Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/323830343a3133303a323030313a3a2f34382d3438203d3e203238323634.roa
File:                     323830343a3133303a323030313a3a2f34382d3438203d3e203238323634.roa (raw, json)
Hash identifier:          Hfa6U8M8jSsMyiYGzhB7RhX5GsLqQd1pfDBpM95/H3g=
Subject key identifier:   4D:54:F2:30:B0:7E:36:1A:4E:A9:3D:27:B0:2F:2E:B9:69:43:CF:9B
Certificate issuer:       /CN=4D3D5BA9F9B5356D2A4244549680670908498017
Certificate serial:       2F9E2334FEFDFEA6E03C5CD61A7C2187219AB0EC
Authority key identifier: 4D:3D:5B:A9:F9:B5:35:6D:2A:42:44:54:96:80:67:09:08:49:80:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D3D5BA9F9B5356D2A4244549680670908498017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/323830343a3133303a323030313a3a2f34382d3438203d3e203238323634.roa
Signing time:             Thu 06 Mar 2025 13:04:59 +0000
ROA not before:           Thu 06 Mar 2025 12:59:59 +0000
ROA not after:            Thu 05 Mar 2026 13:04:59 +0000
asID:                     28264
IP address blocks:        2804:130:2001::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:9e:23:34:fe:fd:fe:a6:e0:3c:5c:d6:1a:7c:21:87:21:9a:b0:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D3D5BA9F9B5356D2A4244549680670908498017
        Validity
            Not Before: Mar  6 12:59:59 2025 GMT
            Not After : Mar  5 13:04:59 2026 GMT
        Subject: CN=4D54F230B07E361A4EA93D27B02F2EB96943CF9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:26:e8:64:89:86:ac:9a:a8:fd:1f:f3:e2:92:
                    12:b2:f8:65:6b:3c:76:09:15:df:63:dc:0e:8c:61:
                    08:e0:aa:ee:68:b3:23:99:c7:1c:c3:26:47:a1:76:
                    32:32:8d:64:61:1e:ca:69:28:79:e2:5f:d5:9a:87:
                    1c:c7:68:dd:1c:81:e7:df:10:65:ec:54:bf:52:de:
                    68:41:91:fd:29:2f:b0:fb:ce:dd:d1:73:a8:60:ac:
                    40:20:05:b1:81:cc:ef:de:bf:c7:ca:44:55:a2:f9:
                    ce:2e:00:b9:5a:92:66:1d:1c:bf:5f:38:ab:dd:16:
                    5d:33:0c:4b:f6:7e:19:90:c0:5c:55:90:95:af:46:
                    a6:eb:09:9c:26:f1:ac:f7:42:dc:c5:ba:77:67:68:
                    73:8c:03:2c:42:46:38:3d:a6:ed:4a:9e:2f:4d:b2:
                    02:b2:94:19:f7:cc:68:96:0b:98:dd:61:be:6d:fc:
                    ee:bd:78:09:4b:04:1d:a6:99:66:8e:3f:8d:f0:2a:
                    51:3f:90:d1:cc:03:fe:c7:3e:eb:de:47:75:60:3e:
                    25:b0:16:d6:74:77:2d:49:7b:e0:5a:21:98:b4:0e:
                    e9:01:31:d5:58:b2:06:6a:1c:7a:c9:bc:15:dc:26:
                    90:d7:6c:12:89:6c:46:c1:9f:58:cd:42:1e:55:86:
                    75:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:54:F2:30:B0:7E:36:1A:4E:A9:3D:27:B0:2F:2E:B9:69:43:CF:9B
            X509v3 Authority Key Identifier:
                keyid:4D:3D:5B:A9:F9:B5:35:6D:2A:42:44:54:96:80:67:09:08:49:80:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/4D3D5BA9F9B5356D2A4244549680670908498017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D3D5BA9F9B5356D2A4244549680670908498017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/323830343a3133303a323030313a3a2f34382d3438203d3e203238323634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:130:2001::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:a7:85:24:84:bd:10:c2:3f:34:f8:65:17:40:73:d8:73:dd:
         32:5c:e5:49:fb:e2:56:49:3b:b1:af:1e:a5:33:8b:75:d9:87:
         cf:79:c0:af:ce:06:87:df:72:fe:d0:79:46:77:ef:18:27:f1:
         12:68:54:be:21:72:7f:b3:2c:69:3f:88:fe:f7:03:65:74:e5:
         90:71:22:c0:99:c8:35:9a:45:30:09:a1:37:05:a2:dc:d8:3b:
         a6:3b:74:40:57:e5:55:ee:e1:be:8d:44:54:8c:88:f5:16:cf:
         e6:23:48:7b:02:e4:74:f0:2f:dd:3d:a7:21:67:80:08:7e:42:
         13:09:09:ce:df:aa:ca:97:e3:9d:c0:b6:e6:f2:72:38:40:53:
         54:f5:5a:e7:e2:c2:07:0f:5b:6d:92:51:a5:cb:ba:d1:a9:57:
         2c:e5:e7:50:d8:e9:1d:ff:0c:6a:03:b6:a8:5e:4a:b0:04:e0:
         7d:1b:ef:12:8c:fc:e3:ee:ce:06:c8:64:17:a0:2d:5e:96:31:
         69:1a:18:b6:7f:ee:87:ff:48:70:00:7c:3d:c0:34:7c:ba:f4:
         9a:4d:76:35:6d:23:32:cd:2f:64:4b:39:85:96:dd:1f:e1:8e:
         f1:5c:7f:10:4e:99:bb:bc:02:eb:57:f9:36:88:ac:a4:88:b5:
         10:da:5e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:07:50 2025 by rpki-client