Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/323830343a313737383a633030303a3a2f33352d3335203d3e20323633313436.roa
File:                     323830343a313737383a633030303a3a2f33352d3335203d3e20323633313436.roa (raw, json)
Hash identifier:          3U5WlVu3OIyBJpUm42dP9PhWZiBg0PxGaXTigq3xGFc=
Subject key identifier:   57:D4:9E:EE:64:2F:E5:5E:D0:80:01:58:F9:22:1B:F5:A6:50:A9:86
Certificate issuer:       /CN=E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493
Certificate serial:       50AB0942F09C84330B2F0343EAFAE381A3008AA9
Authority key identifier: E6:FA:E3:A7:A7:90:29:B5:F5:3F:2E:1A:94:0B:19:4F:E9:B3:F4:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/323830343a313737383a633030303a3a2f33352d3335203d3e20323633313436.roa
Signing time:             Thu 06 Mar 2025 08:20:31 +0000
ROA not before:           Thu 06 Mar 2025 08:15:31 +0000
ROA not after:            Thu 05 Mar 2026 08:20:31 +0000
asID:                     263146
IP address blocks:        2804:1778:c000::/35 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:ab:09:42:f0:9c:84:33:0b:2f:03:43:ea:fa:e3:81:a3:00:8a:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493
        Validity
            Not Before: Mar  6 08:15:31 2025 GMT
            Not After : Mar  5 08:20:31 2026 GMT
        Subject: CN=57D49EEE642FE55ED0800158F9221BF5A650A986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:45:a4:8f:6b:15:f1:d7:df:1e:c4:68:85:48:
                    b9:7e:13:7d:29:92:63:89:90:2a:a0:e6:36:f2:e2:
                    4d:80:ce:5b:6d:b0:9a:45:3b:6f:5e:81:6f:5c:51:
                    64:06:ae:f9:48:de:47:5a:c7:3d:cd:13:69:2a:ff:
                    ca:e8:17:59:c6:0e:44:e0:e5:02:04:6c:bc:a8:42:
                    bd:ca:b5:10:f7:7f:ba:04:e2:fa:1e:b0:09:d9:1b:
                    c5:3f:61:b3:27:83:63:3c:87:67:be:37:18:00:2d:
                    ac:d7:fa:f8:de:a0:b7:9d:5d:f3:09:60:ba:ed:22:
                    ef:00:bd:a3:58:b2:04:96:20:ed:64:81:74:dd:a6:
                    af:81:dd:47:e7:ed:f9:36:6c:2c:0b:a9:dd:8a:62:
                    34:03:08:7d:cd:b8:c5:34:8d:b9:89:11:99:a6:5b:
                    8c:fe:06:15:9f:7f:35:5a:3b:b9:4a:24:f8:37:19:
                    c0:ca:df:26:b5:07:8f:06:65:66:ab:e2:b9:78:d1:
                    b6:f5:eb:a9:56:d3:63:90:4e:e6:6c:30:e2:ad:2e:
                    30:b3:78:66:f1:bc:ca:45:19:76:71:e0:33:4c:76:
                    35:e5:ff:1a:20:6b:ef:43:66:2c:42:c7:b8:c8:73:
                    b3:d3:f3:f1:12:15:d0:56:c5:fa:20:22:a7:65:bc:
                    3f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D4:9E:EE:64:2F:E5:5E:D0:80:01:58:F9:22:1B:F5:A6:50:A9:86
            X509v3 Authority Key Identifier:
                keyid:E6:FA:E3:A7:A7:90:29:B5:F5:3F:2E:1A:94:0B:19:4F:E9:B3:F4:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/323830343a313737383a633030303a3a2f33352d3335203d3e20323633313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1778:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         9f:8e:90:32:e4:04:d8:78:62:97:a5:11:25:2c:60:8a:0f:f6:
         d2:97:96:0b:e9:ed:11:1c:49:ed:6c:e1:26:b5:ef:6b:1e:80:
         7d:33:e6:66:14:40:a5:98:bd:ca:05:9a:04:90:e4:5b:37:93:
         f2:5c:31:1e:da:0e:64:a2:d9:37:57:38:b2:4f:12:ce:e5:3c:
         47:e8:f0:63:84:48:9a:bd:48:6a:30:0d:35:42:10:2b:27:43:
         33:e6:08:4e:ab:c2:b4:f1:34:12:bc:e6:91:a6:c7:5b:2f:b7:
         58:1c:d9:0b:44:18:f7:d4:bc:fd:2d:84:bb:8f:5c:2a:ef:e7:
         0e:98:0c:3e:2f:87:8b:93:32:4d:b3:76:1c:5a:30:c9:ea:02:
         79:78:5d:ef:61:d3:05:f7:de:6b:27:30:1e:0c:5b:99:d7:d0:
         9b:0f:8e:6c:58:f1:65:67:24:c5:8e:c3:d5:81:3b:4c:b9:71:
         2d:ae:3b:0a:84:e8:07:61:6b:8d:42:60:8f:d7:8b:08:77:4a:
         d8:c8:22:af:14:22:f6:b5:de:37:37:52:a0:9e:5f:5b:1b:5d:
         ca:6b:05:90:6f:35:b8:3d:27:0d:d9:8a:14:51:1f:ba:8d:5c:
         54:1b:e3:af:74:57:d0:ad:75:34:fd:40:53:13:be:77:90:b6:
         7e:96:e2:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 10:32:39 2025 by rpki-client