Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDDETkYHmD5n5LzxiMCnLz6gi8GpR86GsywbYCo7BmYc/1/323830343a323534633a383030303a3a2f33342d3334203d3e20323634323732.roa
File:                     323830343a323534633a383030303a3a2f33342d3334203d3e20323634323732.roa (raw, json)
Hash identifier:          4QdAKA28XFHju5WPpF+9y+HOLBEkJ+jgLX+9pCcubzA=
Subject key identifier:   02:2A:47:06:96:F5:FD:8A:E9:DB:7D:87:C8:FC:77:8B:B1:7A:AF:8D
Certificate issuer:       /CN=FA750C3B65BE17259A1BDFD09FAFBAACDC919B1E
Certificate serial:       3DAA525990136501A65D1E21575CEBD3D0D27194
Authority key identifier: FA:75:0C:3B:65:BE:17:25:9A:1B:DF:D0:9F:AF:BA:AC:DC:91:9B:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA750C3B65BE17259A1BDFD09FAFBAACDC919B1E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDDETkYHmD5n5LzxiMCnLz6gi8GpR86GsywbYCo7BmYc/1/323830343a323534633a383030303a3a2f33342d3334203d3e20323634323732.roa
Signing time:             Tue 26 Nov 2024 01:27:29 +0000
ROA not before:           Tue 26 Nov 2024 01:22:29 +0000
ROA not after:            Tue 25 Nov 2025 01:27:29 +0000
asID:                     264272
IP address blocks:        2804:254c:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:aa:52:59:90:13:65:01:a6:5d:1e:21:57:5c:eb:d3:d0:d2:71:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA750C3B65BE17259A1BDFD09FAFBAACDC919B1E
        Validity
            Not Before: Nov 26 01:22:29 2024 GMT
            Not After : Nov 25 01:27:29 2025 GMT
        Subject: CN=022A470696F5FD8AE9DB7D87C8FC778BB17AAF8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4a:79:6d:82:6c:50:62:db:36:78:46:4e:e6:
                    83:49:c8:91:01:b3:32:0c:89:97:d5:34:3c:b6:12:
                    68:9d:31:f2:e3:42:17:39:64:4e:70:9a:80:e7:89:
                    40:e8:85:60:a8:50:d1:1b:6a:ac:4a:c1:cd:aa:16:
                    0a:d7:c0:fd:08:ca:f9:4a:d0:14:26:a5:84:c6:8d:
                    65:a1:17:a2:56:d7:69:59:5d:a7:4c:29:15:85:fa:
                    c5:79:f1:17:22:a2:d2:5c:49:92:f3:1f:32:15:99:
                    1a:bd:18:3f:36:bc:af:06:a3:ae:8e:3a:90:34:e2:
                    85:6d:2a:d4:a9:1e:af:7e:60:b6:91:3a:8e:e8:a1:
                    16:a6:66:fb:ad:c8:c5:a1:22:9a:4f:40:8a:49:06:
                    19:51:16:35:c9:00:ba:c3:a8:11:3d:aa:0a:05:4b:
                    c3:6d:8f:87:8e:df:f5:93:40:67:e9:c6:c7:5a:c6:
                    59:0f:fe:e7:fb:83:07:3f:2c:b3:76:9b:85:09:2c:
                    65:f7:18:90:e0:82:12:84:5e:9c:d0:f6:25:3a:1d:
                    38:d1:50:6e:77:e5:b4:a8:55:bf:37:e8:07:36:ad:
                    82:2d:a3:32:34:82:a0:a3:4b:12:a2:cf:20:25:b8:
                    bf:b2:f6:d9:d0:36:b2:bd:c0:29:94:3c:13:e1:8b:
                    a9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:2A:47:06:96:F5:FD:8A:E9:DB:7D:87:C8:FC:77:8B:B1:7A:AF:8D
            X509v3 Authority Key Identifier:
                keyid:FA:75:0C:3B:65:BE:17:25:9A:1B:DF:D0:9F:AF:BA:AC:DC:91:9B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDDETkYHmD5n5LzxiMCnLz6gi8GpR86GsywbYCo7BmYc/1/FA750C3B65BE17259A1BDFD09FAFBAACDC919B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA750C3B65BE17259A1BDFD09FAFBAACDC919B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDDETkYHmD5n5LzxiMCnLz6gi8GpR86GsywbYCo7BmYc/1/323830343a323534633a383030303a3a2f33342d3334203d3e20323634323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:254c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7c:38:ee:dd:a5:db:0d:b7:a7:d5:bf:c6:33:b1:69:c3:05:ee:
         c2:06:d5:3d:6a:cf:ad:83:4a:93:bc:bd:37:7e:95:bf:48:57:
         4e:37:ea:69:07:7f:9d:be:ab:cb:d9:06:e5:a4:f6:b7:96:22:
         8e:c4:80:4b:99:b5:11:dc:89:b9:0c:df:af:35:13:ab:86:8b:
         37:ce:90:ad:f3:54:13:b0:65:fc:ba:15:da:06:1f:b8:48:d7:
         57:40:71:47:a9:78:c4:64:1b:fb:5f:ed:a2:e3:ec:ff:48:1d:
         1b:25:cc:70:26:20:8d:63:75:2d:d4:50:4b:34:54:4b:05:ad:
         20:1f:53:df:91:83:34:73:fc:17:a1:13:6a:a9:02:27:87:08:
         8e:10:27:45:1c:bb:52:e9:ad:82:ce:31:dd:d2:98:8c:41:78:
         2f:b5:54:a4:e7:61:e6:11:67:3d:c7:68:17:1a:02:35:1b:c6:
         56:5b:fb:68:39:1a:7d:58:21:02:4d:9a:6b:e9:eb:be:2c:fd:
         6c:de:e0:d2:ba:ba:c3:5b:52:ff:cd:47:a3:07:82:28:4f:a6:
         11:81:81:2f:98:2b:ab:d8:86:bb:98:d6:29:2d:56:59:9c:8d:
         f0:61:8e:8b:a1:73:01:5d:7d:92:45:8e:8c:49:91:91:4d:60:
         71:78:18:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 08:45:43 2025 by rpki-client