Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/323830343a343131343a3a2f33342d3334203d3e20323636303032.roa
File:                     323830343a343131343a3a2f33342d3334203d3e20323636303032.roa (raw, json)
Hash identifier:          vqBjnocAn4tKoRLwiCseRveS8b0yxbunDxXGnqndK5o=
Subject key identifier:   7C:DD:C9:7B:78:81:02:9C:7E:C5:11:81:99:29:66:FD:15:A3:D4:3C
Certificate issuer:       /CN=3742F5D0768B3C1CD0ED56183EAFAF5938C73431
Certificate serial:       09DE288A293A60CB0537E2516C29B3E4BA2DFDC4
Authority key identifier: 37:42:F5:D0:76:8B:3C:1C:D0:ED:56:18:3E:AF:AF:59:38:C7:34:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3742F5D0768B3C1CD0ED56183EAFAF5938C73431.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/323830343a343131343a3a2f33342d3334203d3e20323636303032.roa
Signing time:             Tue 17 Dec 2024 17:18:33 +0000
ROA not before:           Tue 17 Dec 2024 17:13:33 +0000
ROA not after:            Tue 16 Dec 2025 17:18:33 +0000
asID:                     266002
IP address blocks:        2804:4114::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:de:28:8a:29:3a:60:cb:05:37:e2:51:6c:29:b3:e4:ba:2d:fd:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3742F5D0768B3C1CD0ED56183EAFAF5938C73431
        Validity
            Not Before: Dec 17 17:13:33 2024 GMT
            Not After : Dec 16 17:18:33 2025 GMT
        Subject: CN=7CDDC97B7881029C7EC51181992966FD15A3D43C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fa:4a:5f:90:6a:71:d6:3f:d2:06:4a:67:ec:
                    94:18:82:5f:e4:96:a3:98:ff:ce:c0:61:97:65:47:
                    a0:73:69:20:53:a3:4b:09:bd:ff:bc:97:86:40:88:
                    d3:16:03:a4:9a:90:83:13:eb:f0:0f:04:13:d7:99:
                    3f:b4:f1:75:6c:93:bb:57:ed:85:9d:3f:12:a6:3f:
                    62:83:50:7c:f8:21:09:68:f7:01:1c:94:71:5a:c6:
                    1a:9f:cd:96:88:0f:9e:70:3e:fc:9e:0b:3c:25:7d:
                    b3:b9:94:14:54:1b:11:3c:ca:5d:5c:24:83:c1:28:
                    f5:ea:ca:c8:71:9d:88:c8:3f:b7:86:ef:4a:4b:d9:
                    45:49:58:84:a6:29:40:68:96:54:ea:61:14:a8:e6:
                    0b:4b:13:f1:d6:9a:27:6e:fd:c8:b1:bb:20:85:6e:
                    cb:a9:f2:6c:7d:3b:82:9b:a7:d0:e8:ad:59:c2:72:
                    9a:20:0a:30:be:0b:bd:d3:ce:e2:67:3b:fc:3b:58:
                    19:07:b1:2d:14:72:6e:4b:76:20:c6:c7:2b:d0:c5:
                    a7:3f:bf:5d:04:58:4f:22:40:53:8f:53:59:72:48:
                    8d:16:23:79:ea:47:ea:d2:59:be:f2:b2:22:0d:50:
                    e3:5e:d1:be:00:a2:87:b2:6c:97:68:54:aa:3c:8d:
                    6d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:DD:C9:7B:78:81:02:9C:7E:C5:11:81:99:29:66:FD:15:A3:D4:3C
            X509v3 Authority Key Identifier:
                keyid:37:42:F5:D0:76:8B:3C:1C:D0:ED:56:18:3E:AF:AF:59:38:C7:34:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/3742F5D0768B3C1CD0ED56183EAFAF5938C73431.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3742F5D0768B3C1CD0ED56183EAFAF5938C73431.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/323830343a343131343a3a2f33342d3334203d3e20323636303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4114::/34

    Signature Algorithm: sha256WithRSAEncryption
         5e:91:25:c8:44:39:2e:4d:49:d2:57:7a:b0:6a:40:5a:6b:4d:
         91:32:27:24:e2:32:01:1c:b2:c8:88:d8:51:72:d2:33:98:40:
         ee:94:b9:3a:9d:e3:7b:e1:ee:10:61:4e:e3:f6:0c:ec:75:56:
         f0:61:06:db:99:64:27:56:12:8f:55:f2:00:f5:b7:10:d1:f4:
         2a:ac:4f:7e:69:4d:aa:7d:9a:28:62:35:f8:1a:f9:9b:27:06:
         9f:ec:67:dd:88:d0:81:aa:6f:30:c5:ab:6d:62:86:e5:9d:ea:
         eb:ab:0e:d1:39:30:83:be:2b:94:49:c4:cb:35:03:dd:50:b7:
         37:32:f5:b0:a2:d3:13:22:a2:3b:4a:a2:ef:c4:07:23:8e:9e:
         79:f9:cc:9b:4c:4a:7c:2b:a9:46:5a:c1:f3:0d:cc:b1:aa:e9:
         9e:99:51:51:e3:49:03:09:9e:15:3a:32:06:81:8d:17:77:51:
         a3:23:67:84:10:c2:6e:4b:57:a0:f3:a1:28:58:75:cb:2d:81:
         4b:ca:f4:8a:ca:c4:cd:9d:89:f2:8a:66:5e:c5:19:44:f6:a5:
         92:d6:c0:67:f1:88:65:38:0a:29:19:70:94:e4:cb:c3:81:e1:
         cb:a2:0b:fa:81:f2:fc:4a:64:d8:36:f9:54:ff:b9:e8:d9:85:
         88:cf:2d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:43:44 2025 by rpki-client