Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/2/323830343a373736343a383030303a3a2f33342d3334203d3e20323731313735.roa
File:                     323830343a373736343a383030303a3a2f33342d3334203d3e20323731313735.roa (raw, json)
Hash identifier:          3x/bzydLFeet0Di/MGIAYRRKc/RiMettRX0x0fd6Yrs=
Subject key identifier:   60:A5:D4:5D:CE:2B:23:5B:AA:DF:BE:8F:CA:A6:97:96:43:E9:B9:A0
Certificate issuer:       /CN=E59164CC5F9B9103B7458C29C6839E943B50F64D
Certificate serial:       69C96DF3C41EE8B877A91E562EE3AB5AFA793101
Authority key identifier: E5:91:64:CC:5F:9B:91:03:B7:45:8C:29:C6:83:9E:94:3B:50:F6:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E59164CC5F9B9103B7458C29C6839E943B50F64D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/2/323830343a373736343a383030303a3a2f33342d3334203d3e20323731313735.roa
Signing time:             Wed 24 Apr 2024 18:54:58 +0000
ROA not before:           Wed 24 Apr 2024 18:49:58 +0000
ROA not after:            Wed 23 Apr 2025 18:54:58 +0000
asID:                     271175
IP address blocks:        2804:7764:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:c9:6d:f3:c4:1e:e8:b8:77:a9:1e:56:2e:e3:ab:5a:fa:79:31:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E59164CC5F9B9103B7458C29C6839E943B50F64D
        Validity
            Not Before: Apr 24 18:49:58 2024 GMT
            Not After : Apr 23 18:54:58 2025 GMT
        Subject: CN=60A5D45DCE2B235BAADFBE8FCAA6979643E9B9A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:23:c2:5a:e2:9b:b2:9c:cc:39:b2:01:48:92:
                    8b:c9:3a:8f:4e:0b:e4:6e:57:d2:19:13:36:6a:f2:
                    a9:55:26:b4:ba:b2:bb:6c:42:09:a2:06:18:a1:aa:
                    96:7a:51:58:63:57:0b:74:7a:a7:ac:2d:7a:db:fa:
                    b7:7f:be:60:d9:76:c5:fb:a9:78:d3:f2:2e:03:29:
                    f1:ba:0a:58:d7:60:12:cf:20:69:c2:04:71:83:bb:
                    9c:ed:58:b2:df:8b:b6:60:51:a8:91:8d:45:28:1e:
                    a5:b9:9a:a9:33:8e:82:fc:6d:1b:15:9c:d6:c9:4c:
                    c5:9d:c3:7f:31:cb:42:fb:5c:63:3e:2c:e5:9c:31:
                    01:63:28:4c:f8:7e:75:8c:91:bb:da:5e:79:10:4d:
                    c9:de:9f:5a:3c:ba:b3:74:4b:4a:59:b5:0f:eb:e2:
                    c3:e6:2c:f9:5e:cb:57:ac:70:17:43:ae:53:03:c1:
                    2f:b2:06:f1:17:97:70:77:bb:66:eb:0e:75:82:7b:
                    de:f5:7e:b2:f4:dd:d4:16:28:dc:b7:64:3d:0b:55:
                    39:b6:2a:81:82:6d:f6:04:e0:c7:f1:36:40:ec:d8:
                    c4:ec:14:46:96:21:4e:88:ac:7e:1c:a6:15:e4:64:
                    bd:0e:9d:b1:9b:39:3a:04:1e:3e:4b:11:54:97:0e:
                    54:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:A5:D4:5D:CE:2B:23:5B:AA:DF:BE:8F:CA:A6:97:96:43:E9:B9:A0
            X509v3 Authority Key Identifier:
                keyid:E5:91:64:CC:5F:9B:91:03:B7:45:8C:29:C6:83:9E:94:3B:50:F6:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/2/E59164CC5F9B9103B7458C29C6839E943B50F64D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E59164CC5F9B9103B7458C29C6839E943B50F64D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/2/323830343a373736343a383030303a3a2f33342d3334203d3e20323731313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7764:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         87:6c:22:e7:c9:c9:a9:4a:72:0f:cc:53:db:ba:71:53:71:f6:
         8d:b4:b8:10:79:a8:85:e1:64:70:34:bc:e1:38:8a:1a:b1:10:
         7b:4c:15:58:9f:c3:87:ae:d4:45:b6:68:74:4a:fd:44:e3:71:
         fa:a0:b0:bc:35:96:3b:25:86:70:ce:32:83:f0:0d:b2:ba:5e:
         5f:2f:69:c7:d7:30:c0:61:31:cd:a6:dd:52:2e:f2:1e:b7:63:
         22:53:3e:eb:01:ee:d9:af:f0:81:b4:6c:6d:9a:b4:c4:50:a2:
         da:79:d4:78:59:20:57:97:f6:8b:a5:8d:15:ec:87:c6:c9:7b:
         ff:ac:36:1a:b7:b9:ae:97:46:52:cf:13:5b:ba:e5:ec:5b:99:
         aa:17:87:6d:c1:47:8e:f8:67:df:8b:5a:c6:2f:d7:ba:fa:f6:
         ac:93:f7:b4:0e:90:8d:05:3a:38:e3:d0:6c:ea:e3:0f:18:6b:
         2b:d1:00:52:10:e1:86:9e:13:41:77:e0:52:fb:d7:eb:e3:37:
         b4:b7:c7:07:f7:d3:3f:8b:b7:5c:91:24:d3:31:7c:1c:49:09:
         71:ed:d1:a9:b5:84:4b:da:ce:ec:42:f2:d5:ff:8d:3c:00:9c:
         0c:c8:b8:c5:8f:b2:b1:4e:a7:50:0e:41:28:a7:2a:b8:26:7b:
         d5:9d:99:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:50:26 2025 by rpki-client