Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a363030333a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a363030333a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          3CT/CthnlebZlDlLJagGFjwvX4N26eEIQpK08Hcgt8c=
Subject key identifier:   E1:ED:DD:70:4B:72:6D:98:C9:C0:54:54:AC:DA:17:47:41:E9:35:8D
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       3C1DFFC28A109AC55D6C91F22D186EF72663A292
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a363030333a3a2f34382d3438203d3e203532373036.roa
Signing time:             Thu 06 Mar 2025 02:31:43 +0000
ROA not before:           Thu 06 Mar 2025 02:26:43 +0000
ROA not after:            Thu 05 Mar 2026 02:31:43 +0000
asID:                     52706
IP address blocks:        2804:c70:6003::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:1d:ff:c2:8a:10:9a:c5:5d:6c:91:f2:2d:18:6e:f7:26:63:a2:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Mar  6 02:26:43 2025 GMT
            Not After : Mar  5 02:31:43 2026 GMT
        Subject: CN=E1EDDD704B726D98C9C05454ACDA174741E9358D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ec:e5:fb:77:e4:55:a3:41:c2:9c:3a:3c:75:
                    ea:ef:c1:84:7a:df:46:8a:86:ed:7e:9f:d9:5b:73:
                    5a:0d:59:91:12:09:06:eb:da:d9:57:df:88:cc:74:
                    45:8a:30:77:3c:6f:b2:71:8a:e4:4f:e9:11:e2:97:
                    5b:0a:eb:8e:57:90:d4:9b:a4:45:56:e6:85:7d:10:
                    3c:cb:c2:01:3c:cb:e3:08:58:f7:02:1d:a5:87:68:
                    cb:c1:a4:92:48:8e:5b:f9:4b:88:0b:4a:0d:6d:63:
                    94:52:a3:4d:9e:4e:fe:db:f3:0c:1f:1a:6d:86:78:
                    4d:97:49:65:a3:2c:ac:b1:84:a9:b3:99:d4:91:ae:
                    a7:16:96:6f:f6:48:48:90:e8:8e:ba:80:ab:0a:36:
                    b1:2f:e7:e9:3a:ab:a6:43:dc:56:93:6c:f7:0b:0e:
                    ba:08:0f:97:4c:73:bd:9d:b8:db:e7:1d:c3:7e:47:
                    3d:63:d4:f6:94:4c:06:c0:7b:b8:d0:e8:af:95:93:
                    4d:52:4a:47:aa:9e:6a:f7:b2:01:9a:3b:87:92:ac:
                    11:bd:02:7d:ad:05:d0:17:3e:a6:28:e0:08:94:da:
                    4a:1d:40:61:3e:56:fd:6a:07:c3:9e:5d:89:20:d0:
                    57:70:20:69:8a:f1:31:1d:d2:34:92:f2:0b:22:3a:
                    dc:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:ED:DD:70:4B:72:6D:98:C9:C0:54:54:AC:DA:17:47:41:E9:35:8D
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a363030333a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:6003::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:84:c2:f5:15:67:00:d3:b5:92:8b:b2:4e:14:88:1f:e9:0e:
         22:10:88:84:81:37:fb:74:43:f5:a3:94:7a:54:86:94:e8:9a:
         12:ad:45:02:fa:bb:3d:46:ab:29:90:38:9b:96:00:89:c2:6c:
         5d:f6:9c:c3:c6:96:fb:16:0a:59:c7:f2:23:c2:3f:5c:26:a1:
         45:99:73:2e:aa:4e:0c:b8:83:21:02:bd:b1:a3:de:9d:20:34:
         52:e0:36:03:92:4f:bc:d9:db:59:16:9b:2f:f3:11:b6:9a:21:
         d5:b1:5f:42:78:f7:f2:e7:17:6b:62:a8:63:fd:d8:9a:7a:20:
         0c:78:0f:fb:12:2e:f2:47:b3:66:d5:d6:ed:c6:d9:04:31:36:
         e7:21:ad:1a:5b:7f:f4:0d:b2:61:d6:73:58:68:b2:a4:ca:9a:
         12:7c:61:df:3d:88:28:69:79:03:92:4c:ac:91:4b:4c:ca:06:
         8b:9f:cd:3f:d8:47:e3:95:6b:18:d8:32:b0:9c:bc:99:15:cb:
         00:f3:20:a7:23:1d:5f:27:d9:1a:ac:fd:0e:27:05:2b:18:56:
         c2:92:7d:bf:7e:7c:25:88:64:b7:b3:33:be:ee:6d:ab:0a:2e:
         4c:74:05:08:a4:61:d3:ff:f7:47:92:b6:7a:59:58:ba:25:00:
         3f:65:eb:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:56:09 2025 by rpki-client