Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDDETkYHmD5n5LzxiMCnLz6gi8GpR86GsywbYCo7BmYc/1/323830343a323534633a343030303a3a2f33342d3334203d3e20323634323732.roa
File:                     323830343a323534633a343030303a3a2f33342d3334203d3e20323634323732.roa (raw, json)
Hash identifier:          PiW8pH5Yt54tDiGXDFeQM/IcjdKp6oPQgY0M7fnzUbE=
Subject key identifier:   5B:E6:41:5A:4F:A4:02:F4:4E:FB:F9:27:BB:23:11:84:B0:02:63:D0
Certificate issuer:       /CN=FA750C3B65BE17259A1BDFD09FAFBAACDC919B1E
Certificate serial:       02E1CBE3170B83B54318FD95012EE868FD99BA28
Authority key identifier: FA:75:0C:3B:65:BE:17:25:9A:1B:DF:D0:9F:AF:BA:AC:DC:91:9B:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA750C3B65BE17259A1BDFD09FAFBAACDC919B1E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDDETkYHmD5n5LzxiMCnLz6gi8GpR86GsywbYCo7BmYc/1/323830343a323534633a343030303a3a2f33342d3334203d3e20323634323732.roa
Signing time:             Tue 26 Nov 2024 01:27:00 +0000
ROA not before:           Tue 26 Nov 2024 01:22:00 +0000
ROA not after:            Tue 25 Nov 2025 01:27:00 +0000
asID:                     264272
IP address blocks:        2804:254c:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:e1:cb:e3:17:0b:83:b5:43:18:fd:95:01:2e:e8:68:fd:99:ba:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA750C3B65BE17259A1BDFD09FAFBAACDC919B1E
        Validity
            Not Before: Nov 26 01:22:00 2024 GMT
            Not After : Nov 25 01:27:00 2025 GMT
        Subject: CN=5BE6415A4FA402F44EFBF927BB231184B00263D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:88:5f:e8:18:ba:b3:5c:87:c6:2c:d0:19:9b:
                    d1:f9:d5:de:97:4b:fc:88:d0:9d:f7:9f:8c:11:c8:
                    9f:b4:fc:a7:e5:c4:a8:ee:41:3f:6f:0a:7e:df:1a:
                    c5:f6:60:e9:f5:e4:f0:94:c8:bf:2d:99:3d:57:d1:
                    f1:5b:0d:4b:65:bd:93:30:72:d4:bd:0f:e2:e0:e0:
                    a3:5a:56:b6:ac:8b:3f:52:b5:9b:db:09:19:8a:b3:
                    63:31:aa:e7:75:ec:d5:c9:8e:3e:48:28:87:96:8e:
                    e9:ed:dd:4d:d3:16:2c:af:31:2e:90:77:b6:92:34:
                    7c:a5:42:cd:76:e8:a9:7c:de:63:ba:3d:8d:fd:43:
                    16:d8:75:6d:13:d7:6b:0b:03:6b:25:bd:8e:b5:d1:
                    d1:a2:7b:d8:0a:87:0e:0f:9d:a7:75:d0:8d:41:96:
                    40:fe:2b:85:5d:24:1b:59:e5:d9:15:e5:95:81:d0:
                    bb:93:fa:c9:af:2b:ec:4a:da:7b:b8:ad:d8:0d:f4:
                    c5:3f:ab:40:86:fc:a2:f9:70:6f:e5:37:cb:3a:8f:
                    f8:01:cc:51:78:b4:e2:25:63:7d:49:d9:46:f9:8c:
                    eb:0f:7e:f4:d0:ab:fe:24:3c:67:73:77:e0:ef:12:
                    59:d8:78:7a:5e:1a:ec:33:5d:bd:0a:bf:37:ba:0d:
                    ed:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E6:41:5A:4F:A4:02:F4:4E:FB:F9:27:BB:23:11:84:B0:02:63:D0
            X509v3 Authority Key Identifier:
                keyid:FA:75:0C:3B:65:BE:17:25:9A:1B:DF:D0:9F:AF:BA:AC:DC:91:9B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDDETkYHmD5n5LzxiMCnLz6gi8GpR86GsywbYCo7BmYc/1/FA750C3B65BE17259A1BDFD09FAFBAACDC919B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA750C3B65BE17259A1BDFD09FAFBAACDC919B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDDETkYHmD5n5LzxiMCnLz6gi8GpR86GsywbYCo7BmYc/1/323830343a323534633a343030303a3a2f33342d3334203d3e20323634323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:254c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         8b:2f:3b:bd:af:eb:ff:59:0f:04:ae:17:3f:8f:63:14:54:48:
         fb:9a:68:59:a7:46:8d:64:8f:98:0a:8d:51:39:f1:86:81:bc:
         2a:9a:7a:8b:6d:15:31:02:fe:0b:82:25:24:5f:dc:f5:61:b4:
         33:e8:38:6e:4a:90:1e:79:1f:f5:0c:b2:81:2a:79:39:76:f8:
         c5:14:8d:15:4a:10:b9:e3:10:78:13:cc:3f:86:d6:e5:ff:8a:
         73:aa:21:a0:4f:1c:b9:67:de:87:94:f7:66:36:ee:d7:c8:e3:
         96:6c:97:b7:e0:6f:7d:d4:ee:44:16:fe:88:ab:95:59:90:6e:
         0b:56:4a:7f:0a:b6:88:15:75:5c:db:e4:cb:50:ac:68:3a:92:
         1d:99:fd:3c:57:3b:a1:29:4c:c9:cb:ef:87:95:c2:75:99:c2:
         04:b0:c1:5e:31:64:f2:31:70:24:b5:15:db:68:a8:8f:2b:92:
         5e:a9:b6:90:39:3c:de:be:25:85:73:05:39:62:b1:17:ce:94:
         c8:e3:6e:9f:48:6b:ee:42:b1:45:60:d3:73:2c:68:d2:b8:37:
         8a:53:a7:e4:a7:39:7b:5a:56:8c:e7:9b:61:35:67:47:41:74:
         00:41:14:05:1a:6b:28:20:3e:89:c9:f3:a3:b5:69:94:a1:bc:
         82:4b:a8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 08:40:04 2025 by rpki-client