Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/323830343a373335633a383030303a3a2f33342d3334203d3e20323730393130.roa
File:                     323830343a373335633a383030303a3a2f33342d3334203d3e20323730393130.roa (raw, json)
Hash identifier:          Ulv4RTpeTslsGZ5TbUtgqSerz8eJUs5BkC94t7q0SOM=
Subject key identifier:   34:FE:26:71:22:A9:EC:1C:2C:AC:64:96:57:B2:9A:6E:74:CC:AC:18
Certificate issuer:       /CN=1A290848CB48B2366D6F878C4A2126EBA581FDEC
Certificate serial:       5F0195F65DF66C9C8514AF00CC898B35755FF4BD
Authority key identifier: 1A:29:08:48:CB:48:B2:36:6D:6F:87:8C:4A:21:26:EB:A5:81:FD:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A290848CB48B2366D6F878C4A2126EBA581FDEC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/323830343a373335633a383030303a3a2f33342d3334203d3e20323730393130.roa
Signing time:             Wed 20 Mar 2024 07:10:20 +0000
ROA not before:           Wed 20 Mar 2024 07:05:20 +0000
ROA not after:            Wed 19 Mar 2025 07:10:20 +0000
asID:                     270910
IP address blocks:        2804:735c:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:01:95:f6:5d:f6:6c:9c:85:14:af:00:cc:89:8b:35:75:5f:f4:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A290848CB48B2366D6F878C4A2126EBA581FDEC
        Validity
            Not Before: Mar 20 07:05:20 2024 GMT
            Not After : Mar 19 07:10:20 2025 GMT
        Subject: CN=34FE267122A9EC1C2CAC649657B29A6E74CCAC18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8f:0f:14:82:6d:44:95:90:f1:2c:d7:e5:de:
                    b5:59:2c:96:af:ce:61:d9:34:fc:64:0d:38:f6:3a:
                    01:42:1f:c8:22:46:70:2c:83:e3:d6:73:c6:6a:3f:
                    ee:df:24:e9:60:5e:70:51:64:d5:bf:0d:b5:f4:54:
                    ec:15:de:d4:db:cf:05:91:75:b3:87:32:e9:78:b8:
                    62:b9:f0:65:61:2e:56:e1:bb:e2:a1:8d:76:e5:2e:
                    7a:e3:ea:a0:cc:c1:e5:6b:00:dd:65:92:2a:14:8b:
                    d1:42:01:2f:a4:b3:f7:60:3b:6e:31:a1:cf:ea:25:
                    99:4e:e8:59:20:92:04:e7:0c:11:2e:2b:d4:0a:73:
                    63:c1:01:a9:71:e8:80:f4:bf:33:0e:88:a2:18:d4:
                    1d:da:d0:58:ed:88:8d:f7:6d:7d:5f:c8:a8:fe:ff:
                    93:fe:ad:ef:9c:0a:3a:bb:04:58:b6:b9:dd:92:7b:
                    f5:72:03:01:cc:ca:f6:da:24:90:1c:83:71:53:60:
                    ac:e3:f2:ba:a8:ca:b9:48:30:c9:f2:c3:ee:45:84:
                    27:6e:0e:7f:84:25:dd:1b:51:f0:dd:49:99:ed:3c:
                    07:63:a3:27:ef:f8:80:9a:6e:5c:0b:96:05:19:61:
                    4a:03:e9:d5:b6:43:4b:c2:20:94:18:bd:d9:1e:60:
                    09:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:FE:26:71:22:A9:EC:1C:2C:AC:64:96:57:B2:9A:6E:74:CC:AC:18
            X509v3 Authority Key Identifier:
                keyid:1A:29:08:48:CB:48:B2:36:6D:6F:87:8C:4A:21:26:EB:A5:81:FD:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/1A290848CB48B2366D6F878C4A2126EBA581FDEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A290848CB48B2366D6F878C4A2126EBA581FDEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/323830343a373335633a383030303a3a2f33342d3334203d3e20323730393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:735c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a8:e9:ef:98:f3:32:96:94:c9:b4:40:62:3b:4e:a0:b8:b9:31:
         b2:39:6d:72:36:f0:a9:d6:02:9b:bb:0b:82:56:88:92:c7:75:
         30:d4:5a:a4:8e:dc:d4:bc:58:2e:84:59:4c:28:06:68:96:a0:
         d1:42:cc:08:58:90:0e:22:b2:9a:04:27:bf:85:e9:bf:f3:16:
         a5:a9:9f:f7:df:50:ca:5d:cf:1c:02:42:7f:ea:55:48:f2:70:
         f7:d0:57:b2:e3:4c:47:99:b5:74:36:a9:98:af:a8:9e:b1:ff:
         39:86:cf:c7:92:9a:45:f6:5c:48:2c:43:81:e0:1a:d1:1a:db:
         c0:2e:cd:61:17:75:25:cd:bc:d4:0b:8e:81:8a:7b:14:14:58:
         7b:87:35:20:83:a2:4b:53:77:58:95:c5:89:a0:e0:77:6c:2d:
         73:ac:31:41:e0:18:43:7d:d9:d4:8b:4a:fb:8d:73:c9:8b:b9:
         aa:d8:b9:25:48:f7:f1:42:84:fd:fc:88:f3:8c:06:ee:09:00:
         b5:6e:a6:60:78:d7:86:e8:0c:2c:03:69:80:93:f2:58:fd:0e:
         ce:cb:f6:ff:ba:37:d7:60:58:d7:b0:6d:e7:7e:7b:2d:48:09:
         41:bf:4e:e1:70:df:0d:30:af:b5:a9:b3:ce:ed:62:16:33:bd:
         26:a7:ba:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:01:03 2025 by rpki-client