Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a383030313a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a383030313a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          RAU8nKWhk6aXuPAsw0VUfOcnuQCQF5Ubfp/PBQOzQV4=
Subject key identifier:   21:BF:2F:5A:07:D9:75:7D:85:44:39:66:1C:55:14:CB:60:CE:25:F5
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       2603939E4F6F4CF48F16B8189FC753AFA592CFF6
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a383030313a3a2f34382d3438203d3e203532373036.roa
Signing time:             Thu 06 Mar 2025 02:31:46 +0000
ROA not before:           Thu 06 Mar 2025 02:26:46 +0000
ROA not after:            Thu 05 Mar 2026 02:31:46 +0000
asID:                     52706
IP address blocks:        2804:c70:8001::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:03:93:9e:4f:6f:4c:f4:8f:16:b8:18:9f:c7:53:af:a5:92:cf:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Mar  6 02:26:46 2025 GMT
            Not After : Mar  5 02:31:46 2026 GMT
        Subject: CN=21BF2F5A07D9757D854439661C5514CB60CE25F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9c:84:f1:d8:76:df:90:db:18:54:bf:9d:99:
                    43:6e:2a:97:e9:8b:7f:78:fe:29:f5:30:90:6c:e8:
                    5a:9d:b1:7d:5a:3e:3e:00:5a:b2:32:42:18:81:a8:
                    b7:d5:bc:03:34:79:0a:b5:b4:c3:6f:e7:92:f5:96:
                    cc:bc:b1:17:37:2b:2b:d5:88:75:a3:3a:f2:eb:c3:
                    19:a7:df:21:ea:1c:53:0a:4e:7c:ff:79:4f:d7:b2:
                    96:e3:c7:8c:ad:af:eb:01:f4:50:7a:96:10:89:8f:
                    c5:f9:bb:df:1d:da:24:d5:8b:07:bf:a4:3e:d6:90:
                    54:13:e3:4b:f4:b5:9a:4e:79:03:fa:41:f1:08:8c:
                    e8:f3:0f:9c:b2:5b:00:0d:60:7a:88:5e:02:0a:49:
                    ad:9b:97:2d:04:6b:c9:b3:d7:0b:25:80:aa:a7:a7:
                    12:7b:95:8c:c4:8e:27:e3:94:4d:22:54:d2:e1:31:
                    02:62:65:a8:e9:32:7a:d4:a1:81:4b:9f:ee:ae:1d:
                    c4:3a:61:99:71:36:4b:29:e5:5f:59:4f:eb:83:55:
                    28:1f:f9:05:f0:af:7d:95:29:ef:f7:53:f7:fc:28:
                    ad:69:48:73:8e:b3:18:ac:e5:7d:3a:90:d8:b8:d8:
                    ff:18:bf:91:49:9a:c1:a3:0f:66:ba:ae:90:03:8e:
                    1f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:BF:2F:5A:07:D9:75:7D:85:44:39:66:1C:55:14:CB:60:CE:25:F5
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a383030313a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:8001::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:02:95:90:61:5c:ca:2e:7f:35:bb:bc:e4:40:99:cc:46:4d:
         4d:ad:16:8f:fa:1a:0d:fe:2d:7b:bd:4d:d3:6d:4d:b0:b1:c4:
         12:68:35:9d:3f:f5:1f:35:cc:58:4c:aa:7f:3f:1b:b4:9b:8c:
         55:0c:ce:b4:9a:ff:e3:9c:b6:31:b8:6f:92:b5:9f:2a:b6:15:
         22:26:2b:52:a2:2a:3c:c5:4f:6a:48:c6:38:fc:ae:9e:8d:7e:
         63:79:6d:be:e2:d9:d5:88:b4:74:c1:d7:77:55:5c:70:e4:c8:
         1d:00:3d:69:d6:1b:bd:8c:80:0c:6f:d6:a4:a6:40:1f:9a:43:
         6c:56:bb:e9:49:b8:b4:d0:3f:bf:d3:1d:48:64:05:48:47:da:
         9a:d2:07:bb:64:5e:cf:37:13:f9:96:ce:e4:db:a0:0f:16:41:
         0d:c6:82:f5:9c:c3:5f:fd:ad:ae:fc:5c:48:0b:66:b2:08:5a:
         dd:ac:1f:74:34:06:30:a3:74:39:f5:97:55:36:c1:24:3e:bb:
         8b:c7:ed:31:c7:72:1e:dd:ee:d6:99:59:41:cb:79:09:24:87:
         07:bb:21:5c:98:d1:3c:9b:e3:29:a2:78:52:40:82:30:ce:af:
         d1:8f:2f:76:bc:ce:e0:82:12:0f:53:12:3b:ab:34:57:34:67:
         3a:8e:45:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 21:01:39 2025 by rpki-client