Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a363030393a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a363030393a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          rOc+/N4I395XBzgxmzftXb+Ee5jYsDabLsRAjaPUMj8=
Subject key identifier:   EB:DE:F5:D0:C2:67:66:CF:25:4E:48:07:CE:B1:78:A4:93:3D:6B:0E
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       03F91A3101B442953BCE11A354183003EBB6EC93
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a363030393a3a2f34382d3438203d3e203532373036.roa
Signing time:             Thu 02 Jan 2025 17:27:28 +0000
ROA not before:           Thu 02 Jan 2025 17:22:28 +0000
ROA not after:            Thu 01 Jan 2026 17:27:28 +0000
asID:                     52706
IP address blocks:        2804:c70:6009::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:f9:1a:31:01:b4:42:95:3b:ce:11:a3:54:18:30:03:eb:b6:ec:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Jan  2 17:22:28 2025 GMT
            Not After : Jan  1 17:27:28 2026 GMT
        Subject: CN=EBDEF5D0C26766CF254E4807CEB178A4933D6B0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:cd:3b:a5:ed:37:7b:41:d7:01:0b:a1:ae:fa:
                    6f:61:45:32:26:b4:6d:5b:fa:b0:66:9d:68:05:64:
                    c4:30:28:17:fc:66:bb:12:10:c8:9e:45:f9:4f:60:
                    9f:09:ef:29:ac:14:0f:f6:59:1a:77:4a:d9:52:43:
                    b2:fd:bf:a8:9f:cf:65:1c:b6:48:0f:af:71:c9:bc:
                    80:6f:0f:34:6b:9e:bd:f6:53:c2:bb:f6:54:c1:7c:
                    0e:50:e8:f5:a7:81:59:2c:16:12:6c:41:5a:99:d8:
                    3d:a4:e5:1a:bb:fd:b3:a9:9c:b3:17:4f:6e:9f:6e:
                    3f:1a:e5:ed:58:5f:25:f4:a8:04:5e:0a:2d:6e:68:
                    67:86:4e:2e:b9:59:90:7e:d5:2b:87:e8:88:41:01:
                    b6:17:c4:b7:f5:5b:57:9d:58:8f:ee:5b:e7:78:a9:
                    5b:16:84:14:39:f6:cc:17:86:88:7d:af:98:73:16:
                    e8:f1:46:92:7e:8f:59:e2:ec:1e:50:74:07:36:f3:
                    d2:5f:26:6d:09:5e:3c:2e:e3:34:ff:d3:a3:18:4c:
                    ef:6b:96:65:12:58:22:9e:51:94:5a:c2:a5:a0:51:
                    5c:98:c4:b1:bc:97:c5:c9:fd:ef:38:8d:16:b7:85:
                    1a:a2:21:75:c7:fa:02:6a:ff:22:f2:7b:2b:b8:63:
                    48:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:DE:F5:D0:C2:67:66:CF:25:4E:48:07:CE:B1:78:A4:93:3D:6B:0E
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a363030393a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:6009::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:e5:c3:7b:58:42:a5:d1:5b:43:d6:bd:6b:6e:8f:dc:b5:db:
         8b:1f:3a:37:ec:69:f2:8f:c1:33:84:79:1b:dc:7b:86:13:6d:
         42:13:ce:05:a0:94:5a:fc:a7:6a:2c:f9:f9:de:0f:08:80:d9:
         dc:55:53:1a:18:75:ad:e7:b9:6f:aa:75:4f:52:10:b4:dc:89:
         b8:41:1f:bc:17:c8:b3:39:9e:b7:dc:c4:33:73:5e:39:4a:06:
         c9:3d:b2:4f:56:cb:a9:32:db:27:b2:3f:f0:0b:a7:a3:08:ac:
         ce:68:aa:e7:60:cf:6b:c5:a3:95:6b:83:65:18:95:64:47:e9:
         5e:cd:20:4d:99:f1:e4:f7:ad:13:63:3d:71:24:e3:42:52:21:
         3b:45:ad:a4:b9:d5:0c:16:3e:13:43:61:68:95:67:2b:07:8e:
         8a:9b:c3:71:64:9e:f4:26:0b:fb:0a:62:d8:04:51:ed:cd:ea:
         52:b9:35:f7:f0:16:fe:18:19:70:f9:0f:d5:08:59:e5:90:ef:
         3b:1a:6d:78:eb:6a:c8:1c:f4:86:a0:b2:25:96:27:9a:83:83:
         d0:84:9e:30:ad:be:5c:bb:10:a3:0a:4b:e1:d1:72:f0:c6:f6:
         99:0c:a7:5a:22:f8:e7:24:d5:92:77:02:ba:db:67:55:eb:ab:
         1a:47:15:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:58:59 2025 by rpki-client