Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/2/323830343a373736343a343030303a3a2f33342d3334203d3e20323731313735.roa
File:                     323830343a373736343a343030303a3a2f33342d3334203d3e20323731313735.roa (raw, json)
Hash identifier:          AzQTtdAUJ09gQ0rml8OLGxnTe16bgz6N2Yh6/dyA6a4=
Subject key identifier:   13:B7:A0:B0:5E:27:73:12:2E:62:87:4D:C9:48:4F:ED:95:5F:BB:3A
Certificate issuer:       /CN=E59164CC5F9B9103B7458C29C6839E943B50F64D
Certificate serial:       35DEA7B7E49A71BB03E84F335FE7528B29D9ACD8
Authority key identifier: E5:91:64:CC:5F:9B:91:03:B7:45:8C:29:C6:83:9E:94:3B:50:F6:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E59164CC5F9B9103B7458C29C6839E943B50F64D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/2/323830343a373736343a343030303a3a2f33342d3334203d3e20323731313735.roa
Signing time:             Wed 24 Apr 2024 18:51:43 +0000
ROA not before:           Wed 24 Apr 2024 18:46:43 +0000
ROA not after:            Wed 23 Apr 2025 18:51:43 +0000
asID:                     271175
IP address blocks:        2804:7764:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:de:a7:b7:e4:9a:71:bb:03:e8:4f:33:5f:e7:52:8b:29:d9:ac:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E59164CC5F9B9103B7458C29C6839E943B50F64D
        Validity
            Not Before: Apr 24 18:46:43 2024 GMT
            Not After : Apr 23 18:51:43 2025 GMT
        Subject: CN=13B7A0B05E2773122E62874DC9484FED955FBB3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:da:90:1d:2b:48:57:50:d6:5e:7c:80:a2:b0:
                    88:70:84:f0:1d:df:95:fe:da:22:a3:01:6f:52:6f:
                    6e:d1:75:16:aa:14:11:0d:44:fb:c3:fa:ac:ad:e4:
                    7e:39:70:f4:78:90:28:08:ec:db:22:9b:d7:c0:3d:
                    7d:a0:28:39:7f:79:0a:c1:cc:c8:10:bf:cd:f1:e8:
                    60:ea:59:a2:bc:46:5b:cb:64:19:52:03:b6:87:be:
                    e7:9b:8a:5e:df:53:df:e3:93:17:14:db:9c:3d:6a:
                    5b:1c:3e:44:22:03:94:e8:03:ac:f9:90:88:9f:80:
                    7b:15:09:e9:75:a3:bb:5e:9d:f6:e2:d1:7a:fb:93:
                    f9:4f:16:7f:20:93:a1:f0:92:92:b9:84:fd:30:06:
                    a0:6d:6f:1d:82:4c:b8:7b:66:76:53:91:81:24:ee:
                    c5:aa:87:3b:0e:25:cc:53:ee:1e:f6:d7:e1:08:a9:
                    fd:b4:f6:e0:32:bd:a0:e3:cd:c7:b2:31:bc:2b:30:
                    3e:ba:40:c4:bf:ce:ae:51:ca:59:28:ee:5b:03:e2:
                    a2:c1:c1:47:b7:c4:22:04:2d:31:14:8a:76:ef:36:
                    58:41:b7:3d:c1:f7:fe:c3:75:b8:aa:a0:ca:0a:f2:
                    6a:d4:2c:b8:f4:0c:e7:d5:a1:a6:f5:5b:21:30:0a:
                    96:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B7:A0:B0:5E:27:73:12:2E:62:87:4D:C9:48:4F:ED:95:5F:BB:3A
            X509v3 Authority Key Identifier:
                keyid:E5:91:64:CC:5F:9B:91:03:B7:45:8C:29:C6:83:9E:94:3B:50:F6:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/2/E59164CC5F9B9103B7458C29C6839E943B50F64D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E59164CC5F9B9103B7458C29C6839E943B50F64D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/2/323830343a373736343a343030303a3a2f33342d3334203d3e20323731313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7764:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3b:42:db:b5:92:05:18:50:5a:5a:18:50:e1:b7:47:d9:0e:c8:
         12:01:cb:b9:e9:e5:3f:ca:ff:e8:bd:6f:92:d0:57:6b:87:59:
         c7:07:d5:df:50:74:89:9b:c0:c8:2d:50:c4:54:9a:e8:61:c5:
         7c:ca:39:c3:af:e6:22:c9:6e:16:83:5e:9c:f4:57:cd:ea:09:
         ad:9c:4b:92:73:ad:de:d9:b1:cd:ba:38:7a:b0:35:7d:b8:9e:
         ce:55:22:3a:00:a2:b8:da:f7:91:83:f4:80:86:ec:2a:b0:cb:
         5f:84:c6:28:84:8b:93:1b:de:26:51:5b:28:15:64:cc:06:df:
         af:f0:93:8d:da:f9:08:9f:2a:4b:9d:e8:ee:30:de:87:d5:11:
         c5:83:3a:34:0e:4d:48:1d:f1:e3:7b:41:05:c4:14:37:d6:d1:
         3a:0b:c3:cc:6b:d3:a1:bf:98:21:4d:a1:05:ac:92:9c:39:98:
         d6:54:35:4d:d2:7b:6d:77:7c:39:08:18:de:cd:ea:e2:7f:33:
         49:9d:de:62:71:a2:b5:80:81:ba:9c:d0:5a:61:d6:66:24:25:
         fb:f0:50:23:18:c9:24:d8:45:0f:77:c3:83:f5:fc:c0:78:a7:
         e0:43:db:44:7e:65:3e:aa:94:3b:54:dd:15:90:a6:5b:e1:c3:
         01:fd:31:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:34:55 2025 by rpki-client