Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a323030303a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a323030303a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          chuegYBCteJJ2DFJfK6xclaMR9GpKa0h9Y7XFl4rf5g=
Subject key identifier:   AF:8D:EE:53:C6:56:26:B6:12:D6:38:E5:22:24:8F:29:98:37:B7:49
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       0C80A4F10349F4BD93B2B0CFBFEF2363614AE6E1
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a323030303a3a2f34382d3438203d3e203532373036.roa
Signing time:             Thu 06 Mar 2025 02:31:45 +0000
ROA not before:           Thu 06 Mar 2025 02:26:45 +0000
ROA not after:            Thu 05 Mar 2026 02:31:45 +0000
asID:                     52706
IP address blocks:        2804:c70:2000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:80:a4:f1:03:49:f4:bd:93:b2:b0:cf:bf:ef:23:63:61:4a:e6:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Mar  6 02:26:45 2025 GMT
            Not After : Mar  5 02:31:45 2026 GMT
        Subject: CN=AF8DEE53C65626B612D638E522248F299837B749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b9:95:0e:33:2c:be:4c:8c:f4:e9:7a:d0:f4:
                    e5:31:27:2c:98:ba:5d:5a:8c:5b:6a:14:74:25:77:
                    35:4f:86:da:66:b6:e3:3c:79:41:67:2f:cf:e5:a3:
                    29:34:93:2a:65:e1:f4:e1:d1:4d:35:de:f2:5c:c9:
                    cc:14:c6:95:1b:97:ed:ad:8f:94:38:6b:bd:fc:4d:
                    a7:ce:5e:c5:9d:68:27:32:fd:d8:18:c8:c6:c2:2a:
                    57:f2:4d:dc:f5:7d:ee:7f:71:f3:61:44:d8:5d:df:
                    90:4d:e7:d2:aa:ab:16:b3:d5:af:12:bd:95:20:38:
                    6c:2c:e9:47:ba:de:1a:95:9a:ec:66:78:9e:4a:59:
                    c9:b9:be:9d:30:c0:f6:de:4a:03:d4:18:7f:29:46:
                    06:e3:c5:1b:be:d5:04:15:88:c8:cd:81:0f:1f:55:
                    99:b5:9e:8b:76:b8:52:1a:87:ff:11:be:38:f6:76:
                    b4:c7:03:6b:88:fb:44:4c:6d:81:26:38:90:ff:4f:
                    a5:8f:44:39:03:9f:54:a8:5f:43:1b:a2:f1:ee:5a:
                    0b:80:19:fd:9d:ea:72:e7:2b:56:86:5e:9d:5f:e8:
                    6a:50:7b:e8:c3:d8:22:ac:22:61:8e:40:e9:3c:d6:
                    a2:a8:b3:74:8e:93:f4:47:cc:24:03:a8:11:3f:9e:
                    4b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:8D:EE:53:C6:56:26:B6:12:D6:38:E5:22:24:8F:29:98:37:B7:49
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a323030303a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:ce:11:bb:3e:03:93:07:13:df:c8:1e:6c:90:d5:70:77:ca:
         23:33:95:d1:94:af:99:b3:c5:6b:31:9a:69:ca:f5:c0:69:3f:
         b6:e0:87:24:db:04:15:43:bb:53:f5:f9:d0:de:86:15:74:17:
         39:f7:a6:39:ed:7d:d7:67:f9:42:9e:41:b9:c2:54:b4:d7:b4:
         a5:8d:1a:e0:a4:2e:a7:fb:b2:3b:46:71:28:a7:16:b1:0c:30:
         d9:31:0e:a6:18:23:08:10:6b:af:e7:3b:a6:18:d7:0d:2b:05:
         aa:d7:15:84:a4:68:b1:93:c5:24:26:fe:c3:fc:64:bd:50:2b:
         02:5e:6c:c6:06:71:28:e0:39:cd:ba:99:20:ee:1a:a7:0c:63:
         9f:01:86:fd:d6:6f:25:95:75:52:40:9c:87:9d:8d:5c:aa:89:
         86:dc:eb:cd:ba:88:9a:3e:28:10:59:18:09:d3:f1:f1:db:b6:
         c4:ac:eb:a3:3e:b0:a5:d1:01:4d:e6:b7:83:9e:72:ef:91:2e:
         aa:70:e9:a6:8c:b4:c1:c8:40:07:df:db:a8:32:0a:33:79:50:
         50:c4:e0:b8:8a:91:ea:c8:b0:b2:2e:26:5b:01:44:df:15:0a:
         96:3a:47:88:ea:71:c7:ef:51:0f:06:5a:af:4a:e3:51:cb:e7:
         7d:d2:e8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 21:06:56 2025 by rpki-client