Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/323830343a376334303a3330303a3a2f34302d3430203d3e20323731343834.roa
File:                     323830343a376334303a3330303a3a2f34302d3430203d3e20323731343834.roa (raw, json)
Hash identifier:          M2OHNyHYafPHAeIhRu2d+ofzCgbs7HAWooObGlHNvis=
Subject key identifier:   E5:71:70:90:BE:4A:8A:65:CD:AB:84:C9:B4:25:09:E3:66:07:27:C5
Certificate issuer:       /CN=3B5BBCE7F8F28C41BFC307B8430A56A16C67E800
Certificate serial:       6C75DF707A244295DB8E9A1A64C0E7DFA2C1DBA3
Authority key identifier: 3B:5B:BC:E7:F8:F2:8C:41:BF:C3:07:B8:43:0A:56:A1:6C:67:E8:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5BBCE7F8F28C41BFC307B8430A56A16C67E800.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/323830343a376334303a3330303a3a2f34302d3430203d3e20323731343834.roa
Signing time:             Thu 13 Mar 2025 15:10:47 +0000
ROA not before:           Thu 13 Mar 2025 15:05:47 +0000
ROA not after:            Thu 12 Mar 2026 15:10:47 +0000
asID:                     271484
IP address blocks:        2804:7c40:300::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:75:df:70:7a:24:42:95:db:8e:9a:1a:64:c0:e7:df:a2:c1:db:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B5BBCE7F8F28C41BFC307B8430A56A16C67E800
        Validity
            Not Before: Mar 13 15:05:47 2025 GMT
            Not After : Mar 12 15:10:47 2026 GMT
        Subject: CN=E5717090BE4A8A65CDAB84C9B42509E3660727C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:26:f0:3c:df:c4:6a:e3:f4:24:93:97:95:9f:
                    fa:ce:67:d6:ab:f5:ca:a6:72:83:43:8f:3f:aa:75:
                    d8:7d:70:13:18:c6:7e:de:29:66:e5:cc:79:3d:21:
                    7c:c5:94:8d:58:cf:b6:66:76:fe:39:89:f3:17:a4:
                    41:38:48:0e:ea:c0:5c:f5:c6:92:d2:2f:27:4d:50:
                    7a:ad:32:ec:52:76:16:a6:da:eb:c1:7a:4b:07:ee:
                    60:01:95:7a:f7:7c:b9:ef:94:18:ed:84:8a:81:ec:
                    1e:2c:30:fa:89:1e:94:61:31:5d:1e:5e:7a:af:29:
                    80:a6:09:85:e1:53:94:c5:13:71:23:98:7c:38:72:
                    ad:fc:eb:99:f2:d1:eb:c3:c1:76:29:da:91:c2:32:
                    eb:e0:46:ea:a6:f9:a0:41:16:57:99:85:82:e8:71:
                    c1:b5:8d:2d:bd:03:2b:82:08:b0:55:38:e3:51:3c:
                    81:42:1f:14:c7:80:c8:21:d5:86:89:c5:2d:2e:09:
                    1e:ce:8a:ba:18:4c:b3:5e:dc:ca:61:78:87:2c:f7:
                    31:f3:40:9a:42:1c:02:55:05:ac:57:a5:95:f3:bc:
                    40:53:01:20:54:74:52:2d:fd:b8:d9:e2:ac:5a:cf:
                    3e:76:ad:f3:54:df:7d:e6:99:e0:85:48:63:c2:48:
                    d1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:71:70:90:BE:4A:8A:65:CD:AB:84:C9:B4:25:09:E3:66:07:27:C5
            X509v3 Authority Key Identifier:
                keyid:3B:5B:BC:E7:F8:F2:8C:41:BF:C3:07:B8:43:0A:56:A1:6C:67:E8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3B5BBCE7F8F28C41BFC307B8430A56A16C67E800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5BBCE7F8F28C41BFC307B8430A56A16C67E800.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/323830343a376334303a3330303a3a2f34302d3430203d3e20323731343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c40:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         23:98:e5:9c:f2:d6:2c:e1:69:f6:6c:2f:53:34:39:74:af:11:
         3b:be:bc:42:d4:e9:2e:82:78:e2:63:dd:ae:36:62:e9:3d:ea:
         ac:ce:82:ee:7f:2e:c6:cc:80:87:ca:d8:4d:4c:be:f1:3d:94:
         5f:83:7c:df:1d:86:36:76:9d:da:b3:55:b2:04:64:50:f2:a1:
         36:36:33:7a:4c:f5:81:fd:e9:4b:54:e2:36:b9:73:b0:e5:18:
         9e:cb:a4:23:9c:6a:f1:e9:d4:b9:f8:10:30:ff:63:82:8d:71:
         a8:5a:00:b4:bb:19:79:01:d8:16:8e:5e:29:b4:77:c7:4c:3f:
         e6:31:a1:80:30:36:d0:22:c1:89:7d:54:60:e3:d4:37:40:4a:
         59:d6:23:5c:c1:64:0f:fb:75:3e:0d:af:f5:28:db:ba:7a:96:
         2c:89:d8:f1:1b:14:c9:30:22:57:34:94:ab:15:e8:3b:15:f6:
         78:ec:b6:1f:31:b4:35:70:73:a2:fc:22:32:df:f8:f0:e8:d8:
         a6:45:f9:ee:dd:1a:29:e6:cb:c2:d3:e7:72:fa:a3:91:68:40:
         33:13:b0:d9:ee:d5:dc:9b:90:c0:fa:6a:1e:5c:5b:b7:fc:0a:
         7e:fd:86:0f:57:7d:90:b5:68:08:ea:7e:7c:58:89:58:4c:b4:
         8f:b1:03:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:50:31 2025 by rpki-client