Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A6Jv5P21ryQCg6UtP5fVQvmr2BZeM7QUiVhFa2YsCmWc/1/323830343a353535633a3a2f33322d3438203d3e20323634313035.roa
File:                     323830343a353535633a3a2f33322d3438203d3e20323634313035.roa (raw, json)
Hash identifier:          CM1EXOwyVC7b3YwyEBwPGZWgC++KuKMmi4xffC0ITFo=
Subject key identifier:   E9:D5:28:77:36:75:64:AE:32:4C:86:E1:74:B7:04:63:D9:8C:90:20
Certificate issuer:       /CN=E9FFB74BC6E77853BA3620D32D32557B2927C70A
Certificate serial:       733A5AD641E95934C4774DC9662013C5406BE716
Authority key identifier: E9:FF:B7:4B:C6:E7:78:53:BA:36:20:D3:2D:32:55:7B:29:27:C7:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9FFB74BC6E77853BA3620D32D32557B2927C70A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A6Jv5P21ryQCg6UtP5fVQvmr2BZeM7QUiVhFa2YsCmWc/1/323830343a353535633a3a2f33322d3438203d3e20323634313035.roa
Signing time:             Thu 06 Mar 2025 13:01:32 +0000
ROA not before:           Thu 06 Mar 2025 12:56:32 +0000
ROA not after:            Thu 05 Mar 2026 13:01:32 +0000
asID:                     264105
IP address blocks:        2804:555c::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:3a:5a:d6:41:e9:59:34:c4:77:4d:c9:66:20:13:c5:40:6b:e7:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9FFB74BC6E77853BA3620D32D32557B2927C70A
        Validity
            Not Before: Mar  6 12:56:32 2025 GMT
            Not After : Mar  5 13:01:32 2026 GMT
        Subject: CN=E9D52877367564AE324C86E174B70463D98C9020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:41:a2:bc:6c:5e:00:44:58:ef:8d:5f:17:6d:
                    01:52:b8:3c:76:aa:31:dd:51:66:d2:c5:7c:f0:80:
                    bb:cd:f6:b5:c6:f1:96:1f:e8:34:c1:f7:75:63:c1:
                    2d:84:11:d7:ad:6b:e2:08:45:d4:e0:c4:b8:b7:b6:
                    06:38:60:1a:f3:b5:05:b2:97:49:af:80:42:ab:01:
                    05:9f:ad:37:ed:bf:ab:26:21:30:c8:ca:72:be:11:
                    44:be:86:5e:76:99:5b:8f:8b:9b:cc:78:12:ad:23:
                    dc:57:5f:d2:c5:de:13:dc:67:1f:4b:c5:43:c2:e9:
                    a9:e3:99:3c:3b:d0:39:e0:12:3f:72:8d:4c:f0:82:
                    6c:a1:52:db:bf:d6:ad:e5:ba:73:b7:aa:a0:92:2e:
                    90:34:7a:ea:c4:46:17:75:57:c5:71:2e:41:07:81:
                    03:19:1c:a7:e2:12:74:16:47:3b:33:f8:07:ee:25:
                    31:ed:32:9e:b1:13:8b:74:d0:ba:9c:7d:fe:b8:37:
                    0f:17:08:e1:f7:b3:8d:fb:88:e7:e4:66:72:d1:0f:
                    58:c6:5e:63:cd:5d:84:f5:0e:78:33:94:0f:d7:17:
                    14:2e:09:05:21:8e:f5:31:5c:77:f6:db:42:ac:90:
                    09:90:bf:8e:27:7e:a3:1e:30:29:07:43:ba:15:f9:
                    f7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D5:28:77:36:75:64:AE:32:4C:86:E1:74:B7:04:63:D9:8C:90:20
            X509v3 Authority Key Identifier:
                keyid:E9:FF:B7:4B:C6:E7:78:53:BA:36:20:D3:2D:32:55:7B:29:27:C7:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A6Jv5P21ryQCg6UtP5fVQvmr2BZeM7QUiVhFa2YsCmWc/1/E9FFB74BC6E77853BA3620D32D32557B2927C70A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9FFB74BC6E77853BA3620D32D32557B2927C70A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A6Jv5P21ryQCg6UtP5fVQvmr2BZeM7QUiVhFa2YsCmWc/1/323830343a353535633a3a2f33322d3438203d3e20323634313035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:555c::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:12:2b:b3:d8:de:1d:42:66:25:8f:ed:5c:98:08:ad:76:09:
         b1:5e:c2:f3:54:ae:25:7e:b0:2e:33:08:4d:e5:29:11:91:a5:
         1a:f9:69:99:e3:d5:73:13:c6:1e:0b:09:1d:f4:b4:69:9f:47:
         89:17:a0:2d:98:d7:1a:78:3e:8d:a2:0c:de:1d:9d:81:13:ad:
         a3:b7:81:4a:7d:76:8a:34:f1:89:34:25:16:1b:41:2f:5c:bc:
         49:a6:97:cb:15:3e:c9:82:d6:8d:33:db:4d:0a:38:e2:da:ec:
         2f:52:e2:59:46:4a:7c:65:4a:4e:17:5d:95:2a:33:b4:e8:57:
         d6:14:cb:5e:9c:67:3e:5d:8d:c0:81:b6:1e:27:db:aa:8d:bd:
         44:ed:6e:8f:27:bf:0e:ec:28:c2:7e:c9:01:5c:a9:b2:f2:64:
         1d:4a:f3:ff:e1:84:03:8a:ac:29:19:14:70:93:0e:b0:b2:04:
         35:47:b8:07:2f:9b:9b:6c:8c:de:f5:54:6b:4a:f0:9b:65:a4:
         bb:f4:14:a2:ce:96:d0:11:9b:2d:9e:19:96:82:df:5c:3e:8b:
         e8:5a:c4:2f:f6:6c:a2:5a:5b:2f:e9:4b:19:2d:c7:90:ef:07:
         0e:c0:c4:fd:84:5a:32:be:d1:dd:a0:c9:2c:9f:68:76:00:27:
         bb:86:ea:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:23:21 2025 by rpki-client