Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a333a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a333a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          j8ztwFYs0rdvApGvSxbkK2lVGhAQdNSSPg/HI5LZpX0=
Subject key identifier:   41:D9:7A:52:E5:E0:BF:C6:EF:55:42:24:1C:C6:7C:F7:19:48:00:D6
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       1CF1B319FAC1C7A9AF6A2742111875B62ED1C46F
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a333a3a2f34382d3438203d3e203532373036.roa
Signing time:             Thu 06 Mar 2025 02:31:40 +0000
ROA not before:           Thu 06 Mar 2025 02:26:40 +0000
ROA not after:            Thu 05 Mar 2026 02:31:40 +0000
asID:                     52706
IP address blocks:        2804:c70:3::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:f1:b3:19:fa:c1:c7:a9:af:6a:27:42:11:18:75:b6:2e:d1:c4:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Mar  6 02:26:40 2025 GMT
            Not After : Mar  5 02:31:40 2026 GMT
        Subject: CN=41D97A52E5E0BFC6EF5542241CC67CF7194800D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:de:e6:83:17:fe:16:a2:15:ff:60:7b:3a:f3:
                    2d:fe:48:1a:46:3e:8f:50:17:e6:16:e4:38:14:ca:
                    b4:55:fd:fb:cf:62:4a:3c:c1:f3:b1:31:73:d1:6c:
                    07:77:93:90:bf:ea:34:cc:20:0e:3a:1d:90:2e:ae:
                    2f:e2:c4:2f:de:81:8d:29:27:cc:8b:1a:83:19:e8:
                    d3:68:ad:71:ca:98:80:c2:cf:ff:c6:d3:90:b1:f1:
                    39:ee:55:7b:6c:bf:63:d8:60:3c:73:e7:3b:4d:b6:
                    07:5a:3e:7c:e1:8f:c6:5a:5a:fd:b4:42:68:da:f9:
                    33:21:ae:30:c4:5a:83:d2:71:e4:63:07:b8:79:84:
                    d6:a3:aa:b4:bf:34:24:01:ce:81:40:fc:bd:4e:5c:
                    5c:23:51:df:ce:ac:42:76:d5:5b:9a:fc:f2:21:ed:
                    b4:5e:e1:87:5f:86:e1:15:e6:ef:fd:a3:ce:35:0a:
                    af:b9:de:b2:be:6f:8d:8a:69:f4:7b:28:c6:7d:d1:
                    f2:aa:60:af:e1:42:62:d5:12:da:be:2a:a3:15:53:
                    23:ca:92:b0:2a:d2:43:28:8b:9f:81:35:33:46:01:
                    ee:20:79:f1:84:7c:a5:7e:ce:82:4a:26:ee:b1:c0:
                    fd:93:da:4f:06:8e:f0:20:b4:63:22:14:af:da:41:
                    ec:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D9:7A:52:E5:E0:BF:C6:EF:55:42:24:1C:C6:7C:F7:19:48:00:D6
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a333a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         b2:07:cc:90:10:19:06:a0:08:a3:fa:84:75:0d:40:79:8a:cb:
         61:85:51:5a:3a:40:83:40:fa:50:76:23:10:b5:0c:23:9e:00:
         87:ca:22:a7:91:0a:4c:53:37:87:c5:3f:ef:6a:76:2a:8a:45:
         c1:fb:62:ba:b4:3a:a6:4b:00:6e:0a:f6:a1:02:dd:0d:07:ee:
         38:cf:7e:b9:2a:7a:6f:10:25:4e:3f:f9:d2:1e:25:f7:8f:1e:
         bd:34:41:c9:30:9c:78:2f:9b:58:a6:db:95:62:1e:ae:c4:bd:
         e1:0f:57:f0:b5:e6:db:90:07:e4:8b:a0:23:90:ef:c4:be:aa:
         44:0a:1d:72:d8:e8:ad:e4:ae:c4:37:6f:8e:b2:86:17:94:51:
         c7:37:5b:57:15:02:4b:b5:b2:cf:b0:c0:ce:01:e3:f6:15:84:
         7e:f5:d9:b2:b3:54:a8:2b:7e:1c:11:98:ef:06:85:74:55:de:
         a4:d0:e5:5b:78:d5:c3:f0:f5:5b:14:2c:05:4d:97:23:4e:f4:
         65:b7:39:ec:c2:bc:bb:f0:fb:ee:cd:19:9d:86:ba:6b:9a:60:
         d7:d6:6a:0b:9c:7c:36:ee:a2:80:da:e7:2a:5e:1b:3a:c1:29:
         95:95:70:91:f8:60:0c:71:bd:06:24:d8:d3:84:a7:51:b4:f2:
         c1:da:be:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:53:00 2025 by rpki-client