Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a343030303a3a2f33342d3334203d3e20323637303237.roa
File:                     323830343a343730383a343030303a3a2f33342d3334203d3e20323637303237.roa (raw, json)
Hash identifier:          60+4JNxIDT6d2Ix4i/TB66/gKqdfYMA19v24GGEwCg0=
Subject key identifier:   36:77:A5:73:AF:48:AF:24:03:3F:1A:41:3E:1F:74:91:A0:B5:E2:EB
Certificate issuer:       /CN=4C0E5583F85FD92E5B21D697990054A242CE2E03
Certificate serial:       52EECFCFFCA90D2ACFB02265D270C86870394A5D
Authority key identifier: 4C:0E:55:83:F8:5F:D9:2E:5B:21:D6:97:99:00:54:A2:42:CE:2E:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C0E5583F85FD92E5B21D697990054A242CE2E03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a343030303a3a2f33342d3334203d3e20323637303237.roa
Signing time:             Fri 31 Jan 2025 18:02:27 +0000
ROA not before:           Fri 31 Jan 2025 17:57:27 +0000
ROA not after:            Fri 30 Jan 2026 18:02:27 +0000
asID:                     267027
IP address blocks:        2804:4708:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ee:cf:cf:fc:a9:0d:2a:cf:b0:22:65:d2:70:c8:68:70:39:4a:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C0E5583F85FD92E5B21D697990054A242CE2E03
        Validity
            Not Before: Jan 31 17:57:27 2025 GMT
            Not After : Jan 30 18:02:27 2026 GMT
        Subject: CN=3677A573AF48AF24033F1A413E1F7491A0B5E2EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:2c:86:44:f0:b6:49:4e:d7:9b:5c:c5:92:80:
                    ef:49:25:8f:9b:9b:c3:85:2d:18:03:2c:c7:8d:10:
                    df:b5:2d:6e:15:87:f2:9e:36:8c:53:39:21:01:61:
                    cc:6f:16:2d:29:25:d6:e6:ca:60:2e:be:4b:d0:b8:
                    72:08:16:c1:fc:3c:fd:db:c2:3e:d6:32:95:b4:1a:
                    7f:4b:30:fe:ae:13:f0:09:12:02:9b:a7:e6:2c:2c:
                    48:42:5e:c4:58:bf:a8:58:9c:df:19:ba:13:26:75:
                    72:d0:a2:1f:a3:63:f4:44:c3:c9:81:7c:b8:9f:a9:
                    39:54:4c:03:1f:7d:e9:14:2d:be:54:ac:34:76:2b:
                    a9:23:bd:fa:47:62:d0:d3:33:0b:ed:f2:e1:7c:f4:
                    af:d7:97:06:c7:c5:44:89:e7:c6:be:0a:14:e0:e0:
                    46:16:c2:a5:9f:94:36:54:3f:a5:fd:c3:fd:f0:38:
                    8d:66:51:d2:62:7b:3e:a2:56:49:bd:fa:ab:cc:0e:
                    a7:83:fb:42:eb:8d:68:dd:ee:13:b8:81:68:55:b7:
                    e7:a2:cc:d2:e3:85:60:7c:8f:1a:5a:f9:55:a4:dd:
                    a1:00:ee:a1:a2:4e:c9:b7:c9:20:5f:91:3f:d3:82:
                    58:99:35:f9:b2:02:2a:f1:19:51:32:40:6b:0d:86:
                    3f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:77:A5:73:AF:48:AF:24:03:3F:1A:41:3E:1F:74:91:A0:B5:E2:EB
            X509v3 Authority Key Identifier:
                keyid:4C:0E:55:83:F8:5F:D9:2E:5B:21:D6:97:99:00:54:A2:42:CE:2E:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/4C0E5583F85FD92E5B21D697990054A242CE2E03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C0E5583F85FD92E5B21D697990054A242CE2E03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a343030303a3a2f33342d3334203d3e20323637303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4708:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         94:2f:97:b7:74:3f:52:60:49:56:70:18:be:1f:50:26:76:a6:
         e1:4d:b6:ef:d0:f8:46:89:18:aa:bf:44:ec:2c:2f:d7:15:e1:
         29:26:0e:81:fd:44:02:f3:c3:22:68:9b:45:19:5c:e6:f5:69:
         a2:73:c3:3f:b4:eb:2f:02:6a:8f:4a:1a:9b:71:ab:50:0c:0c:
         30:e9:2e:b7:c3:49:62:1a:5a:09:a6:a8:e9:fc:f4:bb:fc:5a:
         86:9e:6d:ae:91:2c:95:b2:6f:1a:c6:a1:6b:45:d1:96:fe:76:
         ab:cf:96:9e:0d:84:59:25:e1:e0:73:f7:c2:21:24:e4:b2:11:
         27:4e:b6:ea:6d:de:61:ac:91:5b:a6:3f:b9:66:04:34:77:c0:
         ef:38:aa:16:4b:db:22:96:c6:51:32:44:80:3f:7a:61:ce:ab:
         b6:4f:ad:9f:c6:ea:88:28:ed:e4:4d:09:26:16:02:40:29:02:
         05:71:9f:f5:56:c8:db:c8:37:de:ad:9f:f3:87:a2:9e:aa:ac:
         08:ab:6a:87:fb:b9:9b:a8:f0:3d:48:32:94:17:a0:9a:7e:05:
         51:58:b9:3a:7e:f5:3d:3a:6a:f8:a2:27:84:32:f9:a0:3a:e5:
         54:38:45:70:ca:ac:70:37:6a:e5:83:ef:c2:39:e9:48:19:13:
         36:cd:e0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:40:47 2025 by rpki-client