Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a383030373a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a383030373a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          tB8JcSWfaaIsUjPu+Ur9PiukqDzlelgpjuZSpt7+47k=
Subject key identifier:   24:AA:BC:82:5D:E6:86:AC:02:5D:3F:25:F5:02:78:0A:A6:85:1E:18
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       4A6829597E03E3A5951F24157DDF4F37CBFF51ED
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a383030373a3a2f34382d3438203d3e203532373036.roa
Signing time:             Thu 06 Mar 2025 02:31:41 +0000
ROA not before:           Thu 06 Mar 2025 02:26:41 +0000
ROA not after:            Thu 05 Mar 2026 02:31:41 +0000
asID:                     52706
IP address blocks:        2804:c70:8007::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:68:29:59:7e:03:e3:a5:95:1f:24:15:7d:df:4f:37:cb:ff:51:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Mar  6 02:26:41 2025 GMT
            Not After : Mar  5 02:31:41 2026 GMT
        Subject: CN=24AABC825DE686AC025D3F25F502780AA6851E18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:21:a3:24:bf:ce:d7:fb:84:d3:40:2f:4b:9c:
                    ea:af:a7:b5:0d:f1:a4:b9:d6:69:55:e6:f1:a7:da:
                    d2:18:3a:62:5c:1a:4c:01:c5:f0:92:e2:da:27:a4:
                    82:e3:32:c7:d0:2f:29:07:7c:dc:99:ad:63:54:4a:
                    31:b8:1d:58:be:2e:4b:2b:67:0c:6b:3a:4b:43:12:
                    dd:ac:9f:53:f4:9f:e1:a6:d3:d7:75:af:01:52:d1:
                    fd:9a:bf:1e:22:56:d6:6a:2f:d6:32:85:8c:a9:03:
                    a6:61:37:64:2c:b2:48:f2:b0:d6:6d:c3:ee:8d:17:
                    18:3b:87:94:9d:a3:bc:26:73:32:da:95:d0:d9:d5:
                    59:76:3f:32:9a:c7:c4:83:16:8d:dd:ae:3c:63:5d:
                    c8:cd:f5:27:a3:b3:b8:02:d6:4b:06:88:9d:e1:59:
                    11:d7:9c:f5:e9:80:74:70:66:fe:32:a1:f7:9e:fa:
                    aa:9f:a7:b5:94:a5:66:4c:f4:fd:4b:a2:ce:cc:8a:
                    d7:b2:1c:5c:f0:b5:d1:12:38:85:7f:b1:2b:48:e6:
                    f2:3a:a6:8c:54:ad:f4:03:13:a4:41:77:ab:10:b5:
                    50:b7:0d:86:bf:a4:a9:6b:78:9b:e3:f1:6a:48:ba:
                    f1:92:7d:de:c0:ec:e3:1a:2c:b6:8d:37:f8:e2:f5:
                    00:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:AA:BC:82:5D:E6:86:AC:02:5D:3F:25:F5:02:78:0A:A6:85:1E:18
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a383030373a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:8007::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:47:da:ab:3f:9d:06:dd:d2:cf:c1:14:74:af:ad:bf:b2:c6:
         d9:56:e5:cf:f4:94:f2:d7:42:ed:b5:23:ce:09:a7:fa:7e:a7:
         a7:da:4d:b5:bc:b3:8f:04:95:78:f3:6f:c8:26:0d:9f:5a:bf:
         12:d8:50:13:41:f4:55:bd:84:68:3c:2c:31:cf:bf:1d:4e:b8:
         ac:c8:72:dc:47:96:ae:15:fe:32:e3:eb:30:d3:26:7d:1d:d6:
         8c:5b:95:c6:bc:ef:37:62:64:63:6b:19:41:24:34:29:b0:1a:
         8c:b9:f1:64:df:bf:58:4b:f2:50:22:ab:95:11:ce:cf:f6:f8:
         20:2a:70:56:8b:01:82:01:76:13:07:b8:4b:a3:ce:7a:96:df:
         95:ff:70:50:9f:91:80:c2:39:93:df:ce:07:43:19:e4:99:e3:
         d2:f4:83:b5:d7:19:b7:6f:bb:35:a1:e7:a6:34:c6:0e:f2:60:
         fb:5d:89:e1:6c:43:64:fc:7f:9a:4a:c2:e9:e1:11:fa:5f:f8:
         9c:d1:b8:1c:97:ff:2d:3f:21:8b:81:83:f8:4f:db:04:3b:66:
         de:2d:c2:e7:85:cc:9c:d5:6d:e2:36:1e:6d:83:ca:fd:31:3e:
         cb:82:e6:3a:0d:42:86:6e:82:e4:b1:17:01:f0:85:fd:3d:55:
         dd:61:e2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 21:06:57 2025 by rpki-client