2f33322d3438203d3e20323731323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:78dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:3f:6d:e4:77:1b:94:7b:a5:72:cf:a0:67:93:39:6d:f8:d8:
         e3:9e:c7:91:d0:70:1a:4c:50:54:49:db:ce:98:95:86:87:df:
         ad:b8:f1:e7:92:0b:e7:e9:68:4b:5b:e9:c3:a4:40:e2:ae:25:
         98:e6:a2:c8:3f:19:d4:93:a4:11:bf:6a:41:e2:08:f7:94:ec:
         33:80:cf:47:87:e3:a2:f0:04:5a:21:61:0c:9a:15:b7:14:0a:
         0a:54:c5:ef:fb:9d:31:05:0b:fb:06:26:d6:78:7b:91:e0:8c:
         e4:1b:74:0d:5c:86:46:fb:ee:18:40:b5:81:5d:9c:98:a1:8e:
         97:fa:93:2d:5a:7a:a5:85:44:f2:5e:18:b0:01:02:61:99:dc:
         49:34:d1:c5:05:6c:7b:df:7c:1a:4e:8b:79:20:31:66:1f:9d:
         47:4b:14:2c:eb:8b:f2:1b:86:93:cf:4e:e8:29:b6:55:17:c8:
         87:d2:bc:02:3c:15:9e:08:3a:0d:43:ad:09:ae:5f:42:35:2c:
         8a:c8:0f:3e:87:b1:c7:88:5c:61:b2:2f:47:7e:7f:b7:6b:ad:
         c9:90:e3:1b:07:8c:73:65:be:2a:b0:0e:b3:76:73:1f:47:78:
         cf:f6:ef:c1:a8:8a:78:26:4c:51:16:2a:e1:bc:f4:05:4c:fc:
         bf:cd:6f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:02:43 2025 by rpki-client