Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a3a2f33342d3334203d3e20323639303234.roa
File:                     323830343a356534633a3a2f33342d3334203d3e20323639303234.roa (raw, json)
Hash identifier:          st3CUEqqJOBGegrxrX8+e/UI2DPW92T3bKi+sMQL4/0=
Subject key identifier:   E8:15:5E:5E:73:CB:76:FC:0A:37:13:98:34:2B:29:03:12:A3:FC:27
Certificate issuer:       /CN=0D6BBDFF03C5B7F2CFFAAA5624D6A8B3A65F3032
Certificate serial:       534E4ACBDD7FE2342BB21E528C6364C83A3B7B13
Authority key identifier: 0D:6B:BD:FF:03:C5:B7:F2:CF:FA:AA:56:24:D6:A8:B3:A6:5F:30:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6BBDFF03C5B7F2CFFAAA5624D6A8B3A65F3032.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a3a2f33342d3334203d3e20323639303234.roa
Signing time:             Wed 30 Apr 2025 18:19:17 +0000
ROA not before:           Wed 30 Apr 2025 18:14:17 +0000
ROA not after:            Wed 29 Apr 2026 18:19:17 +0000
asID:                     269024
IP address blocks:        2804:5e4c::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:4e:4a:cb:dd:7f:e2:34:2b:b2:1e:52:8c:63:64:c8:3a:3b:7b:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D6BBDFF03C5B7F2CFFAAA5624D6A8B3A65F3032
        Validity
            Not Before: Apr 30 18:14:17 2025 GMT
            Not After : Apr 29 18:19:17 2026 GMT
        Subject: CN=E8155E5E73CB76FC0A371398342B290312A3FC27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2d:c8:77:4e:62:74:69:71:5e:92:14:19:bc:
                    a2:37:70:84:c8:54:8c:b1:15:03:82:0b:c8:b1:45:
                    0f:7a:fa:f0:a1:4e:7f:c0:15:e0:56:56:54:06:f2:
                    49:4a:dd:d1:ee:d5:91:89:5f:32:ef:f8:26:1c:3e:
                    ee:cf:8e:50:d3:8e:b4:e9:b4:ab:4f:a2:b8:06:1a:
                    bc:c5:d9:00:6d:1a:ef:f4:7d:03:c9:e9:3b:c7:2f:
                    5c:08:96:de:1e:ea:5c:15:6a:68:03:b6:3c:f8:d6:
                    68:55:de:ff:e9:94:22:c3:e9:6c:13:4d:ac:a5:2e:
                    6c:e9:f3:24:1d:0b:54:eb:bf:af:9a:9c:33:e8:35:
                    c7:0d:25:86:85:c3:10:a3:ab:42:ae:2d:23:6f:12:
                    fc:a1:59:1b:e4:65:cd:a9:f3:13:3e:e5:43:65:6b:
                    55:7c:47:f6:7a:18:08:2f:b9:ef:ee:bd:8f:ae:eb:
                    4e:78:9a:95:4b:b4:fe:60:d0:98:92:1b:5c:a2:9c:
                    fb:5f:17:29:9e:ab:23:c3:de:56:24:c8:1d:b0:c7:
                    31:5f:16:5c:c7:87:4a:d3:e3:c4:f8:4b:d0:83:34:
                    ba:56:d1:26:5a:ff:41:ee:f3:49:5e:64:0d:b5:03:
                    71:02:10:53:a4:9a:c5:91:97:ac:94:f0:b0:2c:da:
                    cb:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:15:5E:5E:73:CB:76:FC:0A:37:13:98:34:2B:29:03:12:A3:FC:27
            X509v3 Authority Key Identifier:
                keyid:0D:6B:BD:FF:03:C5:B7:F2:CF:FA:AA:56:24:D6:A8:B3:A6:5F:30:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/0D6BBDFF03C5B7F2CFFAAA5624D6A8B3A65F3032.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6BBDFF03C5B7F2CFFAAA5624D6A8B3A65F3032.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a3a2f33342d3334203d3e20323639303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e4c::/34

    Signature Algorithm: sha256WithRSAEncryption
         4a:0e:e8:e7:02:20:ef:34:44:40:ab:8e:b3:d0:82:ab:88:df:
         58:27:64:14:fd:be:c8:9e:66:2a:8a:c4:8b:a1:ff:8e:50:81:
         01:0e:b3:73:e7:3a:3c:01:4c:5c:cf:15:9a:af:53:4e:e4:a0:
         dc:14:c5:a5:c5:b0:e8:f7:24:07:9c:17:4a:56:00:02:6a:0c:
         8b:19:73:6c:c5:35:88:91:7a:fa:ac:7c:0e:77:4b:ca:65:61:
         cc:f9:3c:98:ce:09:57:e3:90:a5:eb:b0:58:71:fa:fc:30:52:
         36:47:4b:b7:24:f4:f8:d6:63:38:17:38:c3:76:f9:73:c7:3a:
         45:50:65:69:20:17:ac:b4:18:2d:48:f4:dc:24:75:1b:5b:6e:
         09:2a:9c:eb:c0:2b:50:72:14:ff:ca:af:4f:df:5e:20:39:13:
         2d:d1:e8:1e:3e:94:05:de:01:a7:82:28:46:9e:43:a6:18:df:
         bf:45:91:82:67:30:a8:a3:80:9b:fc:48:d5:f2:03:cf:be:8e:
         67:a8:fb:d4:0f:0b:2d:12:c8:d1:e3:f4:38:bc:21:a3:12:e1:
         13:bb:aa:29:ee:60:be:22:8c:23:0c:c6:84:78:3a:2f:2a:64:
         39:04:39:f1:f2:bd:e9:2e:a3:e1:13:71:b9:11:b2:63:2d:72:
         9d:80:5e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 21:14:34 2025 by rpki-client