Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/323830343a333465303a3a2f33342d313238203d3e20323635343836.roa
File:                     323830343a333465303a3a2f33342d313238203d3e20323635343836.roa (raw, json)
Hash identifier:          MxPbzktRLtDAE7U1qGIqdou0CT141L+u8DLCRflmIy8=
Subject key identifier:   F4:20:D7:01:45:84:AB:6D:0E:A7:EE:F8:B9:95:AE:CD:10:94:6D:0C
Certificate issuer:       /CN=27632DA3487449475BFE4ADEE3C17ADDED4EC60F
Certificate serial:       78F5929013A80F4A15A8917866B92D3142FC9EE8
Authority key identifier: 27:63:2D:A3:48:74:49:47:5B:FE:4A:DE:E3:C1:7A:DD:ED:4E:C6:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27632DA3487449475BFE4ADEE3C17ADDED4EC60F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/323830343a333465303a3a2f33342d313238203d3e20323635343836.roa
Signing time:             Thu 09 Jan 2025 22:19:17 +0000
ROA not before:           Thu 09 Jan 2025 22:14:17 +0000
ROA not after:            Thu 08 Jan 2026 22:19:17 +0000
asID:                     265486
IP address blocks:        2804:34e0::/34 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f5:92:90:13:a8:0f:4a:15:a8:91:78:66:b9:2d:31:42:fc:9e:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27632DA3487449475BFE4ADEE3C17ADDED4EC60F
        Validity
            Not Before: Jan  9 22:14:17 2025 GMT
            Not After : Jan  8 22:19:17 2026 GMT
        Subject: CN=F420D7014584AB6D0EA7EEF8B995AECD10946D0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1a:1b:5d:1e:43:b7:ec:eb:c3:66:28:52:fb:
                    5d:8a:03:46:78:42:2f:d9:d8:ca:2a:8b:66:77:69:
                    a2:03:a5:0f:1b:c7:ce:ea:d2:cb:41:ba:58:f6:6c:
                    7d:d2:b3:7e:56:97:bb:71:7a:eb:13:f2:5b:9f:20:
                    2f:e8:c1:ae:6c:75:5b:b9:d4:45:40:5b:af:77:33:
                    b2:0e:3a:11:03:b4:9e:2f:da:84:ff:03:99:cd:04:
                    b4:d2:16:d4:98:66:f4:27:33:ea:39:58:1a:4e:9c:
                    8d:db:d3:4f:bf:93:99:75:d2:f5:19:4d:dd:51:e6:
                    95:01:f1:45:a5:99:0a:10:29:bb:f7:05:1a:d7:2e:
                    26:05:3d:8e:20:24:9a:20:8d:c5:f2:06:5c:f0:35:
                    98:1a:62:ad:40:71:a6:fe:63:6b:da:a3:b8:f9:6b:
                    bb:91:dd:78:5b:4c:5a:cd:a2:14:07:83:ea:52:27:
                    cf:d2:6a:dc:89:51:5c:22:21:b3:c1:33:f8:dc:69:
                    87:fe:ab:36:d6:aa:9d:0c:6f:64:47:f5:88:4b:a0:
                    41:d3:08:7c:1a:94:d5:36:c7:42:61:be:39:a4:86:
                    3e:4b:06:32:76:80:13:cc:1e:bf:b0:ba:ad:38:00:
                    88:64:6f:fd:0c:68:6e:36:7b:37:b6:a6:c3:a1:d2:
                    2b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:20:D7:01:45:84:AB:6D:0E:A7:EE:F8:B9:95:AE:CD:10:94:6D:0C
            X509v3 Authority Key Identifier:
                keyid:27:63:2D:A3:48:74:49:47:5B:FE:4A:DE:E3:C1:7A:DD:ED:4E:C6:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/27632DA3487449475BFE4ADEE3C17ADDED4EC60F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27632DA3487449475BFE4ADEE3C17ADDED4EC60F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/323830343a333465303a3a2f33342d313238203d3e20323635343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34e0::/34

    Signature Algorithm: sha256WithRSAEncryption
         51:05:00:1d:c9:8e:90:b0:25:de:af:3d:e3:4b:36:94:0d:f1:
         ff:50:6d:33:fb:d5:13:cd:dc:69:65:ca:4e:65:76:1b:dc:a7:
         04:e5:81:ba:65:04:ba:bd:5f:5e:46:82:95:74:60:17:a5:35:
         36:a3:dc:00:fe:d9:81:4f:ed:28:ee:8d:f9:2a:16:a2:06:00:
         15:65:e5:ca:f7:62:0e:86:aa:51:e2:86:a4:07:ba:da:0c:f3:
         47:64:a2:3c:8a:ba:f9:5a:78:01:a1:e4:39:15:31:a4:4a:ca:
         86:60:18:d2:de:48:4f:88:f6:f1:cb:bb:2f:03:f2:e2:eb:52:
         1b:cb:62:eb:78:62:e8:21:0c:21:af:8a:ba:df:22:cf:7a:0e:
         0a:db:26:21:8e:6a:5d:ec:5f:2e:9a:c7:1f:f5:a4:8f:ac:59:
         99:67:63:2a:89:8b:25:e2:03:40:92:2d:52:57:a2:28:b3:15:
         0c:f1:9a:b4:9f:76:f2:f9:1a:37:c6:90:b5:f7:fb:6c:fd:f0:
         ae:f2:bd:3e:f1:63:9b:c0:6c:fa:7e:4f:b5:d8:75:39:e4:c4:
         db:d5:89:54:41:e8:e7:62:51:c2:c3:d6:67:ab:c9:f2:7c:ee:
         fd:3d:c7:87:a9:6e:d1:5d:df:06:7d:0b:18:97:57:88:e1:10:
         f3:d4:7b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:54:50 2025 by rpki-client