Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPAy6dv7eieZg7BXdZMGBZVmzAqzhdUaG6WWvkhUnxuN/0/323830343a313632303a3a2f33322d3438203d3e20323633323639.roa
File:                     323830343a313632303a3a2f33322d3438203d3e20323633323639.roa (raw, json)
Hash identifier:          CnboxWpnLjOvdTmztSpPE8pxslKv5ds22b1S5mBMDJw=
Subject key identifier:   6E:7E:90:E6:ED:0D:C9:9F:21:26:DC:01:2C:12:F8:E0:3B:EF:40:25
Certificate issuer:       /CN=43B1F87146E216FB1E49CB66ABD3F94DDFC5FAD2
Certificate serial:       17A58A818E11264299E2DA144017E9BC580E71FD
Authority key identifier: 43:B1:F8:71:46:E2:16:FB:1E:49:CB:66:AB:D3:F9:4D:DF:C5:FA:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43B1F87146E216FB1E49CB66ABD3F94DDFC5FAD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPAy6dv7eieZg7BXdZMGBZVmzAqzhdUaG6WWvkhUnxuN/0/323830343a313632303a3a2f33322d3438203d3e20323633323639.roa
Signing time:             Mon 29 Jan 2024 20:56:34 +0000
ROA not before:           Mon 29 Jan 2024 20:51:34 +0000
ROA not after:            Mon 27 Jan 2025 20:56:34 +0000
asID:                     263269
IP address blocks:        2804:1620::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:a5:8a:81:8e:11:26:42:99:e2:da:14:40:17:e9:bc:58:0e:71:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43B1F87146E216FB1E49CB66ABD3F94DDFC5FAD2
        Validity
            Not Before: Jan 29 20:51:34 2024 GMT
            Not After : Jan 27 20:56:34 2025 GMT
        Subject: CN=6E7E90E6ED0DC99F2126DC012C12F8E03BEF4025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:57:85:af:6c:f0:e6:02:64:bf:4c:c0:c6:cc:
                    6f:90:04:25:6f:2c:ce:b0:45:0c:54:16:79:e5:23:
                    46:14:62:14:ec:32:ee:b0:be:3f:70:9d:d5:15:a2:
                    0e:fd:31:c1:58:db:7c:30:bd:17:14:66:5e:b7:1a:
                    6c:f5:ac:38:bf:33:08:a5:40:94:9f:d0:aa:a7:ea:
                    87:22:2d:71:2a:20:ba:66:c8:41:c4:0a:05:53:3b:
                    96:e7:0f:3c:b5:a4:03:13:b1:66:d7:a1:e3:d0:2f:
                    ed:4b:fd:58:09:e7:18:89:b9:55:fa:c4:65:79:78:
                    2c:53:2a:7d:ab:70:6d:b5:bd:a7:b5:a5:a0:22:02:
                    15:16:9b:cf:01:18:3c:8a:8d:93:0e:3b:40:36:30:
                    f7:28:c4:44:99:4e:b3:a8:5e:24:a2:23:2a:cf:ea:
                    00:2c:c4:64:da:e5:f0:5e:b5:18:1a:9a:8a:97:32:
                    44:b7:4e:89:b8:8b:d2:e3:2f:72:cd:c7:0c:c3:3b:
                    61:b2:85:17:00:35:bc:50:bb:90:2f:e6:2e:7b:13:
                    3a:39:43:d4:01:39:1a:5f:fe:c2:7d:75:0f:3a:10:
                    9e:bc:2b:34:ee:3a:51:3e:5a:81:9a:37:74:33:b0:
                    5d:0e:7d:0d:df:82:58:4e:72:87:96:48:16:42:b7:
                    1f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:7E:90:E6:ED:0D:C9:9F:21:26:DC:01:2C:12:F8:E0:3B:EF:40:25
            X509v3 Authority Key Identifier:
                keyid:43:B1:F8:71:46:E2:16:FB:1E:49:CB:66:AB:D3:F9:4D:DF:C5:FA:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPAy6dv7eieZg7BXdZMGBZVmzAqzhdUaG6WWvkhUnxuN/0/43B1F87146E216FB1E49CB66ABD3F94DDFC5FAD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43B1F87146E216FB1E49CB66ABD3F94DDFC5FAD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPAy6dv7eieZg7BXdZMGBZVmzAqzhdUaG6WWvkhUnxuN/0/323830343a313632303a3a2f33322d3438203d3e20323633323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1620::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:00:77:da:1d:30:3c:a7:88:2c:36:67:0c:db:29:f3:a2:31:
         63:c9:16:92:56:3a:09:6a:90:02:b2:2f:9c:78:c9:a3:8c:99:
         f5:e8:5b:f2:b5:35:ef:57:21:15:ab:3f:46:89:a1:ac:de:6d:
         eb:17:ae:91:9d:fc:ec:17:00:1a:ae:95:ad:38:b8:95:2d:f0:
         3a:7a:5d:52:ed:f4:2b:aa:4f:2f:b4:7e:43:76:66:4e:1b:55:
         00:9a:bd:ea:0d:f0:5f:40:98:8b:4d:3d:e6:48:9e:21:15:45:
         e6:41:27:54:b9:33:06:73:e7:17:b0:c5:9a:d0:47:01:70:b6:
         06:b9:ff:1a:16:fe:1f:d9:ae:57:98:1b:04:5e:1b:da:90:a6:
         57:87:01:a3:73:b1:9a:4a:5f:5e:5c:a8:2a:51:55:e0:ef:5d:
         6e:b7:e1:9c:37:2c:6d:ce:44:b7:4f:ef:ea:b2:ed:e4:8c:4c:
         cc:8c:74:1a:51:c4:9c:d2:83:1a:95:f5:54:8e:57:5d:cd:a7:
         c6:ca:47:49:fe:74:ac:c1:ad:b4:04:5f:7a:a1:31:e2:18:91:
         42:7a:13:d4:61:51:66:38:63:30:a3:1c:4d:94:03:d6:19:57:
         05:21:9f:43:fe:e8:84:2b:51:3c:b0:08:89:f3:96:0f:0d:7e:
         10:03:ff:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:10 2025 by rpki-client