Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/323830343a373435633a633030303a3a2f33342d3334203d3e20323730393736.roa
File:                     323830343a373435633a633030303a3a2f33342d3334203d3e20323730393736.roa (raw, json)
Hash identifier:          N1uLuStzjx9DO2/CWLEXM6TrS5gseyoTr1c6+tdgWzw=
Subject key identifier:   7A:F5:C3:97:52:21:6F:DD:3B:8C:02:77:8C:65:3A:44:68:0C:CD:62
Certificate issuer:       /CN=4A3F13967BD1598A8FC3B219CC9900A809C37494
Certificate serial:       4C8CFC6646FD17EAB936908437D392B2FBB9705A
Authority key identifier: 4A:3F:13:96:7B:D1:59:8A:8F:C3:B2:19:CC:99:00:A8:09:C3:74:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A3F13967BD1598A8FC3B219CC9900A809C37494.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/323830343a373435633a633030303a3a2f33342d3334203d3e20323730393736.roa
Signing time:             Fri 28 Mar 2025 19:40:31 +0000
ROA not before:           Fri 28 Mar 2025 19:35:31 +0000
ROA not after:            Fri 27 Mar 2026 19:40:31 +0000
asID:                     270976
IP address blocks:        2804:745c:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:8c:fc:66:46:fd:17:ea:b9:36:90:84:37:d3:92:b2:fb:b9:70:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A3F13967BD1598A8FC3B219CC9900A809C37494
        Validity
            Not Before: Mar 28 19:35:31 2025 GMT
            Not After : Mar 27 19:40:31 2026 GMT
        Subject: CN=7AF5C39752216FDD3B8C02778C653A44680CCD62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:19:d4:10:72:18:e0:f0:c9:7b:5c:b6:fe:34:
                    4e:fa:db:28:b6:b6:3a:67:b2:75:36:e0:bc:77:2f:
                    2f:4c:ea:c1:4b:e9:a0:c5:49:db:0b:a7:5f:cc:00:
                    f4:2f:0c:55:30:87:ef:a4:3a:21:d8:a3:7d:f2:6c:
                    2b:32:88:f6:cf:86:66:b4:cc:f9:9c:f4:e6:60:40:
                    d5:67:3f:86:96:5c:d9:ef:23:39:7e:3f:62:d8:ee:
                    45:e6:5d:c3:d8:77:1d:5a:98:30:27:16:4b:71:f0:
                    53:ad:2b:ae:ab:27:8c:ea:e0:af:13:9e:d0:6c:dd:
                    63:1b:e8:69:6c:ad:27:22:bf:18:9d:e0:6c:29:8c:
                    cb:41:47:0f:d5:0b:34:c2:4c:9b:57:d8:c0:40:97:
                    b3:77:ab:07:d9:0d:7b:4f:e8:86:c5:77:bd:7d:34:
                    24:0c:c6:08:de:e8:ca:d2:68:c7:45:21:45:87:58:
                    cf:40:81:1d:4a:69:a6:ee:84:d5:91:a6:8b:bd:38:
                    2d:83:b7:c5:7b:17:2c:1c:2c:24:fc:bb:ca:70:23:
                    d7:28:2e:8b:4b:bd:3d:73:76:3f:eb:0d:1a:02:22:
                    1e:cc:6b:09:aa:03:c7:ff:dc:bd:c5:88:a5:83:5d:
                    94:c6:0d:4a:ff:b1:5f:5a:ec:ad:33:b1:c9:6c:5c:
                    d5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F5:C3:97:52:21:6F:DD:3B:8C:02:77:8C:65:3A:44:68:0C:CD:62
            X509v3 Authority Key Identifier:
                keyid:4A:3F:13:96:7B:D1:59:8A:8F:C3:B2:19:CC:99:00:A8:09:C3:74:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/4A3F13967BD1598A8FC3B219CC9900A809C37494.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A3F13967BD1598A8FC3B219CC9900A809C37494.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/323830343a373435633a633030303a3a2f33342d3334203d3e20323730393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:745c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3f:05:82:e0:dd:91:0e:9b:56:10:5d:b9:3a:bf:94:b4:91:8d:
         48:00:1a:dc:6f:df:2c:bb:d2:4c:6f:90:9e:95:34:09:0e:bb:
         ac:95:97:db:82:8f:38:5c:28:06:0a:d0:3a:ed:86:40:85:72:
         c2:1d:45:ad:a3:34:3e:b0:e5:9e:61:a0:4b:29:55:8b:1f:c2:
         78:93:dc:0b:58:df:df:3f:d4:71:69:b9:73:15:0a:2e:ea:3a:
         c8:fd:7c:a1:d0:f9:9a:f1:86:c5:cd:9b:ef:14:de:a9:5c:ad:
         25:9a:5a:b2:76:07:24:f2:f0:4b:bd:0e:0d:4c:12:e1:7d:58:
         b0:5e:27:4a:dc:cb:dc:d5:b1:7d:91:65:78:77:16:60:e8:1a:
         91:cf:43:0f:d1:d5:2c:9f:5e:1b:4e:ea:d5:af:08:99:46:34:
         3b:65:34:d7:48:b6:be:81:34:bd:32:b4:88:e7:52:aa:70:e5:
         03:61:94:dc:eb:b6:50:a1:71:55:80:42:98:e3:5a:47:88:89:
         b2:89:59:f6:1b:0b:1c:af:74:bd:99:57:01:ae:b3:da:1a:41:
         68:9e:71:8d:6b:10:58:45:fe:8d:f0:ff:f7:fc:40:db:af:64:
         a3:39:6c:75:83:50:82:47:27:82:6e:fd:67:69:bd:44:a6:e5:
         5a:bb:79:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:18:24 2025 by rpki-client