Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cd745dSCjNkCXwJuiEX8rQwj7VXtYyN28wghJbB5JBxM/0/323830343a366330383a383030303a3a2f33342d3334203d3e20323730343431.roa
File:                     323830343a366330383a383030303a3a2f33342d3334203d3e20323730343431.roa (raw, json)
Hash identifier:          QSyQ1JcOv4KVWu0tFMax6Iax0KPUpXxQR61viieH9ic=
Subject key identifier:   39:61:27:E8:5D:EF:E3:71:47:1E:41:92:B2:10:12:DE:2A:BE:1A:20
Certificate issuer:       /CN=B7A47B954D8AD8923A7A8FADCDB82787C31FB16A
Certificate serial:       1E7010A8F31633584909829B6A44C99D76084EC0
Authority key identifier: B7:A4:7B:95:4D:8A:D8:92:3A:7A:8F:AD:CD:B8:27:87:C3:1F:B1:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7A47B954D8AD8923A7A8FADCDB82787C31FB16A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cd745dSCjNkCXwJuiEX8rQwj7VXtYyN28wghJbB5JBxM/0/323830343a366330383a383030303a3a2f33342d3334203d3e20323730343431.roa
Signing time:             Tue 03 Dec 2024 14:13:49 +0000
ROA not before:           Tue 03 Dec 2024 14:08:49 +0000
ROA not after:            Tue 02 Dec 2025 14:13:49 +0000
asID:                     270441
IP address blocks:        2804:6c08:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:70:10:a8:f3:16:33:58:49:09:82:9b:6a:44:c9:9d:76:08:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7A47B954D8AD8923A7A8FADCDB82787C31FB16A
        Validity
            Not Before: Dec  3 14:08:49 2024 GMT
            Not After : Dec  2 14:13:49 2025 GMT
        Subject: CN=396127E85DEFE371471E4192B21012DE2ABE1A20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7a:ec:b2:6d:df:46:8d:3c:fb:7a:a9:e6:29:
                    5e:dd:23:4d:70:f5:73:a4:3d:0f:6b:1b:97:0b:4f:
                    a5:31:f2:cc:32:a2:80:97:6a:76:4d:96:d0:79:94:
                    2d:98:de:9f:20:cf:cb:68:5a:ed:71:fa:12:2d:e5:
                    12:77:2b:fc:19:d6:de:52:5d:93:04:13:7d:9a:27:
                    16:c3:8c:9c:a4:ea:51:0d:2d:16:8a:b4:40:20:fb:
                    f1:61:a3:a7:51:00:d2:49:16:3a:4b:74:49:98:db:
                    41:b8:8d:b2:79:f4:8e:02:df:55:f5:8e:89:f4:08:
                    a1:ee:6c:37:1c:db:db:80:52:77:69:b5:4e:ac:b5:
                    63:22:9a:42:57:18:73:5d:ea:6d:17:31:ff:a8:fd:
                    82:d6:6b:f5:63:70:e7:04:3b:14:1f:b6:6e:9f:60:
                    2f:48:72:3e:7e:5e:cb:ef:62:87:84:f1:50:cc:ab:
                    51:f2:59:2e:8d:12:cf:4d:d4:20:1f:47:e2:b8:60:
                    52:fe:45:01:0c:75:19:d1:b4:f4:f5:6e:92:6d:02:
                    19:99:13:5c:c9:87:f9:b3:5e:fa:fb:c8:25:3a:15:
                    dc:cc:65:14:ce:63:65:b8:47:88:f1:ec:a2:aa:e4:
                    19:55:82:5b:f0:b7:f2:39:83:9b:14:3a:5d:13:6d:
                    fd:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:61:27:E8:5D:EF:E3:71:47:1E:41:92:B2:10:12:DE:2A:BE:1A:20
            X509v3 Authority Key Identifier:
                keyid:B7:A4:7B:95:4D:8A:D8:92:3A:7A:8F:AD:CD:B8:27:87:C3:1F:B1:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cd745dSCjNkCXwJuiEX8rQwj7VXtYyN28wghJbB5JBxM/0/B7A47B954D8AD8923A7A8FADCDB82787C31FB16A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7A47B954D8AD8923A7A8FADCDB82787C31FB16A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cd745dSCjNkCXwJuiEX8rQwj7VXtYyN28wghJbB5JBxM/0/323830343a366330383a383030303a3a2f33342d3334203d3e20323730343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c08:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         99:e6:ce:10:b9:d8:3a:0f:5c:67:ac:2c:23:93:f2:5c:6d:4f:
         4a:7b:d6:28:03:c7:77:89:7d:b0:dc:a2:fe:18:4c:17:d7:a1:
         ae:90:71:ea:24:c2:05:ee:23:f5:1c:03:bf:cd:79:60:e3:60:
         76:26:05:33:13:31:93:75:24:50:d7:e2:c0:53:7a:17:26:76:
         43:97:f4:87:86:ec:e4:9a:a0:91:93:83:58:a8:35:68:6b:a0:
         e3:c9:4e:b2:ad:17:14:88:30:c5:93:04:a3:31:6b:a0:13:18:
         5d:c3:e6:ec:a2:37:92:2a:25:71:f1:08:c7:67:a6:97:25:31:
         9d:e2:81:bf:79:85:e7:3f:fb:b4:75:32:77:02:ad:3a:1f:2c:
         8e:1e:5c:9d:1f:e0:af:2e:c4:6c:cd:f6:01:3f:d2:59:9f:e5:
         3a:17:7c:14:88:2d:5d:2c:42:0d:15:7d:a2:17:eb:63:f7:91:
         38:9c:03:df:31:95:08:f0:a8:a4:bf:27:13:67:a6:01:0a:b5:
         a4:96:01:33:cd:9a:fe:f6:8e:6e:54:7e:95:d2:c9:0b:2c:9b:
         0d:76:ee:11:26:44:8b:3f:6a:24:51:81:e2:cb:d2:b4:88:f8:
         7b:2c:21:bc:23:54:7e:ec:c2:b1:1c:fe:59:08:32:a9:a1:44:
         37:6c:f2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:23:45 2025 by rpki-client