Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/323830343a333932303a383030303a3a2f33362d3336203d3e20323636303133.roa
File:                     323830343a333932303a383030303a3a2f33362d3336203d3e20323636303133.roa (raw, json)
Hash identifier:          enCm2F8nPsb6n0p5JYndqXA2aR2rRZgsRIvFDvtjDo8=
Subject key identifier:   CE:CA:A3:2A:A2:4F:30:20:C2:0B:4E:68:28:0D:BF:07:F1:89:DD:E0
Certificate issuer:       /CN=0CF49321F81789A195BED10A6CB07A13AF657F42
Certificate serial:       15B544D79BCA8DA1798E0D1F890B4DA1B6589F9F
Authority key identifier: 0C:F4:93:21:F8:17:89:A1:95:BE:D1:0A:6C:B0:7A:13:AF:65:7F:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF49321F81789A195BED10A6CB07A13AF657F42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/323830343a333932303a383030303a3a2f33362d3336203d3e20323636303133.roa
Signing time:             Thu 06 Mar 2025 13:27:21 +0000
ROA not before:           Thu 06 Mar 2025 13:22:21 +0000
ROA not after:            Thu 05 Mar 2026 13:27:21 +0000
asID:                     266013
IP address blocks:        2804:3920:8000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:b5:44:d7:9b:ca:8d:a1:79:8e:0d:1f:89:0b:4d:a1:b6:58:9f:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CF49321F81789A195BED10A6CB07A13AF657F42
        Validity
            Not Before: Mar  6 13:22:21 2025 GMT
            Not After : Mar  5 13:27:21 2026 GMT
        Subject: CN=CECAA32AA24F3020C20B4E68280DBF07F189DDE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:50:a6:ee:a1:68:cc:2f:f4:b0:4e:2b:6f:5f:
                    38:e4:18:0e:20:86:a9:19:fa:fe:74:7c:15:64:97:
                    de:ed:82:38:0c:a7:ce:c7:b8:db:8d:07:51:c2:72:
                    c9:2f:3c:8d:6d:d8:df:d5:30:c2:11:af:d9:e1:6c:
                    16:be:12:ec:97:41:68:5b:54:35:c9:77:b6:0b:2c:
                    01:07:80:78:1f:cd:75:06:8b:18:ba:3a:e2:42:fa:
                    58:70:cd:88:11:27:7c:53:e3:ae:fd:1f:e0:f4:d6:
                    83:55:bf:e2:65:53:a7:57:ae:a9:d3:af:c4:6b:31:
                    0a:f7:b4:7f:86:a3:e7:9e:3f:e6:e1:cb:77:7e:70:
                    3c:ed:21:7f:50:d7:73:cc:29:17:61:21:dd:8c:90:
                    f8:d9:67:0a:1e:23:2e:19:fc:c6:c0:57:2d:7d:58:
                    f9:8b:07:0b:d0:e0:e0:90:6b:e6:ed:9a:aa:24:45:
                    0c:c3:c7:ae:7b:9e:f0:08:db:52:29:49:61:0d:db:
                    50:47:65:62:09:41:ac:e1:2f:29:48:51:65:8a:34:
                    e8:c7:01:ce:61:3e:21:04:38:28:41:32:f1:d0:a3:
                    e1:88:63:41:d2:95:e5:02:13:f5:0a:06:e6:f1:57:
                    d1:0a:98:f8:f8:56:ba:c3:31:0a:1f:79:ae:50:c7:
                    28:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:CA:A3:2A:A2:4F:30:20:C2:0B:4E:68:28:0D:BF:07:F1:89:DD:E0
            X509v3 Authority Key Identifier:
                keyid:0C:F4:93:21:F8:17:89:A1:95:BE:D1:0A:6C:B0:7A:13:AF:65:7F:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/0CF49321F81789A195BED10A6CB07A13AF657F42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF49321F81789A195BED10A6CB07A13AF657F42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/323830343a333932303a383030303a3a2f33362d3336203d3e20323636303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3920:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         72:5d:d8:f6:26:4c:45:2f:6b:f2:93:f8:0c:fb:d6:ec:5a:94:
         9f:c6:a4:43:82:75:7b:87:0d:05:b7:a0:63:80:ad:1a:1e:58:
         01:c2:89:3e:72:aa:8c:9e:29:2d:1c:22:9c:d9:bd:2b:5f:0d:
         17:da:ee:a9:53:2b:39:aa:83:6f:40:8b:77:84:2b:e8:b2:db:
         ec:81:80:5a:7a:dd:f3:20:01:8f:9d:9e:55:12:ba:df:58:bf:
         e6:e4:43:36:2b:1f:df:89:b7:8d:4b:c6:5a:7e:49:91:dc:3e:
         08:f7:3c:36:de:92:b1:90:fb:0a:9b:2c:05:23:37:d2:b6:fe:
         25:e7:75:84:2f:73:51:84:e9:25:e0:ec:a9:a8:0b:8f:e3:c9:
         13:85:2c:ac:aa:fe:21:0c:3b:9b:96:40:9a:d5:78:45:77:5a:
         bd:61:41:96:de:1f:b4:8b:e5:b9:57:6f:d3:0a:3b:9a:53:12:
         f2:11:be:d1:94:7a:eb:ad:80:60:64:0f:6d:9a:6d:ce:a1:46:
         24:13:71:3e:b4:f6:de:9b:ff:83:c8:88:88:df:1a:0f:3b:2e:
         c1:59:52:fd:cd:0a:fe:e8:b2:6d:f1:0d:d7:dc:ea:61:60:c6:
         18:55:23:fd:36:03:72:d6:24:7b:e1:95:46:95:21:9a:36:76:
         b7:8b:c3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:23:09 2025 by rpki-client