Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Jgh342HLdQM5GuTVj4ZkLRs53DrBqfEHD8Dx3CaedVo/0/323830343a326361343a3a2f33322d3438203d3e20323635323332.roa
File:                     323830343a326361343a3a2f33322d3438203d3e20323635323332.roa (raw, json)
Hash identifier:          Oj/dEliEZGH3V1L8zMYdotW0i/fnMskhPxG8RAJBrCU=
Subject key identifier:   34:C6:D6:BA:03:EF:0D:8A:57:B4:0A:7F:D0:9F:4B:C6:77:B2:75:3C
Certificate issuer:       /CN=6E0FC864695D5E756BC3EBD2CB08E4F60E8BBBFA
Certificate serial:       1C791870827B28FCCFA07625F1DCF098381571C4
Authority key identifier: 6E:0F:C8:64:69:5D:5E:75:6B:C3:EB:D2:CB:08:E4:F6:0E:8B:BB:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0FC864695D5E756BC3EBD2CB08E4F60E8BBBFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Jgh342HLdQM5GuTVj4ZkLRs53DrBqfEHD8Dx3CaedVo/0/323830343a326361343a3a2f33322d3438203d3e20323635323332.roa
Signing time:             Fri 21 Mar 2025 18:15:40 +0000
ROA not before:           Fri 21 Mar 2025 18:10:40 +0000
ROA not after:            Fri 20 Mar 2026 18:15:40 +0000
asID:                     265232
IP address blocks:        2804:2ca4::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:79:18:70:82:7b:28:fc:cf:a0:76:25:f1:dc:f0:98:38:15:71:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E0FC864695D5E756BC3EBD2CB08E4F60E8BBBFA
        Validity
            Not Before: Mar 21 18:10:40 2025 GMT
            Not After : Mar 20 18:15:40 2026 GMT
        Subject: CN=34C6D6BA03EF0D8A57B40A7FD09F4BC677B2753C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:27:ad:de:e6:c3:52:40:04:ba:e4:78:3e:60:
                    72:1c:47:4f:6c:0a:44:39:ea:bb:fc:fd:a3:a6:7d:
                    5a:16:b9:dd:f7:b8:8e:e2:5f:f3:ba:23:c0:53:b2:
                    b3:e4:39:09:55:45:eb:de:db:83:09:d0:3c:69:15:
                    f4:dd:96:b1:ee:29:f5:9b:14:f3:7a:0b:0d:9c:8a:
                    44:c3:1a:63:65:a0:c7:df:08:e5:e7:98:51:f9:61:
                    4b:33:48:6f:a0:6c:09:09:a3:19:6d:b0:0e:1a:15:
                    92:73:44:e7:98:23:9d:9e:1f:e0:7d:30:24:59:06:
                    04:74:f5:ef:51:f6:5e:a2:be:f9:62:19:da:c3:61:
                    35:4a:e7:a3:c7:1b:4f:1c:21:7e:e2:22:64:28:7b:
                    a9:d4:38:3b:b3:ba:5a:26:73:01:28:19:38:e9:da:
                    c5:27:ad:7a:e4:ea:73:38:c5:9d:d5:f5:f4:d6:e3:
                    ed:d4:19:59:12:33:24:24:db:26:57:87:27:ff:4e:
                    74:a9:48:b2:5f:93:ee:73:ae:b8:e3:0e:ec:54:2c:
                    82:e0:0b:b7:85:37:b9:4c:fb:69:92:0b:ab:25:1f:
                    1d:24:fb:d6:05:b7:c1:de:69:24:4c:c0:b2:b8:60:
                    3e:bb:c2:a4:a6:6a:17:b2:48:c6:7c:c5:12:79:a2:
                    a3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C6:D6:BA:03:EF:0D:8A:57:B4:0A:7F:D0:9F:4B:C6:77:B2:75:3C
            X509v3 Authority Key Identifier:
                keyid:6E:0F:C8:64:69:5D:5E:75:6B:C3:EB:D2:CB:08:E4:F6:0E:8B:BB:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Jgh342HLdQM5GuTVj4ZkLRs53DrBqfEHD8Dx3CaedVo/0/6E0FC864695D5E756BC3EBD2CB08E4F60E8BBBFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0FC864695D5E756BC3EBD2CB08E4F60E8BBBFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Jgh342HLdQM5GuTVj4ZkLRs53DrBqfEHD8Dx3CaedVo/0/323830343a326361343a3a2f33322d3438203d3e20323635323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ca4::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:44:75:51:7f:2a:b8:f8:2b:1c:27:18:99:db:2d:28:d9:e1:
         b5:47:16:04:7e:3f:f7:24:0e:71:2d:dc:8f:6b:50:12:d3:df:
         3e:b1:61:e0:f9:e3:69:99:ee:95:5f:0a:ce:c5:f9:e5:44:fd:
         27:b1:f6:9e:77:08:42:6a:bb:b2:cf:87:92:30:f4:c7:c8:fe:
         58:67:07:4b:b7:2c:15:24:c5:d9:1f:c0:3a:eb:8e:bf:56:73:
         0e:80:47:d7:82:ef:7d:05:50:64:fa:68:86:5b:2a:b0:57:92:
         9e:99:7d:a9:5b:d3:fd:a8:aa:ba:7e:90:dc:24:d4:20:e0:29:
         b4:27:c2:a2:4b:55:a0:e6:69:b4:7a:6f:72:d4:fc:ca:07:25:
         c3:1d:b8:da:97:b3:4f:4b:bc:10:b1:4c:c9:a9:cd:ef:f6:b9:
         23:0c:ff:d4:09:d1:ba:b9:b8:69:e2:2d:95:6a:ef:ad:85:bd:
         eb:03:2e:79:3b:8b:2f:ca:cb:70:a3:dd:3e:51:27:e9:d0:b1:
         36:07:a4:12:d5:4f:c8:db:34:a1:ed:6b:96:4f:5b:22:53:b5:
         01:e3:07:b2:0d:01:60:4e:a0:ee:15:77:4c:e1:a1:fd:af:96:
         70:d4:ad:83:4e:5a:8f:41:ec:15:54:42:08:8b:91:67:3c:66:
         98:dc:27:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:11:57 2025 by rpki-client