Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a363030383a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a363030383a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          SRszxoxH14form7C64UszeeO/km2HNzxNyMaxhRGMAg=
Subject key identifier:   A3:8B:E9:FF:02:96:D4:10:19:D1:DB:E8:02:2D:87:87:94:A0:3E:61
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       52424845DC6EDBACF35D0BF3B027187881FBAF33
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a363030383a3a2f34382d3438203d3e203532373036.roa
Signing time:             Tue 10 Dec 2024 12:39:43 +0000
ROA not before:           Tue 10 Dec 2024 12:34:43 +0000
ROA not after:            Tue 09 Dec 2025 12:39:43 +0000
asID:                     52706
IP address blocks:        2804:c70:6008::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:42:48:45:dc:6e:db:ac:f3:5d:0b:f3:b0:27:18:78:81:fb:af:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Dec 10 12:34:43 2024 GMT
            Not After : Dec  9 12:39:43 2025 GMT
        Subject: CN=A38BE9FF0296D41019D1DBE8022D878794A03E61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f3:01:80:e7:41:68:ad:27:93:62:a2:55:b4:
                    51:37:61:75:64:d5:9c:1c:4d:38:76:48:23:91:37:
                    82:0c:5d:c9:a2:05:a6:ed:ee:27:4a:75:f4:b1:41:
                    a1:de:c2:d3:a2:d2:b9:8a:3b:82:95:6b:f9:33:93:
                    a6:b2:95:95:60:6d:cb:29:22:59:5f:b9:d4:be:40:
                    df:e6:97:e2:75:c5:50:e6:d3:3c:48:9c:ac:bf:bf:
                    76:69:f5:11:4f:54:71:2b:96:51:6c:4b:b4:27:d6:
                    c5:67:f3:19:8e:9e:1f:d7:4a:1a:c6:85:d2:70:d1:
                    28:11:1b:17:f2:86:00:10:d7:c1:97:de:21:dd:62:
                    5f:15:5d:1b:3e:98:35:49:a2:07:f3:48:df:3f:f3:
                    7c:0e:ff:61:8f:82:3c:8f:2c:57:3e:7d:8c:a5:6e:
                    c1:13:bb:25:f5:38:6a:1e:58:a5:f5:2a:d8:75:6f:
                    6b:6d:3f:cb:1f:1c:bc:7e:98:b6:96:35:c5:06:68:
                    71:3f:92:98:bb:a6:90:10:25:6b:16:b8:88:12:96:
                    02:28:e6:d9:fd:3d:83:0b:b6:08:e5:ee:cd:8d:bb:
                    f4:4c:b4:3a:40:35:c8:ec:08:bb:e7:2e:8d:18:5c:
                    a2:21:ca:c1:32:a8:64:3f:6e:1e:bd:8a:21:78:bf:
                    51:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:8B:E9:FF:02:96:D4:10:19:D1:DB:E8:02:2D:87:87:94:A0:3E:61
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a363030383a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:6008::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:53:ce:6d:fe:14:a5:63:0a:06:06:07:0c:6c:47:e8:ab:86:
         fb:36:0b:4a:44:85:e0:1a:ff:e9:62:ad:11:ee:31:3f:50:a1:
         73:d0:b1:c5:c6:5c:ee:2a:4e:a2:ae:44:ba:45:61:e9:71:73:
         cf:0d:16:c3:41:5a:b8:99:36:81:bc:d4:2e:6a:1c:30:1f:e0:
         0a:5e:8e:61:20:64:d4:26:d1:54:4d:7f:b1:17:ec:b5:6f:9b:
         26:f4:ec:be:18:91:b8:64:36:5b:e6:dc:8a:4d:0d:6d:ff:24:
         99:92:85:18:80:e9:ee:92:0e:1e:e3:c5:50:9d:fe:d3:26:c1:
         41:07:63:bd:10:6f:9a:09:b1:87:d4:bd:16:88:dd:8b:d1:8b:
         2f:b1:16:5e:18:a0:b9:45:47:56:b9:30:f7:2d:4c:0f:ce:ca:
         f6:73:d6:40:5e:06:a3:7f:d0:1e:1d:7f:7d:9f:44:42:a1:20:
         ad:ea:b4:14:38:cd:d1:a9:9e:dd:6d:78:22:b6:5b:f2:8c:5e:
         4e:4f:82:90:8d:63:e5:20:45:60:29:b1:f6:d8:99:bf:ab:57:
         37:95:52:7a:d2:2a:37:77:9f:6c:4d:10:ee:dd:c2:65:b2:4f:
         37:7a:26:8f:d8:b4:61:d8:40:ad:28:09:3f:b7:4e:12:e8:82:
         52:85:68:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:58:59 2025 by rpki-client