Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a383030303a3a2f33342d3334203d3e20323637303237.roa
File:                     323830343a343730383a383030303a3a2f33342d3334203d3e20323637303237.roa (raw, json)
Hash identifier:          Kn4SdVSCswMzYxNJnsaT9MlMFVchPLDUiy8TImq/JE8=
Subject key identifier:   1E:4A:B3:D8:1E:01:E1:48:BA:3D:96:7E:32:05:C7:5E:53:D4:EA:CC
Certificate issuer:       /CN=4C0E5583F85FD92E5B21D697990054A242CE2E03
Certificate serial:       60D917DF525B7E3EEDAF2CA023FEC4EA5AA2AC44
Authority key identifier: 4C:0E:55:83:F8:5F:D9:2E:5B:21:D6:97:99:00:54:A2:42:CE:2E:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C0E5583F85FD92E5B21D697990054A242CE2E03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a383030303a3a2f33342d3334203d3e20323637303237.roa
Signing time:             Fri 31 Jan 2025 18:02:25 +0000
ROA not before:           Fri 31 Jan 2025 17:57:25 +0000
ROA not after:            Fri 30 Jan 2026 18:02:25 +0000
asID:                     267027
IP address blocks:        2804:4708:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:d9:17:df:52:5b:7e:3e:ed:af:2c:a0:23:fe:c4:ea:5a:a2:ac:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C0E5583F85FD92E5B21D697990054A242CE2E03
        Validity
            Not Before: Jan 31 17:57:25 2025 GMT
            Not After : Jan 30 18:02:25 2026 GMT
        Subject: CN=1E4AB3D81E01E148BA3D967E3205C75E53D4EACC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c0:4d:75:63:40:84:fb:94:ab:fc:ed:e6:f7:
                    7a:cc:7c:52:7f:d0:59:8f:ac:bf:77:14:a9:f3:dc:
                    67:aa:69:ef:63:7e:89:90:f7:96:aa:12:3b:45:bb:
                    27:a2:87:5b:1c:b5:f4:38:5c:3e:71:da:da:fa:ab:
                    98:29:74:6e:e6:7b:91:85:29:e7:17:ad:3e:cb:d4:
                    c2:7e:d0:75:c6:f5:2a:e7:77:1b:18:91:80:73:47:
                    86:be:07:c7:f2:69:92:4c:95:6d:39:b1:31:6b:2f:
                    02:d5:68:c9:04:84:d6:b1:64:4d:33:f3:cf:3d:87:
                    56:07:3b:cc:4b:17:cc:8d:7e:d3:d4:9f:19:ff:d9:
                    f7:17:04:f5:74:f6:d8:c0:45:ab:d5:02:18:8a:59:
                    d3:3e:91:e8:e9:63:1b:1c:6a:20:75:5d:d5:8d:15:
                    19:e5:40:b9:45:64:89:ec:29:54:ad:0b:dc:8a:fc:
                    3c:67:17:09:9a:4e:fe:fc:e9:42:21:c9:4f:9b:9b:
                    4b:5d:49:b2:50:bd:89:75:c2:69:98:fc:ac:e7:02:
                    cb:4b:73:27:1f:0d:87:27:42:b6:94:61:5c:d3:5b:
                    94:d3:cb:49:78:a6:70:10:1f:2c:00:ba:d8:d2:b6:
                    7f:48:eb:26:0d:f9:56:f5:8b:31:be:79:38:38:df:
                    f3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:4A:B3:D8:1E:01:E1:48:BA:3D:96:7E:32:05:C7:5E:53:D4:EA:CC
            X509v3 Authority Key Identifier:
                keyid:4C:0E:55:83:F8:5F:D9:2E:5B:21:D6:97:99:00:54:A2:42:CE:2E:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/4C0E5583F85FD92E5B21D697990054A242CE2E03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C0E5583F85FD92E5B21D697990054A242CE2E03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a383030303a3a2f33342d3334203d3e20323637303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4708:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3c:a2:7a:46:19:5e:50:8c:8c:10:ac:6d:47:fa:83:19:bd:7f:
         6a:81:a4:de:f9:36:2f:7d:ec:87:97:9c:0b:1d:fa:04:c8:2f:
         7e:16:89:54:ee:7b:e6:8b:8f:7d:eb:74:c5:53:66:07:01:18:
         4a:4c:22:8e:1c:f4:ef:09:6e:53:8f:1e:f6:f2:2b:b4:50:92:
         42:51:3b:b9:b4:ef:82:4e:4d:1e:b3:8c:7a:3a:36:a0:72:de:
         ce:0a:54:49:b7:49:00:b0:6c:05:2b:13:96:c9:54:db:7a:34:
         ac:11:1b:a9:a9:02:d9:2f:79:8f:c2:2f:ad:2d:82:81:83:29:
         60:6d:ea:96:b7:80:d2:aa:45:c5:0e:5f:c1:48:12:88:30:de:
         52:35:eb:6a:72:a5:dc:d6:e3:2d:b8:46:8a:20:4c:0c:9a:60:
         fa:aa:7b:d9:e6:6c:fe:9d:57:1b:66:84:7e:da:fb:1f:e4:9f:
         ce:9d:d4:93:bc:5a:e8:61:14:42:c1:5c:c4:c9:30:0d:de:1a:
         55:20:59:89:93:ea:b3:fc:2d:92:0a:26:ab:f4:24:59:0e:f1:
         63:ea:f0:c8:4a:e7:06:75:ab:ef:ca:f4:e2:67:34:a7:fa:f9:
         2f:97:25:0a:50:64:d0:1d:05:6d:a4:25:d1:7e:f5:cf:eb:18:
         b2:b2:30:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:46:06 2025 by rpki-client