Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/323830343a333932303a343430303a3a2f34302d3430203d3e20323636303133.roa
File:                     323830343a333932303a343430303a3a2f34302d3430203d3e20323636303133.roa (raw, json)
Hash identifier:          ZfDOXLB5lW5VrB3c60W0URGJzalPpCrInGFIYT3qwC8=
Subject key identifier:   5D:49:81:46:57:4C:B2:B8:E2:D5:D5:9C:D1:34:B1:4D:AD:24:E3:5E
Certificate issuer:       /CN=0CF49321F81789A195BED10A6CB07A13AF657F42
Certificate serial:       1A5994757A78428CED7B2F03364DC926F1BFDBC2
Authority key identifier: 0C:F4:93:21:F8:17:89:A1:95:BE:D1:0A:6C:B0:7A:13:AF:65:7F:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF49321F81789A195BED10A6CB07A13AF657F42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/323830343a333932303a343430303a3a2f34302d3430203d3e20323636303133.roa
Signing time:             Thu 06 Mar 2025 13:27:23 +0000
ROA not before:           Thu 06 Mar 2025 13:22:23 +0000
ROA not after:            Thu 05 Mar 2026 13:27:23 +0000
asID:                     266013
IP address blocks:        2804:3920:4400::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:59:94:75:7a:78:42:8c:ed:7b:2f:03:36:4d:c9:26:f1:bf:db:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CF49321F81789A195BED10A6CB07A13AF657F42
        Validity
            Not Before: Mar  6 13:22:23 2025 GMT
            Not After : Mar  5 13:27:23 2026 GMT
        Subject: CN=5D498146574CB2B8E2D5D59CD134B14DAD24E35E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1e:60:3d:d0:9a:f7:4f:68:6b:df:d1:8b:96:
                    f4:ad:29:82:47:4d:1a:ce:59:49:3b:1e:f3:c7:5c:
                    e0:03:98:4d:cc:c1:00:27:06:5e:e5:90:31:c7:30:
                    63:6c:ae:ee:eb:c9:85:51:a4:25:75:dc:12:c6:df:
                    58:bf:b1:9a:91:a2:58:7c:89:41:ef:7d:e7:9c:a8:
                    91:58:f1:72:18:ac:a2:5e:d0:be:ea:12:49:f0:b6:
                    c8:a6:3b:52:a4:bc:18:d7:26:a3:40:91:e4:b5:ee:
                    09:a7:c8:eb:a5:65:48:d1:65:99:23:f4:4b:2f:d7:
                    ce:88:1e:9a:e5:f3:02:49:8b:53:59:98:92:da:20:
                    a1:fd:e2:26:73:0c:46:ed:46:be:71:38:ad:86:ae:
                    5b:fc:aa:d2:9b:ee:6d:5f:0d:98:8e:c1:ad:fe:0f:
                    c8:eb:4d:de:59:a0:a4:5a:f5:47:8f:c1:3e:65:5e:
                    b0:b2:5d:f1:ac:a8:c8:a8:2f:45:26:4a:6c:9b:6f:
                    84:ed:7f:d3:ed:59:b0:6e:8b:e2:24:22:0c:06:14:
                    a9:96:fd:40:bd:5f:ab:c0:23:7c:3e:d6:c0:20:53:
                    36:35:a7:6c:27:77:86:b1:2a:cd:25:e2:f2:86:e7:
                    74:c4:25:6f:13:6f:be:59:68:16:e0:96:69:f2:43:
                    cd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:49:81:46:57:4C:B2:B8:E2:D5:D5:9C:D1:34:B1:4D:AD:24:E3:5E
            X509v3 Authority Key Identifier:
                keyid:0C:F4:93:21:F8:17:89:A1:95:BE:D1:0A:6C:B0:7A:13:AF:65:7F:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/0CF49321F81789A195BED10A6CB07A13AF657F42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF49321F81789A195BED10A6CB07A13AF657F42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/323830343a333932303a343430303a3a2f34302d3430203d3e20323636303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3920:4400::/40

    Signature Algorithm: sha256WithRSAEncryption
         ce:21:9f:20:be:cb:2b:21:84:cc:35:5d:b7:65:ef:86:df:45:
         51:f8:fd:b1:aa:4d:95:10:64:85:6d:6c:63:e8:28:ff:58:77:
         26:69:04:4a:d8:2b:0a:4c:b1:71:46:b9:ae:a8:5c:43:26:2e:
         ae:d3:33:9d:e3:9c:43:5b:a9:df:db:31:4c:a4:42:e9:67:ef:
         c1:78:e8:5d:9c:53:aa:09:36:52:65:98:75:da:0b:6b:40:5a:
         1b:5a:32:5e:4e:69:56:a4:85:45:42:35:d3:f4:35:85:6c:de:
         84:91:ed:40:20:03:72:09:2b:d9:2a:27:88:d6:ad:7a:94:58:
         f3:23:ed:42:f1:8c:be:94:dd:42:06:9e:82:db:71:a0:5f:6d:
         2f:f8:a0:b2:e2:d5:01:89:27:86:c4:51:47:c0:d1:74:df:d0:
         82:b2:8d:4c:ad:4d:4a:37:34:19:fe:60:83:59:52:4d:0a:c6:
         f3:97:42:36:37:3d:0f:59:2b:82:ae:bf:69:c1:72:b2:fc:fb:
         e9:0d:e3:e4:a7:58:26:c4:1e:b3:2b:03:21:a3:2f:ce:0d:8c:
         b0:86:ae:6a:9d:ea:f4:c2:9a:88:6d:89:c5:9e:0d:e0:a7:d1:
         c8:04:cf:3f:e5:78:86:ec:e0:ca:62:c4:d2:c7:27:e3:e5:31:
         41:21:15:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:22:22 2025 by rpki-client