Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/323830343a353963633a343030303a3a2f33342d3334203d3e20323638373236.roa
File:                     323830343a353963633a343030303a3a2f33342d3334203d3e20323638373236.roa (raw, json)
Hash identifier:          u88Ib+t/1GTjsoDJz9VglGSkkPb/IaY/V/aRZc871Rg=
Subject key identifier:   4F:18:87:56:68:DF:F9:7D:49:F7:4A:4D:46:A4:FB:D7:3C:23:DD:85
Certificate issuer:       /CN=E3BD401A6D367E821B7AC7E5ABB510B6DE6649A5
Certificate serial:       537FAF1D50202241EFE1F017B25D758A07FD10BA
Authority key identifier: E3:BD:40:1A:6D:36:7E:82:1B:7A:C7:E5:AB:B5:10:B6:DE:66:49:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3BD401A6D367E821B7AC7E5ABB510B6DE6649A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/323830343a353963633a343030303a3a2f33342d3334203d3e20323638373236.roa
Signing time:             Thu 13 Mar 2025 18:18:39 +0000
ROA not before:           Thu 13 Mar 2025 18:13:39 +0000
ROA not after:            Thu 12 Mar 2026 18:18:39 +0000
asID:                     268726
IP address blocks:        2804:59cc:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:7f:af:1d:50:20:22:41:ef:e1:f0:17:b2:5d:75:8a:07:fd:10:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3BD401A6D367E821B7AC7E5ABB510B6DE6649A5
        Validity
            Not Before: Mar 13 18:13:39 2025 GMT
            Not After : Mar 12 18:18:39 2026 GMT
        Subject: CN=4F18875668DFF97D49F74A4D46A4FBD73C23DD85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:26:18:e4:73:c5:9f:4a:9b:c3:08:a1:3c:33:
                    2d:b1:6d:67:9d:74:56:ae:0e:ac:5b:8a:52:c8:07:
                    c9:d4:18:04:73:bc:7d:cc:07:ea:1b:a5:32:dc:7a:
                    19:7d:28:0c:44:85:e9:3b:4b:f4:e0:49:19:7f:36:
                    ad:f0:18:52:67:80:c0:d3:85:92:18:21:ca:26:75:
                    1a:57:3c:35:9d:71:07:c7:90:ef:a0:eb:3e:30:ed:
                    12:9e:23:c0:1e:48:81:3e:45:27:e7:8d:c7:0e:9d:
                    94:11:82:1c:4c:0d:6d:80:e1:56:70:38:8e:42:78:
                    16:01:39:97:8f:c1:a2:f4:24:c2:06:b7:98:bf:b8:
                    e5:a9:94:c2:88:1f:a1:ae:53:af:47:19:66:2f:90:
                    85:f6:31:e2:66:ee:d9:82:64:74:42:72:d6:01:34:
                    b1:cc:d8:a8:2c:5b:94:f1:49:f6:42:0a:88:71:ae:
                    00:31:1f:51:a6:df:f6:cf:d3:c6:dc:fa:e0:fc:57:
                    5f:4d:35:d1:b5:90:e6:e8:55:d3:8b:63:a2:2e:15:
                    8a:58:eb:f3:74:99:3d:b2:0e:15:0b:58:7d:ae:00:
                    05:2e:17:33:f8:83:12:e7:22:a4:ae:e8:e5:89:3b:
                    77:b1:e1:c2:f1:e3:ae:93:ac:51:f4:13:66:3b:9f:
                    08:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:18:87:56:68:DF:F9:7D:49:F7:4A:4D:46:A4:FB:D7:3C:23:DD:85
            X509v3 Authority Key Identifier:
                keyid:E3:BD:40:1A:6D:36:7E:82:1B:7A:C7:E5:AB:B5:10:B6:DE:66:49:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/E3BD401A6D367E821B7AC7E5ABB510B6DE6649A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3BD401A6D367E821B7AC7E5ABB510B6DE6649A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/323830343a353963633a343030303a3a2f33342d3334203d3e20323638373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:59cc:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7c:f8:f8:e9:2d:a2:5d:7f:a6:0f:83:5f:de:53:a0:0f:88:98:
         49:55:c1:74:8f:53:91:f1:cb:fb:cb:93:08:2c:1a:31:f3:e9:
         20:02:2e:5b:65:53:86:b0:31:f5:67:9e:f3:ac:a5:f7:27:a5:
         be:8b:8d:29:fb:1c:9f:3b:7f:64:47:ff:5a:03:72:b2:a4:28:
         c7:8d:69:3c:dc:02:9f:8d:7a:a4:6b:cd:cd:1a:a8:33:db:7f:
         bb:00:bf:a7:a2:4c:40:8d:81:7d:35:bb:97:a2:fb:92:27:df:
         d6:a4:55:e9:42:33:9e:3f:5f:cf:77:23:8e:a4:64:cc:c3:b6:
         82:b0:71:87:0c:78:0c:d9:f0:23:82:04:02:a2:7f:3e:a5:54:
         95:e8:a3:6f:8d:6d:26:32:be:12:72:28:20:df:47:9b:39:f2:
         1c:59:a0:2e:21:64:2b:10:2e:e3:3f:49:34:2b:1e:31:00:07:
         68:b3:a3:2a:f8:61:29:38:4e:86:cc:d3:96:87:7e:e5:82:f7:
         ec:46:3e:2f:cd:81:48:95:ab:b6:55:fc:86:79:07:20:00:59:
         69:fe:c6:93:ef:00:eb:6c:d7:d6:97:6c:0a:cf:95:cb:a3:62:
         99:08:d4:91:8f:45:7c:84:93:57:e0:51:e3:a5:84:34:75:dc:
         73:d5:5f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:35:38 2025 by rpki-client