Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7X5xZx7ni4tRYCYPx6TJosipeinh5917BAEGm2D8Pg9B/1/323830343a383735303a343030303a3a2f33342d3334203d3e20323732373031.roa
File:                     323830343a383735303a343030303a3a2f33342d3334203d3e20323732373031.roa (raw, json)
Hash identifier:          zYB58wakpn3yqiqkMvJMH3E4KIF3VYQZ7LGQ1erF5K8=
Subject key identifier:   5C:9B:FF:09:9C:20:88:43:BD:E3:E9:9B:66:F0:9E:94:A0:BB:71:E4
Certificate issuer:       /CN=E01C509DBE2A66987F85D9F7040DF42AFECFB53B
Certificate serial:       53E2425309387BA7FD24A80369934A08E174A185
Authority key identifier: E0:1C:50:9D:BE:2A:66:98:7F:85:D9:F7:04:0D:F4:2A:FE:CF:B5:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E01C509DBE2A66987F85D9F7040DF42AFECFB53B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7X5xZx7ni4tRYCYPx6TJosipeinh5917BAEGm2D8Pg9B/1/323830343a383735303a343030303a3a2f33342d3334203d3e20323732373031.roa
Signing time:             Thu 06 Mar 2025 05:52:45 +0000
ROA not before:           Thu 06 Mar 2025 05:47:45 +0000
ROA not after:            Thu 05 Mar 2026 05:52:45 +0000
asID:                     272701
IP address blocks:        2804:8750:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:e2:42:53:09:38:7b:a7:fd:24:a8:03:69:93:4a:08:e1:74:a1:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E01C509DBE2A66987F85D9F7040DF42AFECFB53B
        Validity
            Not Before: Mar  6 05:47:45 2025 GMT
            Not After : Mar  5 05:52:45 2026 GMT
        Subject: CN=5C9BFF099C208843BDE3E99B66F09E94A0BB71E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5b:c5:0b:0c:ef:9e:01:45:70:c1:1c:2f:20:
                    0e:9c:b7:3f:88:6d:a3:6d:b3:6b:2a:fd:b1:a6:83:
                    e0:6d:1a:3d:d4:a9:7a:a7:36:9c:98:de:61:b7:a0:
                    af:47:f3:79:cd:d4:f8:fb:72:2b:fe:8a:a0:8c:76:
                    63:a2:dc:93:be:50:ca:4e:ed:97:03:a5:77:e0:f8:
                    b4:13:8b:32:4d:b8:e6:f5:38:45:af:fb:0c:d3:70:
                    1d:1c:82:99:7d:5a:95:02:5b:b5:40:44:6e:37:9e:
                    7d:db:5e:47:a9:11:be:0a:3c:30:b4:d5:17:61:b2:
                    97:00:3b:4d:b0:22:d5:61:76:4d:a3:91:77:79:ab:
                    de:41:7b:7e:77:e9:3c:77:d0:69:31:92:c1:dc:c1:
                    46:b9:12:41:f6:c1:26:de:5d:6b:3b:cd:db:41:21:
                    a0:66:ed:3c:dd:2a:c8:e5:3f:7d:d2:ed:80:88:3e:
                    b7:9b:1e:55:9c:6b:b0:c2:86:38:7d:da:44:99:a7:
                    c8:a9:76:9e:a0:aa:90:a2:d1:3b:9a:60:29:4f:4b:
                    d1:10:63:f4:e6:d1:ae:9d:31:22:2b:c0:8a:98:1c:
                    ec:17:9b:ce:65:d0:cc:67:a8:05:68:95:eb:0e:46:
                    b4:00:b5:b1:56:a7:f6:49:88:e6:03:48:eb:ac:b7:
                    b6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:9B:FF:09:9C:20:88:43:BD:E3:E9:9B:66:F0:9E:94:A0:BB:71:E4
            X509v3 Authority Key Identifier:
                keyid:E0:1C:50:9D:BE:2A:66:98:7F:85:D9:F7:04:0D:F4:2A:FE:CF:B5:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7X5xZx7ni4tRYCYPx6TJosipeinh5917BAEGm2D8Pg9B/1/E01C509DBE2A66987F85D9F7040DF42AFECFB53B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E01C509DBE2A66987F85D9F7040DF42AFECFB53B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7X5xZx7ni4tRYCYPx6TJosipeinh5917BAEGm2D8Pg9B/1/323830343a383735303a343030303a3a2f33342d3334203d3e20323732373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8750:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         0b:a0:b4:ea:f7:e5:63:3f:46:32:8f:b8:bb:de:04:1d:2e:57:
         25:3d:e6:6b:4f:d2:90:ee:d6:0b:ba:84:c5:b9:e8:f4:1d:27:
         94:09:03:95:b6:35:45:7b:54:ab:8c:e4:39:b4:00:d3:19:14:
         32:9e:05:39:c0:4b:58:54:58:7a:57:7f:29:c7:25:cc:ed:45:
         c9:87:d3:c6:c0:40:ba:79:d6:e3:e5:69:eb:a2:d2:8a:dc:e3:
         da:2a:1f:9d:51:7c:c0:38:49:63:d0:4a:70:55:4e:60:3c:d2:
         47:52:bf:10:4c:da:44:6a:cd:d9:c2:17:cc:50:d4:f5:3b:72:
         d6:84:dd:04:42:56:bc:8d:ec:f0:9b:70:0a:54:db:f5:fe:ce:
         ca:4a:b7:6e:cc:eb:20:c8:ea:ec:76:8d:22:47:80:30:7d:fd:
         37:7f:57:7d:6e:79:09:a1:66:fb:3d:75:10:cf:aa:0b:17:fe:
         2c:e6:bb:db:c8:38:26:90:26:50:ca:ba:03:cd:22:56:cb:f1:
         ef:07:02:f1:4f:5a:26:da:b8:ac:ac:f9:a7:35:30:e2:f3:4a:
         e3:a3:43:c4:12:e1:96:f4:3e:28:95:0d:e6:b0:63:38:16:69:
         6f:ca:0a:c1:73:17:1e:7c:c1:65:cd:49:23:c5:2a:4a:62:6d:
         31:6a:7f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:08:28 2025 by rpki-client