Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/323830343a376165343a383030303a3a2f33342d3334203d3e20323731333938.roa
File:                     323830343a376165343a383030303a3a2f33342d3334203d3e20323731333938.roa (raw, json)
Hash identifier:          DEvT/0fm/L0g7x4tZF1u16ZUQ5v6JXYZ5aNex+VTEfo=
Subject key identifier:   4B:AC:91:C1:8F:75:F5:D6:55:7B:AE:63:32:42:67:9C:89:91:31:6B
Certificate issuer:       /CN=7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA
Certificate serial:       3B245449C91851793BE00FA6DF7B64018AFBFF36
Authority key identifier: 7E:B6:6D:EF:DD:94:27:39:8C:BE:80:B8:EC:3D:1D:5B:CF:33:21:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/323830343a376165343a383030303a3a2f33342d3334203d3e20323731333938.roa
Signing time:             Tue 18 Feb 2025 18:40:34 +0000
ROA not before:           Tue 18 Feb 2025 18:35:34 +0000
ROA not after:            Tue 17 Feb 2026 18:40:34 +0000
asID:                     271398
IP address blocks:        2804:7ae4:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:24:54:49:c9:18:51:79:3b:e0:0f:a6:df:7b:64:01:8a:fb:ff:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA
        Validity
            Not Before: Feb 18 18:35:34 2025 GMT
            Not After : Feb 17 18:40:34 2026 GMT
        Subject: CN=4BAC91C18F75F5D6557BAE633242679C8991316B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:55:e7:0e:fd:ec:b7:c4:f5:10:3f:5e:ad:62:
                    3e:ed:43:5b:48:0e:8a:39:26:03:12:82:9e:4c:ce:
                    39:df:49:e1:7f:d5:b6:76:aa:fc:6d:bc:ff:04:3a:
                    60:dd:64:dc:14:e9:24:73:bb:a4:74:d3:14:7d:97:
                    44:e1:9c:1d:41:69:b4:ec:a9:21:d0:68:b6:52:64:
                    96:1b:6a:ad:f2:bf:1b:b0:35:0a:1d:77:9d:9c:d4:
                    75:74:80:88:55:fc:9b:7d:ea:6a:f6:4f:5f:36:66:
                    be:a0:07:87:fe:b6:d0:a9:f6:7f:d8:5c:c7:69:c4:
                    71:ff:8a:b4:bc:6e:a6:7d:28:62:87:0a:da:01:f2:
                    e5:c1:e4:48:76:34:db:03:b4:89:bb:cb:22:6d:d5:
                    0f:2d:1e:5f:0f:d8:e5:50:a3:61:06:c9:98:50:fe:
                    29:51:47:86:08:69:fc:6b:bc:4b:45:94:9f:09:62:
                    3c:3a:d2:81:0b:a2:9d:40:63:f5:9d:82:34:76:5b:
                    ea:a2:9c:2a:04:3f:ce:72:41:f3:78:bb:89:6b:04:
                    4f:73:ac:7f:7c:6c:ac:27:12:db:cf:3f:09:79:ea:
                    47:4d:92:d7:41:b1:f6:70:53:19:f7:66:5a:ed:4f:
                    bb:92:d0:94:91:c6:bf:4c:8e:7c:a0:d4:f0:65:fb:
                    5f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:AC:91:C1:8F:75:F5:D6:55:7B:AE:63:32:42:67:9C:89:91:31:6B
            X509v3 Authority Key Identifier:
                keyid:7E:B6:6D:EF:DD:94:27:39:8C:BE:80:B8:EC:3D:1D:5B:CF:33:21:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/323830343a376165343a383030303a3a2f33342d3334203d3e20323731333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ae4:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         59:bb:3a:93:63:51:06:a3:a1:0b:63:54:52:d5:38:7b:e3:65:
         23:76:0d:41:a5:3d:86:70:48:1c:d1:56:3f:0a:02:45:1f:0d:
         2a:72:6b:c9:b5:e0:1e:62:9e:32:59:4d:d7:1c:7e:fc:df:67:
         47:f5:70:b3:19:d2:52:48:7d:80:a7:18:27:f8:81:36:42:7c:
         37:2c:60:28:f3:45:07:3c:97:10:c3:51:6c:1b:11:d5:4a:9a:
         85:11:c4:cd:05:35:00:a7:45:e6:29:ef:90:43:b4:21:cc:cc:
         27:9b:7b:cd:f2:9a:16:02:d6:d0:15:ae:0f:bc:a9:75:58:d6:
         93:ab:da:45:f6:32:3f:18:2d:fa:ad:36:d0:dc:c4:45:2c:2f:
         b4:c5:b6:34:dc:93:95:d2:f9:09:59:50:3d:b8:a0:b7:53:7b:
         4e:f3:88:d4:fe:ff:01:d6:f9:90:da:cb:4e:29:29:b3:7d:31:
         ee:c9:bb:af:ee:f7:46:59:69:56:e5:93:52:f1:51:7b:d2:eb:
         97:21:75:51:a6:1c:93:cd:ac:be:2d:af:e4:40:74:0f:f8:43:
         bc:0c:bf:58:c0:55:7d:35:b5:28:87:19:e8:0f:1c:32:37:48:
         a2:5a:ff:5a:d0:82:5f:b7:45:f3:ad:19:92:47:12:78:8f:2d:
         7a:0e:29:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:40:12 2025 by rpki-client